Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/FOVVjhHE6lD5ldaF3iw0l2c9ERg.roa
File: FOVVjhHE6lD5ldaF3iw0l2c9ERg.roa (raw, json)
Hash identifier: I442iPSVo2MZ/j5N7A+HUBY7gJD9hTNx176dhJ5NB8g=
Subject key identifier: 14:E5:55:8E:11:C4:EA:50:F9:95:D6:85:DE:2C:34:97:67:3D:11:18
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 0198A3E0F294460480A8A4C0C9F576FE7AA9
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/FOVVjhHE6lD5ldaF3iw0l2c9ERg.roa
Signing time: Wed 13 Aug 2025 14:41:24 +0000
ROA not before: Wed 13 Aug 2025 14:41:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207350
IP address blocks: 81.12.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a3:e0:f2:94:46:04:80:a8:a4:c0:c9:f5:76:fe:7a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Aug 13 14:41:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14e5558e11c4ea50f995d685de2c3497673d1118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:00:35:6b:bb:93:fd:8b:96:dd:74:65:b0:39:
e5:d9:c6:95:56:9c:95:9d:79:06:e0:ae:86:94:4e:
75:0e:87:f9:77:79:4d:a6:18:a6:f0:00:79:40:24:
05:e9:5c:a5:ed:36:70:f3:af:48:e0:fe:3e:0d:e4:
5e:8c:db:8a:5c:d5:f7:6b:f2:98:69:0d:91:60:c2:
14:80:59:e0:0f:76:4d:d1:74:8a:64:5f:00:ca:95:
e2:28:ad:6a:7c:dd:a5:e6:ba:7e:76:cd:65:65:32:
0b:b9:1f:92:71:2b:0b:ab:2e:91:24:e9:ba:96:b6:
25:0f:e3:30:64:6a:df:5d:3a:ac:4c:e6:fd:3d:f2:
9f:3a:46:54:9f:cc:f3:40:22:2f:f8:cb:f7:40:f4:
4f:c9:a3:3a:b5:73:b2:f0:ce:6d:df:6f:df:c7:ce:
bb:2f:1d:ff:de:86:f5:fd:7a:66:cb:c9:e8:43:3f:
fc:e1:ce:ef:a7:12:23:34:21:6f:5d:61:0f:7a:50:
d0:64:0e:c0:0a:6d:97:18:46:97:9c:ae:15:10:e6:
ff:6e:2d:b8:44:70:c5:29:5f:03:d1:1f:2f:65:5a:
eb:6a:29:48:09:75:f2:a4:3a:f8:9f:1e:b1:ab:b8:
99:ff:39:05:3b:e0:59:89:75:4b:69:f0:90:76:95:
86:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E5:55:8E:11:C4:EA:50:F9:95:D6:85:DE:2C:34:97:67:3D:11:18
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/FOVVjhHE6lD5ldaF3iw0l2c9ERg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.12.46.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:36:17:92:a9:7d:8e:0a:1e:b6:06:c6:92:7b:87:13:87:03:
c3:28:23:5f:f5:5d:32:fe:3a:a1:bf:16:ee:f9:a2:d6:58:92:
e5:35:8c:28:47:56:ce:34:46:7f:f4:78:5b:5e:f3:91:70:0b:
ad:54:25:91:c4:99:f6:3d:1b:c7:f5:72:d8:8c:f6:6c:6f:75:
b5:1e:29:d5:74:8e:8d:04:a8:e2:8d:2d:1c:05:3c:2a:da:f1:
af:38:99:c5:f6:4b:2c:4f:ae:8c:5c:a7:f0:15:7c:09:f5:60:
5e:77:c0:b7:16:b0:09:fa:5e:f4:d8:09:ed:58:f1:dd:8b:eb:
2f:02:54:a2:7a:46:dd:9f:5e:63:6e:e9:fb:e2:be:87:a9:3d:
30:dc:8e:89:86:ac:64:74:2a:ef:cf:d0:48:06:94:a2:ea:26:
db:30:77:28:ff:9a:e1:7f:03:ea:e3:3e:2c:9b:d9:ee:d5:90:
7e:d6:61:e3:99:c6:e8:d8:b7:78:ad:82:d5:84:1e:ab:d1:20:
cd:e7:ac:28:16:af:a2:84:57:98:74:f8:94:ad:88:00:19:e5:
a4:6e:d4:10:4b:10:54:47:ab:e5:df:cd:5e:47:e2:d9:c9:76:
28:b2:de:70:35:0f:53:02:8f:66:e6:a1:b3:8f:c3:0d:fe:2a:
fa:9b:d3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:06:27 2025 by rpki-client