Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/FZLI5RtSA4kaiC9-iqp98IFqzZ4.roa
File: FZLI5RtSA4kaiC9-iqp98IFqzZ4.roa (raw, json)
Hash identifier: 1dBIIUlwxv4tb+guDbLPqHc6Xon9X+y8vc6vwmotf4k=
Subject key identifier: 15:92:C8:E5:1B:52:03:89:1A:88:2F:7E:8A:AA:7D:F0:81:6A:CD:9E
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 0199E1CCC8C2609F015C178BEE155BA3719B
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/FZLI5RtSA4kaiC9-iqp98IFqzZ4.roa
Signing time: Tue 14 Oct 2025 08:18:38 +0000
ROA not before: Tue 14 Oct 2025 08:18:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204921
IP address blocks: 2a0f:7803:f4b0::/44 maxlen: 48
2a0f:7806:fff0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e1:cc:c8:c2:60:9f:01:5c:17:8b:ee:15:5b:a3:71:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Oct 14 08:18:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1592c8e51b5203891a882f7e8aaa7df0816acd9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d1:6b:90:dd:67:88:f5:6e:20:61:96:51:39:
b3:2e:50:1c:8f:da:5b:5e:5c:99:c5:fb:b9:bc:a0:
82:ff:4c:93:d8:2a:87:77:31:d9:41:27:81:ff:7d:
20:ef:42:a2:2c:a4:31:e9:40:f1:67:e3:54:f3:b8:
19:08:3a:78:7f:1b:61:ae:cc:67:21:ec:08:49:9c:
b8:7d:34:b3:87:c7:32:fc:df:27:c8:ae:21:d0:df:
25:0a:07:25:ca:03:13:74:83:7b:37:ef:56:31:7e:
4c:e9:f5:4b:5d:01:13:84:87:49:76:29:3f:cb:19:
86:fe:ee:5f:78:2e:ac:e2:90:14:26:b1:ca:19:de:
e9:10:3f:b4:d9:51:46:8c:d0:f6:a5:2d:ec:0f:d0:
3f:09:ee:67:b6:93:c8:37:38:56:1e:e0:0d:e4:6b:
c1:02:52:2a:f0:9a:8f:9f:92:64:5e:f9:39:f3:ac:
13:bf:64:ec:93:85:cd:77:5c:09:b4:6d:3e:15:f3:
46:0b:cf:61:02:3b:5e:1c:b2:ff:81:a7:da:b3:4a:
ee:24:e2:e6:b1:44:e4:bc:8d:63:a0:9f:8b:29:8f:
f4:01:5d:27:df:3f:54:4b:5a:a0:d0:9e:1b:1e:29:
3c:49:aa:a4:f2:c5:0a:44:af:28:fb:a4:41:62:e4:
36:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:92:C8:E5:1B:52:03:89:1A:88:2F:7E:8A:AA:7D:F0:81:6A:CD:9E
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/FZLI5RtSA4kaiC9-iqp98IFqzZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:f4b0::/44
2a0f:7806:fff0::/48
Signature Algorithm: sha256WithRSAEncryption
14:7c:16:c8:b8:67:a5:00:ad:aa:6e:f2:63:21:74:47:de:2d:
6a:c4:99:66:94:b8:bf:ce:2a:3e:90:5f:df:73:e4:ad:7e:eb:
1a:ab:4a:16:17:23:de:9c:66:c2:3b:ab:01:ca:c0:66:dd:d1:
3d:5e:44:78:bf:84:1a:14:32:2e:23:2a:9f:e8:17:fc:d8:21:
db:22:a6:10:0c:35:9d:80:4a:6f:46:f1:2b:8b:3b:5d:70:7f:
d3:6e:b7:de:7c:f6:29:fc:45:8e:c2:ef:03:40:df:25:0b:3e:
f9:43:43:cb:bd:d8:43:e1:e1:07:4c:62:b1:cb:01:12:28:43:
8d:5e:69:9a:56:ff:58:0c:23:22:6c:36:71:ad:6c:d3:26:d5:
70:36:ce:05:e2:27:9d:de:73:5b:f3:9b:6d:d3:f9:45:23:19:
a3:3b:4c:06:0e:94:f4:38:7b:d6:5a:94:5e:be:e0:24:82:3e:
19:69:89:53:53:5e:52:37:f9:b5:91:dd:27:65:08:ec:9e:03:
47:dd:20:97:3a:ee:1b:5e:ba:d3:13:c6:60:c0:24:62:57:75:
8d:83:67:cf:e2:ff:d0:b4:ef:3e:d1:f6:f5:f5:6e:6d:76:2d:
36:fd:c6:55:16:b2:c7:fe:8d:a9:ec:1c:38:93:8b:a0:4b:ea:
fc:fa:52:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:51 2025 by rpki-client