Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/377b97-3830-4067-b0bf-f807fd67b54f/1/FO2yOCStuvN-G30wp_1YO7jAtJQ.roa
File: FO2yOCStuvN-G30wp_1YO7jAtJQ.roa (raw, json)
Hash identifier: 86zJ2vb8NETGOzpiOhgBq69QPVqk1M4tQ+6yHOa0RZc=
Subject key identifier: 14:ED:B2:38:24:AD:BA:F3:7E:1B:7D:30:A7:FD:58:3B:B8:C0:B4:94
Certificate issuer: /CN=110274b45d8fed463ed1e766ed71770ffd899186
Certificate serial: 01999C7A93BCC132A714EE5EF67C34EB1C02
Authority key identifier: 11:02:74:B4:5D:8F:ED:46:3E:D1:E7:66:ED:71:77:0F:FD:89:91:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQJ0tF2P7UY-0edm7XF3D_2JkYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/377b97-3830-4067-b0bf-f807fd67b54f/1/FO2yOCStuvN-G30wp_1YO7jAtJQ.roa
Signing time: Tue 30 Sep 2025 21:15:02 +0000
ROA not before: Tue 30 Sep 2025 21:15:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204599
IP address blocks: 185.245.136.0/24 maxlen: 24
185.245.137.0/24 maxlen: 24
185.245.138.0/24 maxlen: 24
185.245.139.0/24 maxlen: 24
2a0d:5b80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/377b97-3830-4067-b0bf-f807fd67b54f/1/EQJ0tF2P7UY-0edm7XF3D_2JkYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/377b97-3830-4067-b0bf-f807fd67b54f/1/EQJ0tF2P7UY-0edm7XF3D_2JkYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQJ0tF2P7UY-0edm7XF3D_2JkYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9c:7a:93:bc:c1:32:a7:14:ee:5e:f6:7c:34:eb:1c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=110274b45d8fed463ed1e766ed71770ffd899186
Validity
Not Before: Sep 30 21:15:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14edb23824adbaf37e1b7d30a7fd583bb8c0b494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0a:9c:7f:01:4c:1d:20:8e:d1:e4:9b:5e:96:
68:3c:78:ef:b9:99:a1:b1:31:dd:0e:f2:23:11:05:
62:e3:bf:9f:78:f1:67:96:ae:f0:4a:d4:4a:19:62:
b0:67:3d:f2:c1:a9:62:8b:db:1f:c5:5a:f4:ed:67:
f8:e6:22:2b:6b:44:b8:98:38:1e:d4:50:ee:8a:8d:
a1:16:33:23:e8:c9:7f:cb:97:26:e6:50:4c:ee:62:
a1:0a:0b:25:bc:7b:9a:c0:45:4c:74:cb:73:f5:12:
df:3b:70:69:cb:2f:fe:a6:15:14:fe:36:0a:f4:34:
db:66:f2:03:98:9c:c0:46:c4:bf:d6:3a:79:2b:56:
41:65:e3:19:81:79:e3:28:fe:8b:69:ad:96:90:a7:
0f:ef:84:36:e2:7a:f1:9f:93:0f:1e:6a:a0:f7:b9:
12:4a:4f:ab:bd:23:5e:2f:24:f5:0b:34:9d:6f:29:
73:2c:ec:22:22:86:e3:2a:95:8c:4b:6c:fc:d3:76:
57:9b:7d:97:b2:30:63:d8:54:a9:e4:b5:e3:09:3e:
89:70:cf:85:07:e3:8f:f4:b1:cb:36:74:08:3a:44:
ab:9d:88:95:b4:11:8f:fd:fc:6e:ef:fa:f3:0e:9b:
eb:88:e2:85:69:ab:1c:2f:0c:23:e3:a7:ef:c9:ae:
52:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:ED:B2:38:24:AD:BA:F3:7E:1B:7D:30:A7:FD:58:3B:B8:C0:B4:94
X509v3 Authority Key Identifier:
keyid:11:02:74:B4:5D:8F:ED:46:3E:D1:E7:66:ED:71:77:0F:FD:89:91:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQJ0tF2P7UY-0edm7XF3D_2JkYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/377b97-3830-4067-b0bf-f807fd67b54f/1/FO2yOCStuvN-G30wp_1YO7jAtJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/377b97-3830-4067-b0bf-f807fd67b54f/1/EQJ0tF2P7UY-0edm7XF3D_2JkYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.136.0/22
IPv6:
2a0d:5b80::/29
Signature Algorithm: sha256WithRSAEncryption
10:ec:6f:4c:76:a0:85:53:f5:89:d1:f6:7e:02:61:fb:f7:88:
b4:58:bd:b1:00:2d:11:6a:a8:70:87:53:5f:e1:2b:38:5e:13:
d1:86:9c:03:73:3e:88:a3:99:e5:fa:9d:a7:e6:19:d8:a7:09:
4b:ab:b6:11:89:7a:f0:2b:4a:a8:97:43:a1:88:de:ba:7e:d3:
ae:ae:45:6e:bd:fa:bb:41:c5:a3:38:a5:7f:eb:b4:9b:e0:16:
dd:0c:a3:26:8c:db:4c:79:d2:74:9a:13:bb:8e:31:89:bb:cd:
d1:48:80:bc:b3:cf:f4:8e:41:a2:03:c8:18:b9:6c:b1:83:cc:
6c:ab:e9:3b:85:f6:b6:0b:6e:f3:66:6d:67:05:57:73:03:bb:
4e:45:d6:af:6e:3c:b2:97:cf:da:59:5c:0c:67:bd:cc:b0:cf:
d8:21:fd:2c:0c:6e:a4:41:72:cb:60:55:59:dd:89:cc:2d:0a:
50:de:99:e0:8d:9d:b4:16:b3:e1:5c:fd:81:79:c2:b8:a2:af:
11:8b:b7:0a:0d:0a:04:7f:cc:f0:4c:1c:91:00:9e:4a:1c:f1:
11:c0:3d:8b:a3:83:24:25:af:62:33:4d:38:f3:26:de:fb:ec:
fc:05:8a:30:21:8c:39:ca:c2:6c:d9:77:13:ad:05:d2:49:93:
b7:c8:e0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:24:09 2025 by rpki-client