Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/1-vMQpoPzRNRomoOOMlQ_RFieN5E.roa
File: 1-vMQpoPzRNRomoOOMlQ_RFieN5E.roa (raw, json)
Hash identifier: jxr1drUW5D4B447tGRDp4ctx0qJ8sRRfploxS6UI7zo=
Subject key identifier: FA:F3:10:A6:83:F3:44:D4:68:9A:83:8E:32:54:3F:44:58:9E:37:91
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 0199BD4B7114CEFB0714AD1898A998CEF674
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/1-vMQpoPzRNRomoOOMlQ_RFieN5E.roa
Signing time: Tue 07 Oct 2025 06:11:01 +0000
ROA not before: Tue 07 Oct 2025 06:11:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215691
IP address blocks: 213.220.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 12:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:bd:4b:71:14:ce:fb:07:14:ad:18:98:a9:98:ce:f6:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Oct 7 06:11:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=faf310a683f344d4689a838e32543f44589e3791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6d:ed:47:b2:68:a0:fc:58:ff:1f:62:f7:90:
75:46:a6:e5:7d:d7:ea:30:d6:6a:31:0b:24:c2:96:
be:a7:49:c2:31:2a:22:56:3d:91:b2:ec:be:52:48:
56:7a:64:61:f2:3d:0c:5b:97:2e:9e:77:c1:6e:20:
8f:be:99:33:18:b3:90:7f:03:4b:68:33:ad:9e:fa:
a4:bd:f1:df:7e:93:f4:a8:32:25:96:46:9e:3c:af:
6f:21:fa:5a:5a:ce:ea:7e:c8:46:c8:03:ef:23:df:
91:48:43:83:e8:35:ac:5d:06:95:83:60:39:b9:7f:
b1:20:54:a6:f5:77:91:5e:4b:e4:d8:99:40:29:40:
b8:9b:8c:2a:4f:87:77:56:e0:e3:0d:3c:ff:4d:c6:
db:8a:56:f6:ab:2d:62:45:1a:7d:a7:3f:d7:c0:e9:
d5:88:02:1e:ad:dd:bd:0e:47:37:0c:40:e3:4c:71:
93:b8:72:44:41:6d:ff:e5:7b:fb:8b:5a:c2:15:a4:
5e:fd:1e:e1:ad:68:7b:4d:b1:73:8c:58:18:44:b5:
29:05:30:14:1f:51:a7:c5:e8:29:06:bd:55:c1:db:
68:0b:e6:b3:09:ba:13:33:59:5e:c2:0f:5b:04:4a:
ec:91:b6:78:86:6f:fc:c2:5b:b1:dc:7e:14:4c:3f:
af:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F3:10:A6:83:F3:44:D4:68:9A:83:8E:32:54:3F:44:58:9E:37:91
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/1-vMQpoPzRNRomoOOMlQ_RFieN5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.220.20.0/24
Signature Algorithm: sha256WithRSAEncryption
17:23:90:26:53:09:b6:f9:2d:30:ef:39:85:6f:f8:10:7c:c0:
81:b9:2a:08:d4:f9:f7:71:8f:bc:35:f9:26:82:03:62:10:0f:
c0:bf:5f:5d:bf:dc:da:38:fa:fa:ff:4b:01:07:18:a2:a8:03:
79:9d:25:2f:85:e4:b9:97:04:a6:ee:4d:45:d1:82:47:35:e3:
ff:e6:1a:6e:ae:2e:d6:78:36:33:ab:cc:d0:22:2b:f9:8c:eb:
99:12:a0:cc:c0:24:5b:8c:57:75:2a:8c:71:47:10:a7:92:88:
ff:3a:a1:26:49:6a:0b:1d:3d:4c:77:00:97:b6:1f:4c:4b:8c:
6e:b4:cb:07:19:88:44:71:4d:2c:cd:a7:6c:47:74:2f:2d:ef:
44:b6:2d:a9:92:da:06:8f:82:8d:3e:f4:84:d9:8d:7f:de:3a:
fb:ae:cb:8a:4d:f0:44:0a:87:00:7d:dd:70:49:8f:dd:c1:67:
b5:bc:56:28:9f:82:f9:fb:01:b9:22:81:77:d3:31:f6:cf:a2:
70:f3:cb:d2:b8:ad:f2:3c:be:04:5f:af:39:de:24:3b:a1:69:
b8:6e:5c:e1:22:fc:71:2c:06:5c:bc:da:b3:3b:05:aa:1a:f6:
00:6e:50:9e:b2:32:fb:87:8d:35:ec:95:4e:08:76:4d:a3:69:
49:2e:90:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:23:09 2025 by rpki-client