Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/FDe_pjW_jnnn_wQOP-AVXix4Szo.roa
File: FDe_pjW_jnnn_wQOP-AVXix4Szo.roa (raw, json)
Hash identifier: VtZUc2Nt2trLnWpsaaIqK/XsZumvjhDGxHdBVKEJhRw=
Subject key identifier: 14:37:BF:A6:35:BF:8E:79:E7:FF:04:0E:3F:E0:15:5E:2C:78:4B:3A
Certificate issuer: /CN=e27e1dd07466278036ba5cd943d7b0e021cf8628
Certificate serial: 019899B1846C524128FBBE25497D439430C6
Authority key identifier: E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/FDe_pjW_jnnn_wQOP-AVXix4Szo.roa
Signing time: Mon 11 Aug 2025 15:13:24 +0000
ROA not before: Mon 11 Aug 2025 15:13:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213522
IP address blocks: 89.150.62.0/24 maxlen: 24
185.48.5.0/24 maxlen: 24
2a14:ec0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:99:b1:84:6c:52:41:28:fb:be:25:49:7d:43:94:30:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e27e1dd07466278036ba5cd943d7b0e021cf8628
Validity
Not Before: Aug 11 15:13:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1437bfa635bf8e79e7ff040e3fe0155e2c784b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ed:42:c0:d9:cb:d2:8a:df:f0:9e:50:25:0f:
8d:27:ec:f4:9c:5d:e7:0a:72:23:49:24:0b:59:cd:
60:32:d4:fe:af:85:a7:e1:d8:0b:d4:b9:62:47:24:
7d:0c:ae:5c:82:62:db:f1:cf:42:67:e8:8a:ee:fa:
3c:fb:d8:f5:42:b6:e0:60:b0:0b:f4:26:f6:c0:b3:
77:3a:b7:00:f9:9d:c9:0f:16:c1:16:d9:a5:3d:79:
0a:35:f5:d7:15:cc:95:90:eb:9a:de:23:50:57:c4:
c3:9a:35:23:99:2f:e2:9a:94:3b:0e:46:19:d9:55:
14:51:f6:52:4e:33:a9:af:3c:d5:6e:99:dd:b1:90:
8c:2e:32:53:10:e3:dd:36:48:40:6f:09:a2:82:a7:
6b:f4:b2:e6:b9:82:e6:a3:68:db:99:f3:b4:e3:24:
2e:ed:88:54:fc:60:52:97:df:61:6f:94:65:f8:83:
25:7f:1d:94:a2:e6:4a:be:49:45:86:af:50:81:3d:
db:23:aa:d2:b5:90:a4:5c:c8:5a:0d:38:7f:f6:2d:
77:03:84:9e:34:49:51:f9:f2:29:7d:88:68:3a:46:
9d:51:86:8e:2f:41:e9:92:6c:da:0c:fd:e7:e5:1d:
d5:d6:7d:17:6a:49:b2:ed:fd:cf:72:65:a8:4a:a2:
b7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:37:BF:A6:35:BF:8E:79:E7:FF:04:0E:3F:E0:15:5E:2C:78:4B:3A
X509v3 Authority Key Identifier:
keyid:E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/FDe_pjW_jnnn_wQOP-AVXix4Szo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.150.62.0/24
185.48.5.0/24
IPv6:
2a14:ec0::/29
Signature Algorithm: sha256WithRSAEncryption
00:e0:f1:3d:97:1a:f0:c5:f9:62:5a:86:77:fb:5b:22:ee:dc:
a7:89:41:34:53:fb:d6:0d:58:66:6f:12:e9:20:a6:49:a2:76:
79:76:e5:90:b7:eb:88:74:44:83:60:c3:44:aa:7b:6e:06:48:
ff:10:08:c7:c8:b9:24:b5:fb:dc:ae:d1:f4:c7:9a:e0:3a:c5:
71:fb:ed:14:ff:14:06:a0:3d:1b:03:a6:7b:52:f5:8e:a7:5a:
0e:b7:89:55:6b:46:f0:cb:33:dd:4e:be:bb:45:23:d7:0f:ed:
02:a5:6d:06:4f:23:2a:ae:4e:a0:c8:9a:19:41:30:f4:42:3e:
8f:42:e3:b4:51:8c:c7:4b:65:65:6b:89:9b:97:c1:b2:96:ac:
9e:55:f7:40:2b:3e:2f:b7:00:77:0d:40:51:4e:c9:7e:79:10:
2e:4a:40:f5:30:b2:d2:f4:0d:8d:48:e9:ca:b1:10:47:d6:59:
91:d4:ff:18:05:34:54:4d:f9:a4:1f:19:aa:fa:58:81:31:ff:
16:f9:1d:b1:a6:94:9a:16:e8:66:13:80:45:f5:ff:e6:e1:ed:
92:4d:b2:31:ab:73:fd:0d:7f:36:cd:b8:91:32:c7:ce:fa:d2:
9e:4b:52:47:33:cf:7c:0b:2a:2b:2d:f2:77:7f:e2:42:b2:59:
af:14:0c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:33:07 2025 by rpki-client