Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FAVCeJ68hIMi6xRRp26epzmEZ5w.roa
File: FAVCeJ68hIMi6xRRp26epzmEZ5w.roa (raw, json)
Hash identifier: Qe5PbBcURX0xe1q1waDH43JEz6xDpgkywBxxRiKthGc=
Subject key identifier: 14:05:42:78:9E:BC:84:83:22:EB:14:51:A7:6E:9E:A7:39:84:67:9C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01985A352979CE673E6B8C244266A9232ED0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FAVCeJ68hIMi6xRRp26epzmEZ5w.roa
Signing time: Wed 30 Jul 2025 07:21:30 +0000
ROA not before: Wed 30 Jul 2025 07:21:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209693
IP address blocks: 45.88.88.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
87.121.86.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
176.125.254.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
194.48.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5a:35:29:79:ce:67:3e:6b:8c:24:42:66:a9:23:2e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 30 07:21:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=140542789ebc848322eb1451a76e9ea73984679c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1c:cb:04:f8:2e:80:c8:25:1f:ba:c5:6d:34:
df:7d:0f:b3:78:91:c1:71:48:43:e3:c5:22:d2:3e:
b3:16:fb:c0:e5:07:00:7c:09:37:13:dc:8a:e7:df:
7d:ee:64:ae:9e:6a:bc:3a:7f:f5:45:9a:30:e9:08:
62:fb:95:08:35:73:e6:12:e6:87:0c:85:ed:4b:37:
15:17:c1:c5:18:27:ac:19:42:d5:1a:37:01:36:0e:
98:14:0d:d3:0e:e0:12:b2:bc:28:91:28:17:cc:62:
4f:a7:4b:dc:1a:e8:27:ff:16:97:a8:75:96:59:7c:
41:38:93:a3:6e:a2:34:66:b4:94:cb:f9:11:8a:b5:
e9:f3:7c:8e:b9:7c:c7:8c:79:30:4f:14:7d:91:59:
92:a3:1a:df:9e:52:42:88:c3:dc:64:f1:5e:14:28:
89:9e:bc:26:b5:f3:22:7b:b8:68:9c:0a:1d:18:e6:
c2:c5:ae:67:63:75:91:16:e5:01:46:3d:b9:f1:35:
92:a1:3d:3b:ed:7f:91:f5:ce:82:23:27:06:e9:cb:
dc:ad:17:e4:ea:6f:f6:6b:9d:f5:e2:74:94:8a:70:
23:9b:bf:c0:e4:29:8c:56:4c:a7:ca:57:a1:91:d0:
84:9a:47:c3:eb:0d:56:7f:de:0e:8e:09:f0:b5:9a:
18:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:05:42:78:9E:BC:84:83:22:EB:14:51:A7:6E:9E:A7:39:84:67:9C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FAVCeJ68hIMi6xRRp26epzmEZ5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.88.0/24
83.219.97.0/24
87.121.86.0/24
87.121.221.0/24
141.98.1.0/24
176.125.254.0/24
185.252.177.0/24
194.48.250.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:8e:d7:93:57:95:d6:b6:50:87:ec:cc:42:f6:09:43:69:37:
4b:5e:b2:a7:21:f1:64:0e:80:b2:35:3b:bc:24:2f:f7:af:69:
c5:2d:da:51:f3:a7:13:78:f6:a5:4a:73:54:fa:24:d9:40:a3:
23:f3:65:0a:e7:21:ac:90:2d:6d:b8:dd:cb:14:b8:06:82:1d:
1c:11:0e:28:ef:85:00:3c:32:d3:6c:3d:c9:03:1a:bc:2c:cb:
0b:03:05:f3:4a:ad:b1:5f:ac:7d:1d:69:cf:81:8c:31:b4:bb:
d8:c1:f3:01:c0:55:50:96:d5:ab:2c:f7:87:50:a2:27:1d:82:
8b:0d:5d:ee:5e:69:5d:a7:0f:7c:7e:97:03:7b:98:ac:35:2d:
a6:4a:c8:78:94:50:5e:d3:a6:7b:79:a3:b6:29:88:24:fb:23:
55:d2:19:8b:c3:20:56:6e:bd:fd:a7:61:d0:0a:a3:6b:c9:58:
af:33:3a:bf:0c:2e:ca:ff:c3:8f:ce:0e:25:78:7d:dc:23:2c:
88:e7:2e:8a:cd:f4:23:6f:ba:0b:3c:ea:c3:c7:97:6c:21:cb:
8b:f3:6f:3b:2d:c4:f1:0a:9e:b7:27:ce:27:da:3b:6b:b8:f3:
ef:db:f5:5b:fd:4f:ad:ed:db:b0:7e:a3:ce:1d:70:2a:15:ab:
b6:cc:70:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:48:15 2025 by rpki-client