Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/fWkO_nMU9rRbT1vv317suxGfiFg.roa
File: fWkO_nMU9rRbT1vv317suxGfiFg.roa (raw, json)
Hash identifier: 71W0DXyZbzp02OBdc5SC7HWWUsIaR2zD053KH0bOdg0=
Subject key identifier: 7D:69:0E:FE:73:14:F6:B4:5B:4F:5B:EF:DF:5E:EC:BB:11:9F:88:58
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01985C03A8F2185499173B9877FE326152B4
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/fWkO_nMU9rRbT1vv317suxGfiFg.roa
Signing time: Wed 30 Jul 2025 15:46:40 +0000
ROA not before: Wed 30 Jul 2025 15:46:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214919
IP address blocks: 94.103.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 09:28:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5c:03:a8:f2:18:54:99:17:3b:98:77:fe:32:61:52:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 30 15:46:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d690efe7314f6b45b4f5befdf5eecbb119f8858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:73:3c:90:c9:77:35:13:54:d0:41:fb:1c:7c:
a6:b7:17:bf:be:5c:3b:57:c1:fd:ea:b6:fd:f9:54:
11:ea:5f:dd:19:e0:62:c3:b4:6d:26:9a:f4:a5:75:
f7:69:2c:d0:66:58:96:6a:61:90:03:05:7e:bb:cd:
d8:5f:f1:a0:32:73:84:fb:1d:45:fe:41:5f:fd:55:
d7:47:8a:ff:b4:20:c8:0a:8e:6a:ad:e3:34:63:83:
7f:b6:89:29:3c:10:bf:8a:12:6d:83:4d:25:70:1d:
1b:09:21:57:5e:c6:42:62:34:c4:47:2f:c7:0c:ae:
cf:6c:74:35:5e:31:1e:ad:d8:74:d0:4c:51:c2:c4:
fd:10:11:fd:f2:a2:a9:2f:39:0e:8d:d0:ef:89:03:
75:50:9d:02:ab:98:ed:9d:68:b1:5e:7b:8f:df:bc:
0a:84:74:b1:bf:99:97:e6:b3:83:20:bd:e3:cc:ac:
6e:27:a4:3e:4d:51:8e:42:c7:14:1e:43:27:97:38:
cf:29:2c:c5:c8:30:99:40:9c:ca:44:be:36:c4:27:
c8:d4:f0:68:44:c8:42:6a:90:bd:ca:fe:61:30:d1:
90:c1:7b:a7:e3:36:02:04:ad:8d:cd:97:a6:12:6d:
92:98:d6:c4:22:41:f6:05:52:7c:7f:80:1d:3d:76:
a2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:69:0E:FE:73:14:F6:B4:5B:4F:5B:EF:DF:5E:EC:BB:11:9F:88:58
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/fWkO_nMU9rRbT1vv317suxGfiFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.168.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:40:1a:e6:cb:b5:10:48:86:8d:b7:1e:eb:90:94:e4:ab:4b:
82:b8:95:e5:e1:1b:d4:ca:ec:54:ee:69:a0:70:52:80:73:10:
9e:0f:22:78:dd:94:ee:50:75:07:e0:d6:ef:bd:f2:d2:d8:aa:
e4:83:30:63:b1:3e:33:f4:e7:cb:16:0c:c7:d5:54:eb:7e:64:
30:97:9a:f6:10:7c:46:6a:c3:88:d3:3d:6c:f5:8e:8e:2e:ff:
db:55:7e:f5:b6:41:8b:33:39:f4:7f:61:a0:fe:34:96:51:48:
04:28:fe:1d:ae:eb:93:a3:2b:9b:b3:25:43:3c:2a:65:3b:28:
ba:95:8d:c2:87:8c:26:21:36:e0:5e:10:79:21:ed:be:07:64:
b2:73:23:92:91:3f:27:6c:8b:bf:eb:71:9b:05:db:53:1a:9a:
92:00:9f:03:cc:06:ef:ab:00:45:1c:24:1d:b9:9e:de:d4:06:
b1:a8:46:65:cf:d5:c2:7d:70:b3:6e:e1:b1:9a:91:46:29:97:
b8:21:37:bf:cf:df:36:4f:0c:a3:df:c2:48:32:96:9f:3c:fc:
72:93:a6:3e:39:70:e1:5d:37:f8:b4:17:18:b0:76:cf:c4:bf:
a9:71:e7:f3:06:3f:44:eb:20:18:26:a2:48:ca:e0:54:e8:68:
b0:c9:78:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:09:59 2025 by rpki-client