Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/f97vb-YTeT_kKt4svgV-wYDtB8c.roa
File: f97vb-YTeT_kKt4svgV-wYDtB8c.roa (raw, json)
Hash identifier: yuhAWcjK/cSLsxlmkkwjaaBBcc660qJFjk52ZE+FwvE=
Subject key identifier: 7F:DE:EF:6F:E6:13:79:3F:E4:2A:DE:2C:BE:05:7E:C1:80:ED:07:C7
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019A086589002C0A9A37CA01E97BFD150C1A
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/f97vb-YTeT_kKt4svgV-wYDtB8c.roa
Signing time: Tue 21 Oct 2025 20:11:03 +0000
ROA not before: Tue 21 Oct 2025 20:11:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36530
IP address blocks: 109.122.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:08:65:89:00:2c:0a:9a:37:ca:01:e9:7b:fd:15:0c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Oct 21 20:11:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fdeef6fe613793fe42ade2cbe057ec180ed07c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:92:5f:29:e1:2e:e4:5f:cd:57:5a:2b:0b:72:
02:e7:de:cd:cb:d2:89:25:0f:95:88:33:72:d4:8a:
f5:6c:f7:73:ce:a5:be:60:c0:0d:0f:19:a1:c5:23:
7e:fa:cc:31:5d:73:d6:ab:57:e6:9c:57:ec:70:d8:
a2:47:5a:c7:7a:9a:35:ff:9f:2f:31:cb:ba:c4:59:
81:d3:62:31:4e:3c:5a:fb:c5:dd:f5:71:d7:63:03:
65:a8:75:14:ab:77:76:5c:a5:64:67:69:aa:b7:80:
70:d5:67:65:1a:8c:95:b4:f9:ca:d6:5c:85:65:f2:
92:0b:18:2e:4c:c3:81:13:4e:8a:9d:70:da:5c:5c:
46:1b:e0:dd:1d:37:7e:52:0a:38:61:47:33:09:1b:
a1:34:ca:4f:82:f0:6d:19:18:6d:b9:bc:02:b1:14:
eb:c8:d1:cc:b5:c3:5b:10:23:0f:ce:cd:7b:78:31:
95:da:43:db:89:1c:e2:1d:64:61:6c:41:a8:cb:50:
c1:70:25:5f:f7:cf:12:6e:95:e3:74:01:38:2b:62:
31:5c:b2:a8:50:58:fd:5f:4f:dd:83:39:01:32:f6:
1f:d8:c1:38:ab:56:5d:f8:b8:6b:bf:50:95:92:e4:
f5:8e:62:d9:f9:22:c4:11:c4:09:98:ac:b3:9d:82:
bc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DE:EF:6F:E6:13:79:3F:E4:2A:DE:2C:BE:05:7E:C1:80:ED:07:C7
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/f97vb-YTeT_kKt4svgV-wYDtB8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.26.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:bd:a8:ca:a2:36:5b:58:bb:99:61:67:38:ad:0b:87:84:05:
1a:f7:e5:c6:58:b5:82:ad:e1:2f:8c:8c:e0:28:cf:7a:10:bd:
6a:b4:48:b4:ca:ce:c5:8e:f9:2f:de:a3:37:c8:9f:76:a8:4e:
18:b4:1b:71:f8:8d:b2:f8:32:0f:02:6e:68:5f:ce:6c:8d:05:
35:f2:d6:00:04:ce:d4:0f:af:79:78:f4:e4:a7:43:c1:ad:d8:
4a:d3:84:95:2e:23:68:3b:f9:f3:85:d9:94:b5:25:b7:dc:53:
32:65:16:4a:59:f7:13:b2:24:9d:b0:d3:f2:0d:5a:a6:e6:33:
0a:c2:59:db:37:04:76:6f:61:84:ee:e6:d0:45:ea:c6:a0:dc:
3d:8a:56:31:32:1d:0b:7b:09:4b:e5:d7:ce:fb:c1:9d:2b:ae:
f4:d3:66:ad:d4:1b:14:74:99:34:ec:6d:75:ce:23:08:57:80:
e5:20:49:b3:65:fe:69:9e:f6:31:a5:20:26:25:ad:1b:6c:db:
c2:99:bc:57:e7:d1:cf:31:51:9f:88:55:04:e0:a1:bc:96:c0:
b3:ed:56:fc:6f:8c:dd:36:1c:48:15:b0:eb:be:fd:a8:80:68:
09:a8:37:30:96:2f:76:f9:ce:fd:51:91:d5:e3:ca:de:b8:ec:
bb:d6:41:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:28:32 2025 by rpki-client