Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/vMgf33TtuC0iGqOaF7lGCH4Ubkc.roa
File: vMgf33TtuC0iGqOaF7lGCH4Ubkc.roa (raw, json)
Hash identifier: DL1hnWTy0OyJLTvwjIOafm6ak34UeE2oK+hX6iaqCwY=
Subject key identifier: BC:C8:1F:DF:74:ED:B8:2D:22:1A:A3:9A:17:B9:46:08:7E:14:6E:47
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019A4A4DCA7B3BBEBFA400C3B3AF259B2073
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/vMgf33TtuC0iGqOaF7lGCH4Ubkc.roa
Signing time: Mon 03 Nov 2025 15:20:03 +0000
ROA not before: Mon 03 Nov 2025 15:20:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29066
IP address blocks: 109.122.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4a:4d:ca:7b:3b:be:bf:a4:00:c3:b3:af:25:9b:20:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Nov 3 15:20:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bcc81fdf74edb82d221aa39a17b946087e146e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e5:d1:fe:ad:9d:a3:a8:2b:cf:1d:fc:08:5d:
55:c8:7e:36:dc:a4:b8:6b:5e:fd:7a:7b:fa:a8:7c:
4d:39:86:30:55:3e:a3:c8:e1:e3:87:c3:3d:19:0a:
be:a4:21:bc:e5:97:62:8c:24:b4:ff:c6:f5:fd:4f:
79:c8:e7:32:df:8a:ea:41:6e:d1:fe:37:89:aa:2c:
de:ba:56:d0:28:97:36:22:64:fd:05:6c:c5:e9:2d:
fa:7f:c6:d3:a8:88:28:ce:e8:17:66:c0:77:3e:cc:
8b:f1:0c:71:2d:39:ad:da:62:ef:3f:81:a5:1a:d3:
f0:a8:57:54:da:6f:b6:ef:9f:09:71:b7:8f:77:30:
b1:4b:86:a3:83:fc:69:67:1b:44:60:ae:83:48:72:
64:37:60:92:d6:cc:67:46:54:58:b4:45:32:1f:11:
62:25:4c:04:33:dd:02:2f:10:38:54:1f:52:ea:76:
d5:ff:b5:f0:ce:fd:60:5d:90:07:aa:fc:2b:d9:ad:
6a:50:2e:02:fb:96:9f:3e:a9:e3:cc:59:ca:5d:c8:
f1:e8:6a:8b:4d:01:9c:60:33:c2:a7:b2:bc:dd:ac:
d0:ac:9d:ce:56:34:d7:e2:79:0c:e6:ba:4f:28:21:
1d:b5:5f:de:b9:7f:71:22:1b:5b:d2:6a:6f:2d:45:
b8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C8:1F:DF:74:ED:B8:2D:22:1A:A3:9A:17:B9:46:08:7E:14:6E:47
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/vMgf33TtuC0iGqOaF7lGCH4Ubkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.7.0/24
Signature Algorithm: sha256WithRSAEncryption
83:2f:d5:8b:9b:d8:8d:56:66:9a:be:77:11:73:18:8d:e2:7c:
ba:a5:2d:34:3a:c4:f1:a4:71:9c:86:f0:93:c9:73:4f:cf:1b:
64:72:7a:d0:d9:3c:32:09:15:fc:d7:4e:46:8b:6e:cb:60:4d:
98:6e:e6:69:7d:59:96:ee:d5:65:94:83:fd:da:3c:91:07:6e:
e7:80:88:04:03:2a:89:85:84:5b:ee:3f:a5:f3:c1:b0:5c:a6:
de:92:5d:ff:95:5f:dd:ca:c8:9c:f2:64:85:78:d2:c0:d9:34:
3e:b9:08:5e:3a:f8:73:c3:87:af:28:31:03:9c:d4:bd:ff:3e:
30:2b:cd:c2:96:42:a4:2b:51:0a:0b:20:86:9d:f2:c6:b1:18:
c9:80:47:16:c7:ff:52:9f:aa:d8:bc:70:64:56:68:e3:4e:68:
7b:3c:1f:da:31:07:b8:0a:89:b0:0a:64:bd:a4:ee:a3:e7:2a:
fc:2a:03:63:ba:e2:12:c5:d9:6a:d0:c5:af:11:98:0d:5f:76:
da:6b:a6:c0:07:e0:1c:0f:4b:d3:fa:b2:6b:df:b6:23:aa:ba:
37:7e:01:56:e0:46:3b:e8:e7:3f:c5:51:db:c5:b2:a8:92:22:
74:8d:d4:a6:7c:d5:53:f7:ec:6f:31:3a:1c:5b:84:3f:b7:40:
fc:aa:95:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:25:02 2025 by rpki-client