Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/FXtyRxy310ujzM3-FcQZ1xIE8BM.roa
File: FXtyRxy310ujzM3-FcQZ1xIE8BM.roa (raw, json)
Hash identifier: sjb/b0eSiH//cLJ9qvCys98Peom21sTpufoCnNtl4os=
Subject key identifier: 15:7B:72:47:1C:B7:D7:4B:A3:CC:CD:FE:15:C4:19:D7:12:04:F0:13
Certificate issuer: /CN=90a065eef40dc016a1be7f28d6e66ca7a87e7fe5
Certificate serial: 01988A5553F1428EE8E33EB36B2A296187B0
Authority key identifier: 90:A0:65:EE:F4:0D:C0:16:A1:BE:7F:28:D6:E6:6C:A7:A8:7E:7F:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKBl7vQNwBahvn8o1uZsp6h-f-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/FXtyRxy310ujzM3-FcQZ1xIE8BM.roa
Signing time: Fri 08 Aug 2025 15:38:24 +0000
ROA not before: Fri 08 Aug 2025 15:38:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60157
IP address blocks: 185.54.168.0/22 maxlen: 22
185.54.168.0/23 maxlen: 23
185.54.168.0/24 maxlen: 24
185.54.169.0/24 maxlen: 24
185.54.170.0/24 maxlen: 24
185.54.171.0/24 maxlen: 24
2a02:4560::/32 maxlen: 64
2a02:4560::/48 maxlen: 48
2a02:4560:3::/48 maxlen: 48
2a02:4560:24::/48 maxlen: 48
2a02:4560:24::/64 maxlen: 64
2a02:4560:25::/48 maxlen: 48
2a02:4560:25::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKBl7vQNwBahvn8o1uZsp6h-f-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:55:53:f1:42:8e:e8:e3:3e:b3:6b:2a:29:61:87:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a065eef40dc016a1be7f28d6e66ca7a87e7fe5
Validity
Not Before: Aug 8 15:38:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=157b72471cb7d74ba3cccdfe15c419d71204f013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6e:03:2f:bd:2b:06:d2:25:c9:28:da:eb:b2:
af:d3:81:43:9e:42:3a:47:51:c5:1e:9c:62:95:c4:
84:e2:e1:a8:05:23:25:a4:b1:0a:b5:7b:ec:10:d9:
f1:5d:9d:85:4b:0b:81:04:78:65:f7:29:a8:33:ee:
7d:90:c9:78:91:35:42:66:82:b1:a6:09:0c:99:5c:
56:97:6e:4a:f1:05:51:84:21:b2:03:21:ec:2b:cf:
83:32:40:7a:d6:67:76:f7:6c:4b:72:e7:1a:96:2a:
aa:55:95:2b:da:2d:66:53:d0:a6:a4:6d:ea:0b:a9:
b0:38:6a:52:f8:70:26:1c:05:59:9b:db:5e:bb:7a:
a9:4f:37:1a:3e:e7:fe:72:3f:bf:f3:95:89:0e:72:
30:ef:e5:e4:0a:a1:25:b8:2d:ee:77:2c:d4:ab:46:
96:0f:9b:c3:57:69:0e:9d:c9:aa:f7:b2:6a:d1:da:
f5:7e:c9:85:56:ec:6c:68:0a:75:a7:c7:98:a8:0d:
1d:c6:01:4a:fa:02:2d:a7:cf:1e:5e:3d:b4:3c:82:
0c:58:6c:a1:93:1f:27:05:8c:1d:cf:22:b5:d3:e2:
49:d7:2c:24:20:e0:b0:50:d4:9a:4b:9e:6d:6d:1f:
b0:ae:b9:eb:53:00:85:f6:e4:55:a0:45:bc:86:76:
5f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7B:72:47:1C:B7:D7:4B:A3:CC:CD:FE:15:C4:19:D7:12:04:F0:13
X509v3 Authority Key Identifier:
keyid:90:A0:65:EE:F4:0D:C0:16:A1:BE:7F:28:D6:E6:6C:A7:A8:7E:7F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKBl7vQNwBahvn8o1uZsp6h-f-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/FXtyRxy310ujzM3-FcQZ1xIE8BM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.168.0/22
IPv6:
2a02:4560::/32
Signature Algorithm: sha256WithRSAEncryption
a8:6b:a1:54:28:58:83:91:6a:8c:24:37:f6:46:bb:ec:ed:69:
92:ff:19:e7:a6:26:06:cc:e2:68:7e:5f:03:f6:f2:02:fc:c0:
12:ba:ca:a8:9c:b0:6f:f3:52:c9:49:d8:f1:5f:54:55:d6:67:
f3:88:a5:0b:5e:bc:31:e1:66:4a:79:9f:85:7c:f1:61:b7:7d:
cd:6e:f1:91:fb:28:73:c8:c2:6f:28:9e:8c:0e:0f:61:48:a9:
78:52:df:9f:ae:13:5a:a7:99:74:6c:5a:f8:62:00:c9:76:32:
da:3f:d0:e1:b2:1c:cb:b6:27:c7:2b:ea:ab:e5:3d:40:11:b1:
23:9e:50:2d:97:d9:e1:a2:dc:02:29:e1:ea:f1:41:6d:3e:df:
3f:c0:aa:6f:24:ed:8c:82:9e:47:87:28:a7:d7:cb:e8:40:0a:
50:41:f5:58:5b:67:36:c5:08:6c:5b:5f:a8:5c:25:38:4a:71:
39:2b:8c:64:0d:99:d4:86:e4:51:ff:c7:81:5a:27:8a:d0:f6:
8f:bd:60:11:db:7e:00:d5:11:3b:02:99:01:70:80:2d:1b:a9:
03:a6:bb:f4:dd:b3:9a:3c:61:b5:c2:22:e7:99:80:ea:de:b9:
c4:d1:35:96:80:c9:71:ac:a5:e4:1c:81:29:35:7d:4b:78:53:
d3:f0:c8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:38:38 2025 by rpki-client