Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/f5Ifl1Qxitth-8Qh6ozPEIX26LE.roa
File: f5Ifl1Qxitth-8Qh6ozPEIX26LE.roa (raw, json)
Hash identifier: wIswSAYWyn5DfKJXI+1/UX9k25/3bD/WegnGLFLzMg0=
Subject key identifier: 7F:92:1F:97:54:31:8A:DB:61:FB:C4:21:EA:8C:CF:10:85:F6:E8:B1
Certificate issuer: /CN=fde8d1c6aaf4a93ff41bbfa1bd1dac6197d59575
Certificate serial: 0197E8C15B6451A9E0C0B596CCFB37E9265D
Authority key identifier: FD:E8:D1:C6:AA:F4:A9:3F:F4:1B:BF:A1:BD:1D:AC:61:97:D5:95:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ejRxqr0qT_0G7-hvR2sYZfVlXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/f5Ifl1Qxitth-8Qh6ozPEIX26LE.roa
Signing time: Tue 08 Jul 2025 06:37:55 +0000
ROA not before: Tue 08 Jul 2025 06:37:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15866
IP address blocks: 94.232.192.0/21 maxlen: 21
185.45.88.0/22 maxlen: 22
185.45.91.0/24 maxlen: 24
217.171.240.0/20 maxlen: 20
2a00:1920::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ejRxqr0qT_0G7-hvR2sYZfVlXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e8:c1:5b:64:51:a9:e0:c0:b5:96:cc:fb:37:e9:26:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde8d1c6aaf4a93ff41bbfa1bd1dac6197d59575
Validity
Not Before: Jul 8 06:37:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f921f9754318adb61fbc421ea8ccf1085f6e8b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:14:f4:40:fc:97:bf:6e:fe:16:c0:4b:e1:99:
d4:b8:34:e5:e4:52:88:7c:6a:3c:60:02:bf:9f:2c:
e9:b3:35:f8:df:2f:49:e7:0b:7a:0c:a1:f5:61:11:
f9:02:e0:15:77:5e:60:92:05:f0:c4:a4:9f:3f:b6:
2e:40:5b:b7:54:0d:f4:bf:2a:31:c8:19:9e:5e:83:
c5:b8:36:19:f8:b3:e7:50:8d:7e:80:f9:7c:22:d9:
a5:7a:4f:09:5e:aa:3f:17:db:a7:f5:0b:85:8d:a9:
1b:10:b4:4e:52:87:3d:f5:45:43:fa:79:fe:8f:42:
a3:da:a0:f2:05:8d:7a:73:29:8b:da:62:73:d4:d0:
dc:3b:f5:51:46:ac:34:89:19:94:35:96:87:83:ce:
99:ef:f4:3a:49:1a:88:d8:64:c5:28:c7:61:e7:78:
f7:e9:13:bc:5e:46:ff:a7:1d:9f:55:27:84:e6:02:
28:b5:4d:69:45:4f:1a:ad:3e:e3:e8:6c:3e:e0:c1:
18:31:b9:f7:e0:b4:64:82:d6:f9:f1:27:34:dc:42:
2f:ad:d3:c5:ae:f7:c4:82:27:ba:e5:8c:b0:e1:5d:
27:56:94:53:ff:1b:00:65:3f:9c:8a:5a:9b:06:d4:
27:3f:3a:54:3a:ce:1a:51:1a:1a:4b:35:23:be:24:
60:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:92:1F:97:54:31:8A:DB:61:FB:C4:21:EA:8C:CF:10:85:F6:E8:B1
X509v3 Authority Key Identifier:
keyid:FD:E8:D1:C6:AA:F4:A9:3F:F4:1B:BF:A1:BD:1D:AC:61:97:D5:95:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ejRxqr0qT_0G7-hvR2sYZfVlXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/f5Ifl1Qxitth-8Qh6ozPEIX26LE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.232.192.0/21
185.45.88.0/22
217.171.240.0/20
IPv6:
2a00:1920::/48
Signature Algorithm: sha256WithRSAEncryption
bc:80:0f:bd:93:9a:a1:f1:17:80:cb:a5:d5:a3:95:88:f9:95:
1e:0b:ab:5e:8f:15:ba:07:bf:38:47:ee:35:3d:1d:94:79:ee:
d6:08:af:bb:fd:c5:f3:13:a8:0a:0b:3d:8d:4d:32:36:17:07:
f7:e2:75:37:a9:a7:ea:45:81:01:99:a7:49:f6:05:e6:f0:0a:
cb:2b:fa:11:ee:4b:ec:ac:7b:cd:33:23:21:f6:ad:1d:76:a3:
6f:48:a0:64:02:8b:17:f2:bd:94:54:f8:51:2b:47:4b:fb:69:
30:78:ae:fa:18:1a:1a:91:09:cd:de:ce:22:b4:b7:ac:81:25:
e4:1c:21:b2:c3:14:82:f7:5c:2d:4a:09:f5:ca:6e:54:07:cc:
02:37:ec:53:c0:cb:ef:ab:e3:7a:39:a5:82:de:92:92:81:74:
7d:04:74:98:be:46:ac:75:1f:b9:b0:a5:96:3a:b7:86:5d:4d:
66:c7:ee:84:d9:e5:18:57:18:08:9d:43:b5:28:f3:34:27:26:
e7:04:da:68:98:78:22:01:2c:5e:24:80:a8:17:1d:7b:2f:fc:
88:28:70:bc:08:47:d4:05:e7:ac:2f:68:90:8e:0a:53:e6:3d:
98:11:3c:05:15:1a:45:5a:05:a0:7b:1c:36:e3:c6:4f:fb:7e:
3f:fb:f2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:31:43 2025 by rpki-client