Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/Fu5puXi31mF44yAqLLOREudBdx8.roa
File: Fu5puXi31mF44yAqLLOREudBdx8.roa (raw, json)
Hash identifier: EMVvFm7Cz6Rus7+EIIREeW1t+m4c2GaLdfO+T3Vrwg8=
Subject key identifier: 16:EE:69:B9:78:B7:D6:61:78:E3:20:2A:2C:B3:91:12:E7:41:77:1F
Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Certificate serial: 019A42B0A0D4C10B096EBA305C78D2732A33
Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/Fu5puXi31mF44yAqLLOREudBdx8.roa
Signing time: Sun 02 Nov 2025 03:51:03 +0000
ROA not before: Sun 02 Nov 2025 03:51:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58289
IP address blocks: 78.109.19.0/24 maxlen: 24
85.159.94.0/24 maxlen: 24
86.54.184.0/24 maxlen: 24
91.147.111.0/24 maxlen: 24
92.240.243.0/24 maxlen: 24
109.175.215.0/24 maxlen: 24
185.162.234.0/24 maxlen: 24
193.43.251.0/24 maxlen: 24
194.31.133.0/24 maxlen: 24
194.31.135.0/24 maxlen: 24
212.108.87.0/24 maxlen: 24
2a0e:6600::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:42:b0:a0:d4:c1:0b:09:6e:ba:30:5c:78:d2:73:2a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Validity
Not Before: Nov 2 03:51:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16ee69b978b7d66178e3202a2cb39112e741771f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f0:f0:94:7b:52:d5:73:d8:18:7c:f4:02:77:
b0:d3:3e:68:8c:86:9d:6f:a4:f6:73:82:ca:b9:d4:
61:48:7b:97:1f:41:e1:39:ce:b8:c2:f1:b3:e5:ea:
2f:82:00:b1:ee:3a:6a:8c:8f:ca:e7:fd:9a:ac:f1:
75:32:a7:e6:0f:28:bb:e3:8b:3b:d7:bd:fd:07:d1:
6c:dd:b6:44:fc:b3:5e:e1:b1:b3:79:1f:82:74:35:
46:5b:62:44:01:28:29:2f:0d:b9:7b:93:a1:4f:0f:
c9:75:c6:e6:d9:41:7e:18:fa:f0:85:6f:58:ed:50:
1b:d2:75:f8:56:98:7d:af:11:cc:ea:c9:6f:3d:24:
50:5c:30:0e:ba:6f:7d:fa:5c:82:a4:bc:51:84:d5:
5c:dc:76:2d:34:6f:0e:6c:1b:00:6f:ca:91:e8:d6:
01:2c:6a:09:9d:cb:af:bb:11:f5:f3:81:51:fc:a4:
d7:f3:32:16:66:86:be:83:3f:a3:7e:8a:b1:3b:5d:
6f:bd:55:e1:c6:f8:57:28:63:d7:e3:06:9d:5c:4d:
e2:3f:4d:7b:b7:73:8a:33:08:1d:17:60:9e:e5:59:
3b:ac:06:60:5b:23:4f:3f:47:9d:f2:41:33:2b:21:
d5:95:06:26:c7:3e:fe:e5:d6:13:b3:cd:83:ab:5e:
d9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EE:69:B9:78:B7:D6:61:78:E3:20:2A:2C:B3:91:12:E7:41:77:1F
X509v3 Authority Key Identifier:
keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/Fu5puXi31mF44yAqLLOREudBdx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.109.19.0/24
85.159.94.0/24
86.54.184.0/24
91.147.111.0/24
92.240.243.0/24
109.175.215.0/24
185.162.234.0/24
193.43.251.0/24
194.31.133.0/24
194.31.135.0/24
212.108.87.0/24
IPv6:
2a0e:6600::/48
Signature Algorithm: sha256WithRSAEncryption
c2:45:e1:7c:f5:90:82:fc:03:dd:ae:e0:31:dc:a1:92:5c:af:
87:91:73:cb:fb:05:25:55:e8:b3:05:b3:8d:f0:3c:41:54:a2:
49:7a:9c:a6:7e:13:16:30:9f:86:8f:86:24:66:88:98:10:a6:
b6:04:39:f5:98:ee:0a:b0:8e:e8:14:35:76:e2:69:63:12:80:
fe:7a:8b:78:1a:be:03:9b:2d:e7:fd:06:32:44:20:8e:76:2e:
f7:50:51:a0:d8:3a:f6:ef:96:96:26:e4:4e:b1:2f:02:99:61:
ac:a2:5f:98:34:9b:cf:8c:5b:32:2b:a4:b6:11:60:a4:9f:94:
32:84:a4:7d:6d:18:57:e8:ee:56:f3:5f:55:14:76:54:70:00:
ec:0f:0b:2a:0c:f2:d1:9d:fd:d4:b9:32:5c:69:4b:a8:4d:5b:
d0:f4:75:18:97:13:1d:83:b4:7e:65:64:a0:91:ff:4e:88:1b:
db:8a:4e:6e:ac:65:89:73:ea:3e:17:04:65:80:e4:20:ab:66:
6e:cc:fb:d7:21:37:7f:cf:6b:2c:e1:37:77:a5:3d:87:1a:6f:
45:fc:d7:e6:6d:ad:b7:b3:dd:32:37:b0:c9:7a:12:5c:e8:64:
ea:aa:c4:e6:57:7b:30:6f:6e:8f:b4:17:f1:22:6c:0c:5a:e1:
76:37:63:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:06:03 2025 by rpki-client