Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/Fo3iE_kBXV_uZG324P37hp7JHlo.roa
File: Fo3iE_kBXV_uZG324P37hp7JHlo.roa (raw, json)
Hash identifier: vTWsg5KZNwkHAURrc4HY59QeytyAW5MDAtvE7QlOAAc=
Subject key identifier: 16:8D:E2:13:F9:01:5D:5F:EE:64:6D:F6:E0:FD:FB:86:9E:C9:1E:5A
Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Certificate serial: 01985FFF630882817A6E86A499D57BF60E43
Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/Fo3iE_kBXV_uZG324P37hp7JHlo.roa
Signing time: Thu 31 Jul 2025 10:20:28 +0000
ROA not before: Thu 31 Jul 2025 10:20:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25211
IP address blocks: 94.26.3.0/24 maxlen: 24
94.26.38.0/24 maxlen: 24
94.26.41.0/24 maxlen: 24
94.26.42.0/24 maxlen: 24
94.26.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5f:ff:63:08:82:81:7a:6e:86:a4:99:d5:7b:f6:0e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Validity
Not Before: Jul 31 10:20:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=168de213f9015d5fee646df6e0fdfb869ec91e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:03:ed:a0:c5:b0:0d:da:51:a2:2b:23:ae:5e:
5c:7c:b7:d4:10:01:41:f1:ad:85:c3:4f:02:bb:ed:
ed:2e:04:2a:72:e4:0f:9f:b5:79:1b:59:59:32:e9:
07:50:db:08:c8:f9:94:b7:b3:19:1b:73:55:14:47:
1f:9d:bc:f6:37:ce:49:dc:69:66:21:c4:dc:e7:0d:
30:c7:d4:b8:27:c7:d4:72:4e:77:65:2e:c1:aa:14:
e8:54:2e:8e:33:dc:e3:d8:3a:78:ee:3e:19:54:fa:
e7:81:2e:5b:a0:d7:f4:9a:8a:79:3a:e8:98:2b:89:
e5:41:b2:bc:32:f1:ff:3f:58:55:13:0f:fc:ea:f8:
9d:5f:f5:04:cf:f3:89:a7:b3:e0:bc:3b:33:19:1e:
1b:1a:20:70:a8:28:2b:53:ef:ab:35:01:ef:85:fa:
51:34:ac:02:c8:1b:3a:32:b4:58:fc:4f:cf:ae:4b:
09:b5:67:64:39:ae:6b:f9:3c:4d:3c:4b:29:dc:f5:
9a:c8:fb:57:8d:8d:74:f1:df:c9:8a:43:70:43:e6:
07:fe:a7:30:1f:47:41:54:09:b9:6b:00:ec:80:c4:
a4:51:25:1f:53:98:90:53:f0:f8:de:65:4a:9a:c2:
c0:a9:d9:a6:63:4b:82:74:06:f9:77:bc:21:d0:82:
55:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8D:E2:13:F9:01:5D:5F:EE:64:6D:F6:E0:FD:FB:86:9E:C9:1E:5A
X509v3 Authority Key Identifier:
keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/Fo3iE_kBXV_uZG324P37hp7JHlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.26.3.0/24
94.26.38.0/24
94.26.41.0-94.26.42.255
94.26.69.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:89:fd:c6:c3:13:66:98:d4:0d:0b:53:5c:2f:26:b8:e3:63:
3a:c9:57:8f:09:54:9b:5a:d7:dc:46:0a:48:da:5d:3d:4b:7e:
e8:6b:f3:b4:13:49:ba:80:50:bb:f3:1e:c4:89:68:9d:7a:02:
1e:4f:d9:d7:c7:c6:2f:ec:62:90:d2:0e:36:a3:e8:48:2a:88:
dd:16:f8:ed:0e:ac:87:29:03:4b:81:3a:d8:65:24:02:db:a4:
c1:87:1c:57:f1:7e:10:85:63:0c:b7:39:2a:9a:aa:d7:bf:1b:
fb:74:87:19:fc:f5:14:16:7b:3a:b0:f1:92:b9:b7:71:68:1a:
5d:d4:b4:83:b6:d7:1b:97:a9:0d:10:d4:c6:7c:41:ec:97:d1:
2a:85:20:1e:98:e4:12:f8:be:35:79:23:83:c4:dc:03:bb:74:
03:d5:eb:9e:01:69:01:9b:f6:b9:10:d1:0a:3f:00:7c:cc:b5:
ba:98:c7:56:95:b1:0e:da:de:05:44:a4:72:cf:7b:db:b5:3c:
1a:90:77:15:5e:4e:27:ce:09:48:c4:f4:26:db:08:fe:4d:8f:
22:47:92:04:7e:93:bc:c5:58:c8:b9:4f:e8:0e:1f:fe:df:05:
8a:fd:4a:3f:9c:eb:41:86:60:8e:d1:a3:f8:bd:a9:63:24:bd:
67:96:bb:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:36:41 2025 by rpki-client