Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/fcfwcgfJzdC7q2gyJpWTHF0Bvdo.roa
File: fcfwcgfJzdC7q2gyJpWTHF0Bvdo.roa (raw, json)
Hash identifier: eEZHx/UE99AhtrYzD9Tg0RlZl4/V5YzfIHojAstlnHs=
Subject key identifier: 7D:C7:F0:72:07:C9:CD:D0:BB:AB:68:32:26:95:93:1C:5D:01:BD:DA
Certificate issuer: /CN=f7b9d97b97fd4cbaceda81c4406e74ad6d539326
Certificate serial: 019A2C226584620D1AE5A94F0BA9931983D2
Authority key identifier: F7:B9:D9:7B:97:FD:4C:BA:CE:DA:81:C4:40:6E:74:AD:6D:53:93:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97nZe5f9TLrO2oHEQG50rW1TkyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/fcfwcgfJzdC7q2gyJpWTHF0Bvdo.roa
Signing time: Tue 28 Oct 2025 18:44:03 +0000
ROA not before: Tue 28 Oct 2025 18:44:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214707
IP address blocks: 109.224.208.0/21 maxlen: 21
109.224.208.0/24 maxlen: 24
109.224.209.0/24 maxlen: 24
109.224.210.0/24 maxlen: 24
109.224.211.0/24 maxlen: 24
109.224.212.0/24 maxlen: 24
109.224.213.0/24 maxlen: 24
109.224.214.0/24 maxlen: 24
109.224.215.0/24 maxlen: 24
205.209.64.0/19 maxlen: 24
205.209.64.0/21 maxlen: 21
205.209.72.0/21 maxlen: 21
205.209.80.0/21 maxlen: 21
205.209.88.0/21 maxlen: 21
2a14:6540::/29 maxlen: 29
2a14:6540::/31 maxlen: 31
2a14:6542::/31 maxlen: 31
2a14:6544::/31 maxlen: 31
2a14:6546::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/97nZe5f9TLrO2oHEQG50rW1TkyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:22:65:84:62:0d:1a:e5:a9:4f:0b:a9:93:19:83:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b9d97b97fd4cbaceda81c4406e74ad6d539326
Validity
Not Before: Oct 28 18:44:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7dc7f07207c9cdd0bbab68322695931c5d01bdda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9b:2c:a5:c4:f2:48:9f:43:14:29:9a:1b:d3:
b1:3a:c2:a6:c6:b0:44:5e:67:11:18:b0:a0:d9:da:
45:51:7e:29:49:3f:bf:f9:a7:c1:c4:de:f4:7e:01:
a3:c8:39:eb:b4:7c:6d:0f:db:97:c1:07:e4:90:9f:
be:02:77:fd:84:94:3f:73:87:30:f7:7d:b0:d8:fd:
be:9a:7b:b1:35:35:55:d6:d3:5e:48:93:9c:90:7e:
df:97:91:c6:42:e6:9a:3e:8e:09:54:fa:46:21:11:
27:14:87:5f:a9:ad:6c:c6:48:70:46:38:d4:f2:39:
53:57:37:cf:bd:85:2a:8d:1d:82:be:98:90:1f:26:
c7:4b:aa:16:6c:63:5b:52:73:a8:50:70:70:3b:cb:
fb:0d:66:d2:f8:9d:0a:5e:f7:a1:6b:7e:75:ba:2d:
86:83:23:49:c5:8d:0a:4e:76:bd:82:df:e0:ce:2d:
5d:67:f3:f8:80:dd:2e:27:f3:de:a0:59:a3:00:c2:
89:fc:2e:81:03:93:98:a9:d4:62:a6:ca:56:93:e4:
14:80:5a:3e:3e:c8:4f:66:56:33:60:63:1d:d2:f2:
11:e9:71:18:c9:33:32:5a:44:97:79:8e:eb:6e:97:
bc:35:e5:b1:68:da:a6:c3:32:a0:c5:70:77:6c:c2:
23:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C7:F0:72:07:C9:CD:D0:BB:AB:68:32:26:95:93:1C:5D:01:BD:DA
X509v3 Authority Key Identifier:
keyid:F7:B9:D9:7B:97:FD:4C:BA:CE:DA:81:C4:40:6E:74:AD:6D:53:93:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97nZe5f9TLrO2oHEQG50rW1TkyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/fcfwcgfJzdC7q2gyJpWTHF0Bvdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.224.208.0/21
205.209.64.0/19
IPv6:
2a14:6540::/29
Signature Algorithm: sha256WithRSAEncryption
39:45:92:af:45:9b:f9:b7:31:ef:7a:0d:22:18:cc:48:b4:38:
be:e9:7d:fb:61:9d:54:3f:cc:4e:09:52:fc:98:a3:7d:cf:92:
c0:c4:bd:39:39:19:04:64:4f:6c:82:e2:95:dc:4d:7a:6a:f2:
08:52:eb:9d:42:6b:95:5a:44:09:d6:3e:2c:92:55:5d:b6:7b:
d6:e1:68:c4:e1:2e:5e:a2:7c:64:2c:43:dd:cc:49:24:ba:52:
6f:ea:3d:0b:a1:e0:50:97:ca:85:2a:b3:b8:ab:e9:7a:9c:19:
ef:c0:71:eb:5d:5e:8c:c9:a0:4d:7c:99:1e:b2:f0:90:7d:9e:
42:1b:f3:1d:c5:95:8d:8c:47:ce:53:3d:e5:07:c0:3d:a4:b4:
39:5a:82:ba:19:2d:43:96:86:42:bf:08:1f:4f:9b:8b:6a:b3:
2c:15:f9:f8:ae:28:a6:db:2d:92:26:7a:9b:75:4d:4d:6d:9d:
18:5c:62:43:6a:bc:69:89:07:58:ef:00:f9:29:1b:13:72:01:
36:4e:67:48:a2:ba:0e:3e:d5:39:72:06:37:47:0c:fe:43:8d:
09:d0:7b:d1:67:10:8c:47:c7:a9:44:6e:17:b3:36:bc:5b:ba:
8b:1a:ce:9d:f5:cc:21:8b:52:6f:ae:21:60:2d:4e:a1:e9:7a:
62:8a:96:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:51:24 2025 by rpki-client