Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/fCUGFfWzW4S1F4DnK4n7a0AgUjI.roa
File: fCUGFfWzW4S1F4DnK4n7a0AgUjI.roa (raw, json)
Hash identifier: Aef8TeyLWHEX0HhoAhmS5O45O1FHLWTrY+cesMIs6t4=
Subject key identifier: 7C:25:06:15:F5:B3:5B:84:B5:17:80:E7:2B:89:FB:6B:40:20:52:32
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 01985A8B34979D8696A8EBEC1431331C29CA
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/fCUGFfWzW4S1F4DnK4n7a0AgUjI.roa
Signing time: Wed 30 Jul 2025 08:55:29 +0000
ROA not before: Wed 30 Jul 2025 08:55:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212775
IP address blocks: 2a00:7180:8010::/46 maxlen: 46
2a04:800:9000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5a:8b:34:97:9d:86:96:a8:eb:ec:14:31:33:1c:29:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jul 30 08:55:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c250615f5b35b84b51780e72b89fb6b40205232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:84:32:88:82:c5:b0:8f:43:fc:d0:a0:ba:e2:
40:f5:55:97:15:81:d8:4d:8e:43:ac:69:f2:16:56:
64:10:54:89:e9:a7:f2:fc:81:5c:6b:a2:de:a6:63:
50:40:f1:68:3e:92:47:8f:9f:35:16:79:c8:00:ae:
a6:d4:cb:ab:a4:e7:68:fe:2d:c8:74:bd:b0:42:ea:
cc:ca:3f:f1:f5:17:48:87:20:29:b5:e1:1d:bd:38:
2f:d0:dc:0f:64:0e:c0:b7:ec:5d:36:38:63:66:15:
3d:be:70:fb:40:6f:82:a5:27:e5:5e:65:d5:97:ad:
a7:33:ea:a4:43:28:8b:66:e2:94:19:87:22:54:0f:
3b:bd:44:e5:86:1b:ec:28:eb:11:a5:e2:17:e8:0e:
0b:3b:de:de:8d:22:f3:91:6b:f0:ad:60:ee:87:dd:
3d:59:9d:0c:a9:06:6d:52:93:a4:dc:18:e2:e5:f6:
c3:ed:4a:5a:e1:0f:59:5f:e0:f1:67:aa:2e:32:6a:
56:d0:37:e0:4d:8a:6b:e3:82:61:cd:52:7b:2b:df:
cf:86:47:bd:da:7a:b7:99:67:15:cf:f3:4e:e2:d0:
17:d6:5e:9f:da:b8:d7:8e:54:fd:3a:9c:a3:26:73:
24:02:53:12:6b:64:2a:a4:62:23:70:4d:c4:28:ad:
93:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:25:06:15:F5:B3:5B:84:B5:17:80:E7:2B:89:FB:6B:40:20:52:32
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/fCUGFfWzW4S1F4DnK4n7a0AgUjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:7180:8010::/46
2a04:800:9000::/36
Signature Algorithm: sha256WithRSAEncryption
a6:2c:88:03:ae:c7:6e:0f:21:20:3f:64:9e:85:87:d1:27:9f:
e0:45:28:78:f6:43:3c:6e:d3:12:ee:98:b2:ac:db:bc:46:54:
61:d6:38:88:c1:20:55:e1:b8:05:31:ed:75:18:fd:9a:8d:a9:
a1:b0:d2:df:e8:7c:a4:1f:11:41:8c:6b:33:2d:3c:f1:2a:7f:
ec:fd:3f:a1:d8:99:59:72:a6:c3:95:89:a1:81:22:39:62:76:
a1:57:03:84:3c:f6:e7:19:61:ca:2a:d3:2b:60:25:0c:f2:8e:
f1:c5:5f:09:3d:b0:32:2b:45:26:8b:64:91:e3:b6:8b:89:61:
73:de:57:61:cb:4e:6a:66:9c:ec:59:14:4c:27:df:fa:c4:e4:
8e:72:1f:24:12:8c:e2:18:70:db:1c:f1:bb:74:eb:92:dd:45:
ff:8f:dc:d5:cb:bd:7f:7d:47:c4:41:65:1b:79:e0:25:86:c6:
47:00:3d:59:04:53:0d:16:60:b4:6b:60:37:9e:95:ac:c1:7b:
2b:85:09:a3:04:c8:a8:12:f9:e6:fd:59:76:0e:43:50:d8:c8:
4e:80:e9:14:e5:4f:de:99:c8:52:53:c0:9d:2f:b2:c7:17:d8:
3c:31:62:78:72:d7:87:a7:ac:78:a8:de:c5:80:bb:d1:ef:b5:
18:46:94:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:01:07 2025 by rpki-client