Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/k1Fe_DLO1_H1bS_vGRMe9_M7aNM.roa
File: k1Fe_DLO1_H1bS_vGRMe9_M7aNM.roa (raw, json)
Hash identifier: 5yF6BnGCa3aoQtOuTUwtogal7a+nuCc7/F78A0TpWi4=
Subject key identifier: 93:51:5E:FC:32:CE:D7:F1:F5:6D:2F:EF:19:13:1E:F7:F3:3B:68:D3
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019A492182AE0661FADB1107FFEDEE2A8C30
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/k1Fe_DLO1_H1bS_vGRMe9_M7aNM.roa
Signing time: Mon 03 Nov 2025 09:52:04 +0000
ROA not before: Mon 03 Nov 2025 09:52:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137409
IP address blocks: 217.145.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:49:21:82:ae:06:61:fa:db:11:07:ff:ed:ee:2a:8c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Nov 3 09:52:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93515efc32ced7f1f56d2fef19131ef7f33b68d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d9:7a:38:95:51:d7:91:4d:12:cb:e9:d7:03:
3a:a9:52:a7:1f:4c:3c:e3:dc:05:0a:8c:b5:f0:12:
60:ad:62:85:5c:c1:8c:53:5b:ba:a4:33:b7:ca:43:
a3:64:4c:c3:f2:21:f8:dc:90:89:70:1c:e0:97:d6:
31:e3:35:70:19:9c:e6:58:0b:3b:38:e7:23:ac:07:
b6:81:a9:df:dc:39:f4:42:d3:b6:fe:17:85:c5:41:
68:0d:26:8c:f4:ed:ea:ff:a7:5d:8a:32:7b:08:0c:
2e:fd:9f:08:7c:f0:5e:5f:9d:91:03:ba:af:ea:6f:
54:c6:63:17:f6:88:5f:d1:5c:d9:5d:6a:83:06:86:
67:c3:92:58:d4:f6:68:b3:01:12:07:0c:ce:f9:8e:
0b:58:9a:f8:a1:05:44:8f:3d:a5:65:7c:f9:8c:ca:
f8:80:02:1e:40:97:93:3f:0d:04:2e:bb:99:09:d7:
9f:53:c4:01:86:ff:42:58:61:44:a3:f1:20:78:7d:
65:0c:80:7b:b5:58:3f:91:6c:20:13:fc:36:6e:f9:
86:5c:54:85:82:0d:62:60:84:b3:07:d2:4a:40:c4:
07:dd:0b:72:5b:65:55:c3:51:de:ab:7b:5b:7a:a4:
31:90:5e:ad:36:5a:3e:e7:6e:46:a2:37:0a:86:3e:
6d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:51:5E:FC:32:CE:D7:F1:F5:6D:2F:EF:19:13:1E:F7:F3:3B:68:D3
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/k1Fe_DLO1_H1bS_vGRMe9_M7aNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.145.74.0/24
Signature Algorithm: sha256WithRSAEncryption
26:7e:4c:da:d9:26:e8:da:3d:8c:e7:5f:cd:b1:35:48:c7:40:
6b:3e:43:73:db:d2:b5:49:87:ec:1b:1f:db:45:7e:a0:c4:f2:
35:80:26:5f:b2:26:22:db:a2:54:2c:46:1b:5b:e5:d4:2f:e3:
1f:9d:5d:8b:0d:cc:c8:97:02:5e:09:3c:01:0a:67:94:ab:c8:
16:05:1f:fa:1e:a9:01:52:d5:c6:75:37:09:12:e7:c4:bb:0d:
63:60:36:1e:10:c5:c8:35:c6:eb:26:7e:1d:95:ed:b8:ef:55:
f6:f3:eb:49:c2:b6:8d:cc:4d:56:1b:b1:73:7f:0d:75:21:a0:
f8:00:5b:21:c3:1f:23:eb:2e:a2:3d:d3:dc:b3:21:30:27:4b:
e3:ec:63:98:e7:24:7a:52:db:e7:ba:07:a7:59:8c:38:bb:9c:
8c:ab:62:d0:e6:ec:3b:c9:dd:78:67:8e:42:9b:9c:ed:40:86:
f3:59:79:7c:55:62:6c:88:7a:ff:a5:d0:22:ee:d1:39:fb:7b:
0b:c9:e3:54:d1:a4:94:73:10:50:03:9f:3f:f5:48:b2:2f:7d:
d0:b9:42:bb:fe:85:39:65:aa:59:a8:d3:71:57:00:3f:8f:86:
e0:3e:3e:00:e3:55:9e:f2:9b:39:16:d0:ab:1e:a6:2c:2b:c9:
50:7f:86:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:44:51 2025 by rpki-client