Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/FpuhTfwOdSf21755rrSFTL20Tbk.roa
File: FpuhTfwOdSf21755rrSFTL20Tbk.roa (raw, json)
Hash identifier: X6w/yqAHbg5XsmgEDpJrMUNkNSsz78dV/DwakO4C27U=
Subject key identifier: 16:9B:A1:4D:FC:0E:75:27:F6:D7:BE:79:AE:B4:85:4C:BD:B4:4D:B9
Certificate issuer: /CN=1a0100943a8708028be40d4fa4f29c9ad9cc568b
Certificate serial: 019888C81D576720EBCA2B28CDF57A7C33E8
Authority key identifier: 1A:01:00:94:3A:87:08:02:8B:E4:0D:4F:A4:F2:9C:9A:D9:CC:56:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgEAlDqHCAKL5A1PpPKcmtnMVos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/FpuhTfwOdSf21755rrSFTL20Tbk.roa
Signing time: Fri 08 Aug 2025 08:24:32 +0000
ROA not before: Fri 08 Aug 2025 08:24:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51169
IP address blocks: 185.249.116.0/22 maxlen: 24
185.249.116.0/23 maxlen: 23
185.249.118.0/24 maxlen: 24
185.249.119.0/24 maxlen: 24
2a0c:7940::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgEAlDqHCAKL5A1PpPKcmtnMVos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:c8:1d:57:67:20:eb:ca:2b:28:cd:f5:7a:7c:33:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a0100943a8708028be40d4fa4f29c9ad9cc568b
Validity
Not Before: Aug 8 08:24:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=169ba14dfc0e7527f6d7be79aeb4854cbdb44db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:9c:e2:f6:c6:a5:08:0e:78:3c:73:7e:0f:06:
71:77:c3:d5:bc:be:46:6e:11:74:b5:9f:f0:ab:96:
e7:97:5d:05:20:92:ee:1b:e7:f9:c5:19:a7:ae:de:
b6:3c:1b:8e:8e:0d:f8:05:66:5b:20:dd:28:0f:fc:
28:2d:d4:c8:4b:e6:58:ac:4f:c2:2d:7d:09:5a:ef:
5c:d4:38:ee:6b:79:b1:1b:5c:c6:06:b4:ff:b6:84:
e2:29:9b:62:aa:ee:dc:24:c4:9b:df:10:1b:2f:36:
78:bc:17:62:f3:80:bc:bd:d7:13:23:7b:fd:e0:ab:
08:81:3c:0f:76:95:18:f0:2d:44:4a:d8:c9:6c:9b:
88:0e:5a:65:f9:26:0d:b7:d9:0b:70:c3:50:1b:8e:
82:8d:e5:17:00:ed:d1:53:39:d6:5f:af:ae:70:99:
b4:2b:24:22:88:9e:f8:87:d9:3c:ee:1b:0c:30:1b:
c5:d1:dd:3b:4b:f4:60:fd:ea:e4:de:3c:79:87:3d:
a1:30:3e:4f:a9:e2:d7:f5:32:fb:5d:9e:6d:4f:34:
e7:5c:67:4c:ec:5a:6c:6b:0f:9e:f5:60:68:84:25:
48:cb:58:3d:81:18:75:6c:24:8b:cb:5a:2f:29:46:
53:5f:a7:56:e7:26:63:fb:af:83:5e:c9:f1:0f:30:
8a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:9B:A1:4D:FC:0E:75:27:F6:D7:BE:79:AE:B4:85:4C:BD:B4:4D:B9
X509v3 Authority Key Identifier:
keyid:1A:01:00:94:3A:87:08:02:8B:E4:0D:4F:A4:F2:9C:9A:D9:CC:56:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgEAlDqHCAKL5A1PpPKcmtnMVos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/FpuhTfwOdSf21755rrSFTL20Tbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.116.0/22
IPv6:
2a0c:7940::/29
Signature Algorithm: sha256WithRSAEncryption
7d:f9:6f:da:b1:d4:81:8d:9a:99:9c:a0:b6:1f:d1:36:73:84:
68:4e:17:ea:68:71:fb:ef:7b:22:45:2e:d6:5d:4f:03:3e:ca:
4a:29:92:e1:41:a0:c1:ef:67:fe:a0:1b:ec:fc:25:34:db:ae:
18:a3:c6:dc:65:15:bc:57:e0:2b:4c:b4:d2:73:b3:c6:34:a6:
50:bf:b2:ba:b5:3b:b0:67:34:be:c6:3a:95:81:eb:89:f8:fe:
0d:a0:06:1f:d0:b2:f5:b3:f1:55:40:ee:75:83:07:7f:b7:8c:
2d:27:6d:0e:fb:b9:31:23:40:c7:8a:53:fd:a1:81:0e:6e:3d:
ff:ee:f3:fb:d9:f4:50:07:83:a2:20:44:52:22:58:90:4b:f8:
e6:d5:22:c6:0e:0c:b0:bd:89:4a:da:64:af:92:37:13:fd:a8:
43:c7:89:9e:47:3b:11:fe:42:d8:68:07:b7:e6:51:59:20:ee:
2a:df:7f:f1:ce:6d:46:47:d0:c0:5d:3c:2a:51:02:17:f3:06:
90:fd:d4:7d:64:60:f2:c3:2f:da:bc:6a:66:8b:bc:48:4a:2f:
b2:69:ae:7f:4d:36:85:34:b9:fe:69:64:dd:e0:2b:28:44:5e:
1d:e7:3a:88:8c:d7:55:83:00:84:8c:61:a9:3f:2e:08:d7:23:
e2:86:9a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:41:43 2025 by rpki-client