Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/pGVzKWBInfef8DXuOtrOePkVDYY.roa
File: pGVzKWBInfef8DXuOtrOePkVDYY.roa (raw, json)
Hash identifier: 0XA3D6bl5EyZ9Xrf5h6Zm+HajNCkRs5fj/PE1/XYmBI=
Subject key identifier: A4:65:73:29:60:48:9D:F7:9F:F0:35:EE:3A:DA:CE:78:F9:15:0D:86
Certificate issuer: /CN=fbcdd117eac757b6f8f39428653ae12508cc6989
Certificate serial: 019A48DBEA2DC7FDD1E7BDD20CBA118B1EBE
Authority key identifier: FB:CD:D1:17:EA:C7:57:B6:F8:F3:94:28:65:3A:E1:25:08:CC:69:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/pGVzKWBInfef8DXuOtrOePkVDYY.roa
Signing time: Mon 03 Nov 2025 08:36:02 +0000
ROA not before: Mon 03 Nov 2025 08:36:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25581
IP address blocks: 45.81.12.0/22 maxlen: 22
45.90.8.0/22 maxlen: 23
91.207.130.0/23 maxlen: 23
185.34.148.0/22 maxlen: 22
185.34.149.0/24 maxlen: 24
185.170.216.0/21 maxlen: 21
2a00:da60::/32 maxlen: 32
2a00:da60:b01::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:48:db:ea:2d:c7:fd:d1:e7:bd:d2:0c:ba:11:8b:1e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcdd117eac757b6f8f39428653ae12508cc6989
Validity
Not Before: Nov 3 08:36:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a465732960489df79ff035ee3adace78f9150d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:82:55:00:bb:f2:06:79:90:af:a2:1f:d9:83:
b2:0c:cf:28:72:c9:4a:74:37:40:ea:17:11:4e:65:
9f:e7:a7:3f:bd:77:cd:d2:9b:f9:9b:27:1d:f7:52:
36:97:b4:d3:5e:5b:c0:9d:08:0c:09:73:52:15:25:
a2:85:a6:42:1e:6d:3a:fc:96:69:c1:00:c0:28:1b:
a9:1d:11:81:a5:50:71:6b:27:59:4c:30:c0:ae:73:
67:b8:3b:f7:04:15:e3:c1:d7:ce:31:9b:cb:d6:80:
a7:a3:74:8e:cc:40:45:3f:25:10:14:92:1d:1a:b6:
3f:30:92:be:cc:55:44:aa:18:e4:13:6b:87:c0:c6:
02:01:6e:cf:9b:ff:51:13:2e:9b:e1:bb:d2:37:bc:
09:ac:64:cc:30:ab:57:0a:88:be:9d:83:97:c1:08:
22:d1:ed:73:11:74:d0:35:bc:d6:32:a4:0a:2e:38:
0c:43:a2:bc:4d:9f:43:be:f5:e3:6e:2f:69:0f:28:
e3:ca:2e:3a:13:41:df:35:87:3c:44:19:8a:50:d2:
32:ec:71:9d:24:ac:7d:f6:8b:b7:19:a5:f6:50:3f:
bd:53:64:2d:03:9e:d9:a5:e6:15:01:bd:6a:d1:64:
a6:54:80:bb:e9:fa:95:43:fa:46:88:89:48:27:ad:
c6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:65:73:29:60:48:9D:F7:9F:F0:35:EE:3A:DA:CE:78:F9:15:0D:86
X509v3 Authority Key Identifier:
keyid:FB:CD:D1:17:EA:C7:57:B6:F8:F3:94:28:65:3A:E1:25:08:CC:69:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/pGVzKWBInfef8DXuOtrOePkVDYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.12.0/22
45.90.8.0/22
91.207.130.0/23
185.34.148.0/22
185.170.216.0/21
IPv6:
2a00:da60::/32
Signature Algorithm: sha256WithRSAEncryption
a4:4f:90:bb:4b:65:82:55:c7:ba:05:7e:04:14:55:5c:2d:e3:
44:f1:13:17:90:9e:5f:1f:01:ba:30:23:1a:ee:f2:1c:b7:be:
65:0b:be:03:7f:6b:88:40:ea:36:a1:c9:a9:e1:ea:3b:0a:60:
5a:46:37:3b:77:79:31:4c:ed:bb:7b:79:19:7d:3b:a8:91:2a:
3e:1d:68:bf:b7:11:5c:ab:29:a1:b8:7a:46:a6:47:47:85:ab:
0e:95:07:b8:14:a0:15:84:05:da:87:fd:6f:0c:5d:84:05:bd:
2d:cd:4f:92:4a:76:ea:a7:d4:5f:6f:93:6b:70:9d:2e:c4:8f:
3a:d9:85:5a:21:78:c1:34:45:71:93:50:05:ca:88:00:d8:48:
d8:78:b8:33:ee:9b:48:2d:12:46:c9:da:47:f3:33:f7:03:9e:
81:39:ae:c6:11:3e:bb:b4:eb:13:0c:20:ca:d1:cd:4e:b0:13:
c8:71:4f:2b:d9:ee:ff:50:cd:a1:85:93:01:21:d2:97:d7:ca:
94:07:83:51:b8:20:4e:72:53:5f:6e:d9:f2:70:2c:4f:9c:9d:
15:d6:d8:6f:c2:26:20:79:ac:8e:db:64:47:02:12:c5:00:ce:
1e:25:8f:e7:5c:81:af:95:24:92:11:b7:58:1c:23:0a:c4:2f:
53:ad:07:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:31:20 2025 by rpki-client