Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/F-FeFwK67IqrOUsA3FmlpxAi7bc.roa
File: F-FeFwK67IqrOUsA3FmlpxAi7bc.roa (raw, json)
Hash identifier: PVZ9DoTtCTkcUlYmN9jyYna9JB4rr9b2gTLQ61MOmV0=
Subject key identifier: 17:E1:5E:17:02:BA:EC:8A:AB:39:4B:00:DC:59:A5:A7:10:22:ED:B7
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019A4DA4E3CA5B69CB41AB252C351C299AE9
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/F-FeFwK67IqrOUsA3FmlpxAi7bc.roa
Signing time: Tue 04 Nov 2025 06:54:03 +0000
ROA not before: Tue 04 Nov 2025 06:54:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205923
IP address blocks: 2a0f:f44::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:a4:e3:ca:5b:69:cb:41:ab:25:2c:35:1c:29:9a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Nov 4 06:54:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17e15e1702baec8aab394b00dc59a5a71022edb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:73:b1:14:ec:b6:d8:22:d5:e7:36:74:bb:78:
b2:1c:88:a1:a9:38:1d:48:a1:d7:77:82:94:2f:14:
b5:0e:91:23:f5:ec:14:1d:42:80:d0:2a:d8:b2:b8:
3a:e6:29:ec:55:71:38:53:89:00:bb:a6:ba:c1:45:
c1:93:bb:5d:8e:71:ba:10:3b:12:d1:dd:47:22:fc:
8e:a8:0c:b0:5e:5d:e0:af:7a:98:f2:2a:ef:9b:f0:
3f:19:be:2a:71:9c:8e:1f:96:50:21:49:72:b5:03:
9e:a7:85:c7:97:f4:31:17:a1:a5:0d:70:37:20:85:
a9:83:f1:3b:ba:b6:fd:32:22:21:53:5d:4f:b6:db:
43:22:e2:4d:5d:d8:8d:77:6b:c0:8a:56:52:6b:99:
a2:68:16:ca:6e:7c:83:9e:43:8b:7b:03:56:c0:bb:
7f:34:52:c1:d5:19:9e:dd:5d:f2:b2:3d:d7:f8:de:
79:d4:ee:c7:7c:8e:9b:a8:76:84:e1:95:46:60:ab:
58:4c:ff:b0:a9:50:c5:0a:f4:29:8e:ae:71:ae:88:
a8:1d:01:ec:73:1e:a2:60:0a:a0:72:34:0e:15:bd:
e8:5c:5f:8f:5e:8a:ad:c8:ea:b4:3b:e4:d0:32:fa:
6d:1b:73:48:82:32:71:ef:e0:e2:8e:ce:4e:a9:4c:
cc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E1:5E:17:02:BA:EC:8A:AB:39:4B:00:DC:59:A5:A7:10:22:ED:B7
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/F-FeFwK67IqrOUsA3FmlpxAi7bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:f44::/32
Signature Algorithm: sha256WithRSAEncryption
62:1d:9c:99:c3:e7:b7:b4:8d:c6:c9:b3:4a:8e:76:a2:f8:3a:
50:de:f3:25:b8:80:31:f9:23:89:60:1d:61:38:54:a9:79:31:
03:c0:44:d5:76:54:12:83:52:ee:78:eb:5f:bb:5a:26:61:6d:
33:5b:14:75:c2:bd:00:9d:fd:c9:1d:76:d3:c5:e7:82:28:69:
9c:b1:5d:e2:2c:3c:0a:f6:8e:2f:8e:48:9f:ed:98:e6:46:8b:
63:4f:cd:5b:de:b9:52:81:5f:ca:b8:8a:73:57:08:2c:50:20:
a1:8a:34:32:68:94:50:22:4f:c1:88:21:18:85:a7:12:3e:90:
22:d0:24:1c:7f:2f:74:3c:da:ff:56:1b:9f:fb:1a:ab:f2:ef:
80:4b:f5:84:7c:9e:9b:77:14:2c:a9:40:35:06:58:c2:be:1b:
9f:cd:3c:07:f5:df:f1:0b:74:b6:36:5e:b9:7c:92:6f:3d:28:
5f:76:ae:f7:1e:4e:e8:4d:24:3b:39:8f:8a:88:60:ba:ec:92:
79:9a:ca:f2:a4:c9:2f:b1:26:ef:bc:77:b7:da:8b:26:85:56:
5e:fc:e0:44:2c:76:a0:91:47:a7:f8:59:f7:fb:de:fc:ac:8d:
a4:c3:0d:bc:ca:f9:ba:f1:0d:0f:6e:91:1f:e6:32:93:62:32:
04:b0:76:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:22:47 2025 by rpki-client