Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/FGCBuXNdCRJBnwyT8PFWj7JE4bA.roa
File: FGCBuXNdCRJBnwyT8PFWj7JE4bA.roa (raw, json)
Hash identifier: 4O4dpfzc45Sg/EY/pqYV5oyr3BQPoi+bleHU4j2GwEM=
Subject key identifier: 14:60:81:B9:73:5D:09:12:41:9F:0C:93:F0:F1:56:8F:B2:44:E1:B0
Certificate issuer: /CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84
Certificate serial: 019A3A090D4A14EB3F3B948FFDFEE7CF7C83
Authority key identifier: 33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/FGCBuXNdCRJBnwyT8PFWj7JE4bA.roa
Signing time: Fri 31 Oct 2025 11:31:03 +0000
ROA not before: Fri 31 Oct 2025 11:31:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206557
IP address blocks: 185.135.134.0/23 maxlen: 23
185.154.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3a:09:0d:4a:14:eb:3f:3b:94:8f:fd:fe:e7:cf:7c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84
Validity
Not Before: Oct 31 11:31:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=146081b9735d0912419f0c93f0f1568fb244e1b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:35:cb:80:4d:65:1a:8b:fd:91:fe:de:1d:3a:
8b:2b:46:87:e2:5f:f3:a4:8d:c0:a7:0b:76:6d:ef:
df:dc:d7:e3:e9:46:4f:a1:6d:8b:ed:ec:93:af:7c:
d8:90:a2:a3:57:48:0b:de:80:36:54:70:09:eb:b3:
b9:6c:46:c2:b9:39:1a:63:bc:0e:ef:3c:21:6a:06:
2c:93:f8:d0:68:d6:0c:e1:8d:c2:e4:2c:04:5d:30:
58:4b:a7:48:dd:31:62:53:65:7b:21:19:f5:9f:40:
5f:e3:4c:9b:0c:3b:41:90:51:91:db:a9:6e:c8:d3:
7f:ba:5f:ba:9f:51:02:32:32:20:ec:02:bc:88:8a:
cc:75:37:d1:99:f4:fd:39:89:d6:62:19:01:ec:43:
4f:41:96:9c:89:03:e5:ec:7c:8f:96:0a:69:32:3c:
39:78:1d:b9:51:74:69:b2:12:93:89:71:97:0b:d2:
88:01:9f:a7:9b:be:6c:fc:3f:f8:41:8f:59:0b:16:
5d:e9:6b:86:7b:85:a3:3b:98:4d:b6:e4:1e:f5:3b:
e1:dc:ff:33:95:10:b3:64:45:d3:2b:46:68:3a:e7:
e1:17:11:0b:35:f6:42:ea:82:96:d8:64:4d:74:85:
89:3b:45:16:43:88:dd:f5:30:26:48:c3:16:34:45:
14:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:60:81:B9:73:5D:09:12:41:9F:0C:93:F0:F1:56:8F:B2:44:E1:B0
X509v3 Authority Key Identifier:
keyid:33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/FGCBuXNdCRJBnwyT8PFWj7JE4bA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.134.0/23
185.154.16.0/22
Signature Algorithm: sha256WithRSAEncryption
07:bb:1b:8c:18:33:a8:c0:8a:15:a1:a1:09:5c:48:eb:1b:46:
54:8c:ea:79:15:da:75:06:a5:80:ae:55:39:f5:b6:cc:ae:fd:
d6:f0:cf:f5:99:61:59:65:f3:e8:92:ee:18:b5:5a:93:24:d4:
fb:12:37:63:e2:3e:26:6b:3a:9a:f7:af:1c:f5:c2:bf:4d:1e:
37:12:93:0d:a2:ae:bf:ef:83:e9:0f:c0:f2:ca:94:10:d3:82:
3a:dc:00:ce:f2:1b:6b:f2:3a:62:01:71:b8:95:03:b8:ab:8f:
d1:cd:0d:dc:c4:9a:74:e4:78:f0:9a:98:0c:6e:e4:67:5e:36:
a0:8c:48:b5:ac:49:1f:12:3f:17:13:d0:67:44:06:dc:2f:5a:
78:d9:b2:ed:48:82:7a:a2:c9:71:24:c2:bf:ef:55:6f:48:6e:
0f:b5:55:a1:0c:02:1a:4e:7a:69:0d:5c:2f:81:e4:a8:39:30:
6d:79:f5:88:79:ae:89:24:38:87:6a:25:31:06:33:55:da:f8:
d4:21:e6:48:4d:ce:97:5a:8f:be:58:db:34:34:5a:a8:e5:d0:
cc:66:28:6f:35:3e:40:75:7f:78:e7:16:02:82:2a:3d:30:5f:
c1:3c:9b:dd:34:25:36:fc:2a:42:c1:50:84:f3:8c:6e:8c:f9:
6e:24:13:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:04:45 2025 by rpki-client