Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/f1ExHnnpEtCBbKoz7AnZOPhegIQ.roa
File: f1ExHnnpEtCBbKoz7AnZOPhegIQ.roa (raw, json)
Hash identifier: tpDqxgdQcG2Fws3Zh018Pk/IwRSbsjhgaDj2i2YW1RE=
Subject key identifier: 7F:51:31:1E:79:E9:12:D0:81:6C:AA:33:EC:09:D9:38:F8:5E:80:84
Certificate issuer: /CN=7f33fc40d2e0333bbc7bdeab2bd859954301c0f1
Certificate serial: 019A533572C66558988BA366E486643A6BC5
Authority key identifier: 7F:33:FC:40:D2:E0:33:3B:BC:7B:DE:AB:2B:D8:59:95:43:01:C0:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/f1ExHnnpEtCBbKoz7AnZOPhegIQ.roa
Signing time: Wed 05 Nov 2025 08:50:03 +0000
ROA not before: Wed 05 Nov 2025 08:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204030
IP address blocks: 87.101.84.0/22 maxlen: 22
185.116.80.0/22 maxlen: 22
2a06:7c80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:35:72:c6:65:58:98:8b:a3:66:e4:86:64:3a:6b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f33fc40d2e0333bbc7bdeab2bd859954301c0f1
Validity
Not Before: Nov 5 08:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f51311e79e912d0816caa33ec09d938f85e8084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:a6:a8:c0:71:f2:38:f9:69:fc:fa:07:9d:d3:
63:db:c9:1c:4c:dc:3c:af:86:8c:2b:c3:99:cb:f0:
a4:d1:26:22:7f:e3:98:d8:79:1f:44:c8:f8:7a:06:
2d:fc:82:2c:26:7f:1f:e2:d9:6f:31:24:34:bd:7a:
51:d7:6c:81:4b:73:5c:ce:4c:6d:0d:69:bd:20:ae:
6f:d1:09:06:03:81:7c:73:45:c5:89:ad:4b:f9:29:
3f:db:17:ea:b4:df:68:89:fc:24:4b:40:4b:f4:e5:
89:08:01:47:a7:60:70:88:4f:3e:cc:f3:43:f2:5e:
ee:24:78:09:08:08:03:d2:db:23:8c:1c:63:97:52:
0f:55:85:7b:b2:ce:a9:03:16:96:d5:88:63:3d:a9:
9c:6a:e9:dd:aa:2b:8e:be:c2:20:cc:09:b4:3e:52:
11:03:42:62:5e:e0:42:a8:4a:5d:66:05:d2:99:80:
d7:8e:34:a3:69:94:fe:47:9d:71:31:ef:5f:bf:84:
9a:fe:09:b9:a0:37:8d:b4:1a:b4:ee:47:b9:23:e6:
55:f4:df:48:cb:47:bb:0d:ba:27:4f:20:67:a6:96:
1c:5f:d5:12:89:b8:13:8e:b2:8d:39:f2:92:c3:cf:
02:f6:5d:77:a4:f6:c1:8f:3a:dc:89:44:77:c3:52:
16:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:51:31:1E:79:E9:12:D0:81:6C:AA:33:EC:09:D9:38:F8:5E:80:84
X509v3 Authority Key Identifier:
keyid:7F:33:FC:40:D2:E0:33:3B:BC:7B:DE:AB:2B:D8:59:95:43:01:C0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/f1ExHnnpEtCBbKoz7AnZOPhegIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.101.84.0/22
185.116.80.0/22
IPv6:
2a06:7c80::/29
Signature Algorithm: sha256WithRSAEncryption
1f:f4:7c:d0:cd:fa:7a:96:dc:0a:8f:03:69:ac:89:13:c3:c1:
e1:d1:95:56:6b:e2:7e:2c:8c:92:8c:5c:78:88:6c:de:d4:ee:
30:17:61:c2:47:1f:51:9b:29:ea:c0:40:e2:61:51:b2:a4:2f:
a3:fe:7b:40:51:4d:6e:e9:64:55:dc:0d:d7:95:8c:c9:89:2b:
91:58:de:00:02:55:f3:47:32:b4:32:cf:1b:a6:64:cd:c1:cd:
43:07:ef:9f:e7:a8:91:7e:1a:b2:e7:43:9d:31:b9:0a:f4:01:
b6:12:fe:87:e0:de:1f:c0:d2:b5:ff:4e:2b:11:e8:ad:e1:79:
48:b0:d7:a1:27:4b:76:2a:32:4f:c2:3b:56:41:23:b9:47:df:
8b:d2:42:36:79:5a:c3:36:5e:00:a4:18:01:a0:1b:13:3c:dc:
69:c2:d7:15:48:39:5b:c6:28:d3:a8:e4:6b:58:95:09:f0:3a:
bf:34:cd:02:b2:ab:df:64:1c:97:1d:ca:80:d1:5b:c5:2c:3c:
c2:47:f4:bd:6b:4c:5b:82:23:0f:f6:b3:be:67:f3:7a:44:ad:
1e:92:56:a0:4e:02:81:85:f1:12:98:56:cd:b3:b5:ff:ae:60:
9a:ac:21:23:4e:e2:89:f2:b4:de:4e:08:8f:8e:4e:7d:29:c4:
55:2d:20:ef
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZpTNXLGZViYi6Nm5IZkOmvFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMzNmYzQwZDJlMDMzM2JiYzdiZGVhYjJiZDg1OTk1NDMw
MWMwZjEwHhcNMjUxMTA1MDg1MDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjUxMzExZTc5ZTkxMmQwODE2Y2FhMzNlYzA5ZDkzOGY4NWU4MDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8aaowHHyOPlp/PoHndNj28kcTNw8
r4aMK8OZy/Ck0SYif+OY2HkfRMj4egYt/IIsJn8f4tlvMSQ0vXpR12yBS3Nczkxt
DWm9IK5v0QkGA4F8c0XFia1L+Sk/2xfqtN9oifwkS0BL9OWJCAFHp2BwiE8+zPND
8l7uJHgJCAgD0tsjjBxjl1IPVYV7ss6pAxaW1YhjPamcaundqiuOvsIgzAm0PlIR
A0JiXuBCqEpdZgXSmYDXjjSjaZT+R51xMe9fv4Sa/gm5oDeNtBq07ke5I+ZV9N9I
y0e7DbonTyBnppYcX9USibgTjrKNOfKSw88C9l13pPbBjzrciUR3w1IWDQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFH9RMR556RLQgWyqM+wJ2Tj4XoCEMB8GA1UdIwQY
MBaAFH8z/EDS4DM7vHveqyvYWZVDAcDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnpQOFFOTGdNenU4ZTk2cks5aFpsVU1Cd1BFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC82NWJmMWQtZWMxZC00MGU2LTg0OWQt
Nzk3OTBkNjZkN2QzLzEvZjFFeEhubnBFdENCYktvejdBblpPUGhlZ0lRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC82NWJmMWQtZWMxZC00MGU2LTg0OWQtNzk3OTBkNjZkN2Qz
LzEvZnpQOFFOTGdNenU4ZTk2cks5aFpsVU1Cd1BFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCV2VUAwQC
uXRQMA0EAgACMAcDBQMqBnyAMA0GCSqGSIb3DQEBCwUAA4IBAQAf9HzQzfp6ltwK
jwNprIkTw8Hh0ZVWa+J+LIySjFx4iGze1O4wF2HCRx9RmynqwEDiYVGypC+j/ntA
UU1u6WRV3A3XlYzJiSuRWN4AAlXzRzK0Ms8bpmTNwc1DB++f56iRfhqy50OdMbkK
9AG2Ev6H4N4fwNK1/04rEeit4XlIsNehJ0t2KjJPwjtWQSO5R9+L0kI2eVrDNl4A
pBgBoBsTPNxpwtcVSDlbxijTqORrWJUJ8Dq/NM0CsqvfZByXHcqA0VvFLDzCR/S9
a0xbgiMP9rO+Z/N6RK0eklagTgKBhfESmFbNs7X/rmCarCEjTuKJ8rTeTgiPjk59
KcRVLSDv
-----END CERTIFICATE-----
Generated at Thu Nov 6 01:46:31 2025 by rpki-client