Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/FCOMXnULUVL5uVnX_zvOHcdHJYc.roa
File: FCOMXnULUVL5uVnX_zvOHcdHJYc.roa (raw, json)
Hash identifier: 4uixJ9jDs2SwFvLmk4CIP+prYWqzHVN0aIW9iOFGL0s=
Subject key identifier: 14:23:8C:5E:75:0B:51:52:F9:B9:59:D7:FF:3B:CE:1D:C7:47:25:87
Certificate issuer: /CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Certificate serial: 01985516A91F4747CF613DCAA67CDD790BB1
Authority key identifier: 44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/FCOMXnULUVL5uVnX_zvOHcdHJYc.roa
Signing time: Tue 29 Jul 2025 07:30:05 +0000
ROA not before: Tue 29 Jul 2025 07:30:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57152
IP address blocks: 185.70.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:16:a9:1f:47:47:cf:61:3d:ca:a6:7c:dd:79:0b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Validity
Not Before: Jul 29 07:30:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14238c5e750b5152f9b959d7ff3bce1dc7472587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:93:4b:3f:93:ad:5e:25:a9:3f:a5:f8:3c:b5:
87:58:e8:ad:78:eb:a9:0f:d5:52:28:2e:6f:4d:ad:
87:9b:8a:61:83:7e:13:73:f6:0e:e1:af:65:7b:8f:
a7:28:1e:aa:df:e4:a1:c6:1d:2f:8f:58:46:b5:91:
b1:74:4f:52:6c:ab:b9:9f:09:7f:e3:03:5b:70:c0:
25:09:f2:48:43:2e:f9:7e:55:ec:dd:e4:a5:ef:55:
7c:37:08:45:f7:77:65:fd:7a:43:c8:85:cd:73:32:
55:0a:7a:02:76:17:59:7b:a4:4f:0e:c2:b7:4f:6c:
9f:f2:b3:2f:28:4b:7e:aa:e8:64:e9:a3:35:5c:4f:
2d:92:06:9f:02:90:fa:5d:47:f9:0f:b9:33:6d:bb:
e4:7a:bf:d6:c0:0e:44:b5:c1:02:26:fc:99:66:21:
2a:b0:a3:a5:e2:63:45:30:92:4b:56:1b:e7:8e:48:
15:dc:29:bc:9d:a6:d8:92:38:26:fc:6c:13:6e:45:
d8:80:13:a8:66:ac:81:be:d6:de:34:b2:dc:a6:e0:
a9:69:ff:82:62:3a:be:5c:b7:b1:e3:f4:9b:49:06:
cc:80:b2:d5:52:20:6e:5a:fe:a9:df:5f:4f:24:2b:
a8:5b:fb:2a:3c:30:5b:09:07:f0:97:0b:c0:99:6e:
07:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:23:8C:5E:75:0B:51:52:F9:B9:59:D7:FF:3B:CE:1D:C7:47:25:87
X509v3 Authority Key Identifier:
keyid:44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/FCOMXnULUVL5uVnX_zvOHcdHJYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.97.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:ab:f9:d0:45:ab:34:c7:7f:51:2a:d8:63:19:4b:aa:d9:a6:
99:44:4c:78:07:ae:60:5e:7d:f9:1c:dd:1a:3f:ef:50:82:2e:
44:e1:ca:e0:63:5b:4a:5d:60:84:41:a3:fa:a4:ac:c4:ca:51:
dd:84:c3:6f:b3:da:63:1c:e7:10:df:36:09:e1:af:f5:01:0e:
a7:2d:11:3c:b0:04:f3:9e:fa:c7:b2:be:97:8b:ce:52:f0:17:
47:1a:62:53:4e:f6:e9:12:5b:12:e9:3c:8a:bb:60:15:f5:30:
08:39:0f:c6:6c:b4:2f:14:ab:c1:02:87:70:fc:42:c6:2e:42:
b2:95:9d:0b:15:a7:e6:31:5a:bd:5a:c3:a3:1b:58:02:89:8c:
22:f9:52:b2:39:70:9e:80:36:09:df:30:c1:6b:9d:ae:81:6e:
ba:f0:01:1f:37:46:c7:b8:d7:83:75:8c:77:69:c2:c1:23:40:
99:14:fe:87:30:f9:76:88:06:07:d9:f5:50:70:c7:5b:21:bf:
cd:0f:5d:1a:e3:8e:f2:c0:8d:15:4a:4d:76:22:32:37:78:15:
82:7a:4a:1c:24:c1:20:6b:ca:d1:fd:bd:0d:1c:db:df:fe:fb:
09:c4:be:e4:b6:e8:15:34:42:c5:d2:3d:a1:38:cd:fb:1a:a3:
45:a7:87:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:15:51 2025 by rpki-client