Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/1--VJLLEqxUFNksnMGjzlf8EDFtQ.roa
File: 1--VJLLEqxUFNksnMGjzlf8EDFtQ.roa (raw, json)
Hash identifier: sFeqpTNRKdtfgCpWnfT6bNWQpLS/rgow0C1Miwb4XkU=
Subject key identifier: FB:E5:49:2C:B1:2A:C5:41:4D:92:C9:CC:1A:3C:E5:7F:C1:03:16:D4
Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Certificate serial: 019A1CB96407C4A95A28A5934A54FDB51534
Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/1--VJLLEqxUFNksnMGjzlf8EDFtQ.roa
Signing time: Sat 25 Oct 2025 18:55:03 +0000
ROA not before: Sat 25 Oct 2025 18:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57369
IP address blocks: 109.205.193.0/24 maxlen: 24
2a01:fb01::/32 maxlen: 32
2a01:fb05:9000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:b9:64:07:c4:a9:5a:28:a5:93:4a:54:fd:b5:15:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Validity
Not Before: Oct 25 18:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbe5492cb12ac5414d92c9cc1a3ce57fc10316d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:be:6d:20:57:ac:0a:1c:92:d0:90:d0:c1:66:
f4:87:42:1e:c9:2a:4f:38:9b:2f:f5:22:ae:98:53:
7a:fb:fe:a5:1c:64:e3:a4:98:4b:c9:7e:ed:26:7d:
70:d4:c4:12:83:9f:95:de:d3:c9:59:8e:2c:a3:b4:
ff:8a:0b:ce:e3:f3:31:11:66:51:32:2d:97:f3:d7:
80:a5:19:3c:d6:a6:b0:0c:c2:66:f0:cd:6e:a9:d6:
33:3b:8f:43:dd:3c:fa:74:20:15:ed:71:4e:75:a9:
62:3b:39:fe:fb:b8:67:73:b3:c3:40:72:12:31:81:
d2:49:08:05:f6:e5:f8:7d:12:b5:38:2b:42:a7:6a:
62:06:bf:40:6f:aa:09:39:b8:d9:3c:1e:6c:1d:e3:
cf:91:26:c7:82:62:e7:90:50:67:e1:e7:fd:2f:4b:
5c:86:c3:34:90:9d:ac:10:01:ca:5d:b9:3a:04:b2:
0d:cc:9b:d8:ad:d4:8e:45:dd:88:fe:54:97:29:9e:
74:dd:cc:d4:8e:e9:19:6c:62:68:91:54:25:85:6d:
1b:78:86:29:b9:44:47:e3:f7:21:c2:0a:94:d1:c9:
61:b2:43:5a:3b:43:59:8b:64:92:90:94:d4:5d:19:
f1:be:e7:b1:4a:7c:db:fc:81:01:11:e6:b0:3d:c5:
f1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E5:49:2C:B1:2A:C5:41:4D:92:C9:CC:1A:3C:E5:7F:C1:03:16:D4
X509v3 Authority Key Identifier:
keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/1--VJLLEqxUFNksnMGjzlf8EDFtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.193.0/24
IPv6:
2a01:fb01::/32
2a01:fb05:9000::/36
Signature Algorithm: sha256WithRSAEncryption
69:86:26:c1:5b:4e:2d:d6:a3:5e:10:e2:bb:dc:50:13:75:9d:
07:f7:67:9a:d9:33:66:94:43:40:f2:a9:58:06:64:4b:dc:23:
40:01:7b:e0:5e:34:72:82:6a:aa:1c:33:f1:44:8c:0c:05:58:
69:b3:62:b4:3e:a9:4b:e3:2e:70:12:2c:55:db:e9:ea:73:92:
b4:b4:4c:84:4c:42:e6:da:68:a9:87:36:13:16:2f:a3:a2:fa:
f6:96:ec:ee:90:b3:2f:e2:1d:05:64:8d:c3:78:de:11:91:e4:
08:26:8d:2e:ef:28:f2:05:58:37:32:37:e7:91:6b:30:81:9f:
8b:7a:c5:39:a9:31:39:e3:09:89:ec:c7:34:7f:35:7d:00:72:
ed:28:8e:11:b2:b2:40:17:92:95:ff:c8:09:d4:4b:f0:85:01:
72:48:71:e0:93:bf:35:62:a3:ba:30:cd:25:41:de:d7:e2:94:
2e:84:4b:f4:5e:66:c4:50:b3:f0:1f:61:bd:c6:8c:d3:c5:c5:
f4:23:40:92:0b:08:a4:0e:48:72:41:d6:d5:f3:20:b4:d3:ac:
de:ea:b7:62:e9:5e:72:67:d8:3d:7d:4b:71:bf:49:65:23:8a:
9c:a2:3d:b7:d2:3c:9e:08:b0:9b:e3:4f:7b:3c:9a:64:05:76:
68:fd:63:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:07:41 2025 by rpki-client