Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/FMdyqXJx75SsYHRo74yRZtJfbMc.roa
File: FMdyqXJx75SsYHRo74yRZtJfbMc.roa (raw, json)
Hash identifier: Zm+rQF+Dy5RB5vgROD8BvywsTYvHOiNu+Eb9+4x3d2c=
Subject key identifier: 14:C7:72:A9:72:71:EF:94:AC:60:74:68:EF:8C:91:66:D2:5F:6C:C7
Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Certificate serial: 01982D909082F1076635F1D055231668211D
Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/FMdyqXJx75SsYHRo74yRZtJfbMc.roa
Signing time: Mon 21 Jul 2025 15:18:25 +0000
ROA not before: Mon 21 Jul 2025 15:18:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 109.175.210.0/24 maxlen: 24
2a01:fb00::/32 maxlen: 32
2a01:fb00::/33 maxlen: 33
2a01:fb00::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2d:90:90:82:f1:07:66:35:f1:d0:55:23:16:68:21:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Validity
Not Before: Jul 21 15:18:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14c772a97271ef94ac607468ef8c9166d25f6cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:44:40:dd:7d:b4:c7:3b:66:29:a8:64:df:66:
a7:c6:ff:39:21:ca:3f:59:ca:0d:ce:b9:84:0f:d3:
a1:09:5d:61:61:80:c4:23:77:1e:45:a4:06:fd:2f:
76:e8:e2:da:b2:e6:03:cf:03:75:80:95:33:c5:53:
23:b2:a0:94:fd:ef:5e:c3:8a:d0:dc:6b:8c:d1:8d:
ca:c8:55:37:e8:9b:0c:c8:fa:85:97:10:37:a7:0a:
6b:da:0b:5a:02:c1:8e:5a:75:90:91:d6:7c:ed:c4:
7f:18:7e:5e:27:55:e6:5a:1b:35:2a:ae:f5:48:bf:
f6:61:29:95:67:cc:f1:b9:96:9e:65:47:40:e9:8e:
c2:16:3d:6c:19:50:d3:c7:a8:eb:3b:99:43:a9:7b:
f4:12:a1:6d:c2:85:8e:21:af:6e:cd:7e:c5:b2:7b:
b5:e9:46:71:44:b9:c1:5f:c6:64:f4:8f:d7:bd:4a:
67:d2:8d:38:0a:75:66:0f:e9:fb:1e:3a:bd:c8:d8:
f7:9f:bb:82:e5:85:8d:3a:0a:29:f5:9b:e4:32:56:
6a:94:69:7e:ae:4e:09:f0:28:ad:4d:ae:72:bd:df:
25:a4:f6:38:6a:0f:1f:d9:b5:d3:1b:ad:e8:b1:31:
b0:e7:2f:59:f3:d8:7b:df:e1:76:ac:71:47:9f:5b:
e2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C7:72:A9:72:71:EF:94:AC:60:74:68:EF:8C:91:66:D2:5F:6C:C7
X509v3 Authority Key Identifier:
keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/FMdyqXJx75SsYHRo74yRZtJfbMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.175.210.0/24
IPv6:
2a01:fb00::/32
Signature Algorithm: sha256WithRSAEncryption
3c:36:23:a9:11:43:19:09:03:e9:23:56:f2:7e:60:42:d9:6c:
d1:a9:0d:59:b4:07:38:cc:69:ce:31:4a:26:da:9d:ac:1c:67:
17:20:43:76:06:b0:53:c3:2d:77:d2:0c:2a:3c:c5:46:df:87:
bc:40:0b:d0:ff:22:2a:f7:55:ef:56:76:9d:3b:5c:e4:d2:57:
dd:31:8d:81:92:7c:25:61:18:53:15:9f:1a:b5:dd:bf:51:c2:
6d:51:43:80:80:bb:05:e8:97:ad:57:65:0b:74:18:03:a8:8e:
f5:5f:5a:55:25:c1:66:b4:8d:d8:d1:db:09:89:05:6a:ed:87:
f0:86:08:11:48:99:7b:89:9a:1e:86:93:dc:58:ab:b1:38:38:
92:bf:be:2c:08:0c:ca:24:16:18:a0:93:24:f0:af:a6:61:7f:
77:9c:e3:53:51:e0:25:ee:c9:40:06:04:7e:b6:29:29:7b:06:
31:76:e0:db:d2:d7:62:c5:c4:f6:0e:b4:bb:7e:58:71:2f:3b:
e2:8a:9f:49:c0:22:93:7d:62:5c:99:b6:71:f1:b0:1a:0d:37:
0f:1e:c3:82:8f:b3:a7:01:06:40:9e:23:fe:40:d0:c7:97:76:
8c:1e:bb:dd:26:8d:bf:53:b6:52:a9:e1:6d:d9:68:02:fd:50:
e1:d0:b0:88
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZgtkJCC8QdmNfHQVSMWaCEdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMjQ1ODFlNDM2ODgyNWQ1ZTEzZjRmMmEwZDZmZjhlNDg0
Yzk1ZTYwHhcNMjUwNzIxMTUxODI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGM3NzJhOTcyNzFlZjk0YWM2MDc0NjhlZjhjOTE2NmQyNWY2Y2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmURA3X20xztmKahk32anxv85Ico/
WcoNzrmED9OhCV1hYYDEI3ceRaQG/S926OLasuYDzwN1gJUzxVMjsqCU/e9ew4rQ
3GuM0Y3KyFU36JsMyPqFlxA3pwpr2gtaAsGOWnWQkdZ87cR/GH5eJ1XmWhs1Kq71
SL/2YSmVZ8zxuZaeZUdA6Y7CFj1sGVDTx6jrO5lDqXv0EqFtwoWOIa9uzX7Fsnu1
6UZxRLnBX8Zk9I/XvUpn0o04CnVmD+n7Hjq9yNj3n7uC5YWNOgop9ZvkMlZqlGl+
rk4J8CitTa5yvd8lpPY4ag8f2bXTG63osTGw5y9Z89h73+F2rHFHn1vi3QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFBTHcqlyce+UrGB0aO+MkWbSX2zHMB8GA1UdIwQY
MBaAFPMkWB5DaIJdXhP08qDW/45ITJXmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMt
NmUyZDk3Y2ExNWZmLzEvRk1keXFYSng3NVNzWUhSbzc0eVJadEpmYk1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMtNmUyZDk3Y2ExNWZm
LzEvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAba/SMA0E
AgACMAcDBQAqAfsAMA0GCSqGSIb3DQEBCwUAA4IBAQA8NiOpEUMZCQPpI1byfmBC
2WzRqQ1ZtAc4zGnOMUom2p2sHGcXIEN2BrBTwy130gwqPMVG34e8QAvQ/yIq91Xv
VnadO1zk0lfdMY2BknwlYRhTFZ8atd2/UcJtUUOAgLsF6JetV2ULdBgDqI71X1pV
JcFmtI3Y0dsJiQVq7YfwhggRSJl7iZoehpPcWKuxODiSv74sCAzKJBYYoJMk8K+m
YX93nONTUeAl7slABgR+tikpewYxduDb0tdixcT2DrS7flhxLzviip9JwCKTfWJc
mbZx8bAaDTcPHsOCj7OnAQZAniP+QNDHl3aMHrvdJo2/U7ZSqeFt2WgC/VDh0LCI
-----END CERTIFICATE-----
Generated at Sun Aug 10 04:47:47 2025 by rpki-client