Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/_N04c68vWF1WhXHOL5knYD5yM1Q.roa
File: _N04c68vWF1WhXHOL5knYD5yM1Q.roa (raw, json)
Hash identifier: G/pN2CsDPm/52PLm2tgxp/9Fe9uuvo9jdn7HkaDsAhQ=
Subject key identifier: FC:DD:38:73:AF:2F:58:5D:56:85:71:CE:2F:99:27:60:3E:72:33:54
Certificate issuer: /CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8
Certificate serial: 019A26957FAA21FA1517AB1E6D4AB05CA8EF
Authority key identifier: 07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/_N04c68vWF1WhXHOL5knYD5yM1Q.roa
Signing time: Mon 27 Oct 2025 16:52:03 +0000
ROA not before: Mon 27 Oct 2025 16:52:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202210
IP address blocks: 185.48.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:95:7f:aa:21:fa:15:17:ab:1e:6d:4a:b0:5c:a8:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8
Validity
Not Before: Oct 27 16:52:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fcdd3873af2f585d568571ce2f9927603e723354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d7:85:fa:5a:1a:5e:2d:2d:70:61:b2:36:27:
11:0e:1c:9f:9e:e1:a0:6a:7b:67:bb:4e:91:e5:35:
36:eb:58:56:6a:8a:71:1d:e1:f4:cb:f1:55:99:a5:
e0:e6:20:f9:c2:98:52:40:13:63:b9:d2:c5:af:34:
89:96:8a:b0:3f:c6:38:af:d8:17:dd:08:dd:49:d4:
75:4c:95:fb:07:0f:00:35:75:e2:e3:54:f9:c9:b1:
05:d2:c7:f8:ee:14:4b:fa:e1:f0:9f:ae:f5:0a:9b:
c8:ab:bd:08:91:f7:9a:4c:ce:9a:8a:e6:1b:74:ee:
f0:a1:8d:df:ef:e5:a7:ec:50:48:69:8f:7b:ff:bd:
c0:33:60:d6:3c:44:bf:f5:68:c5:0d:7b:25:fe:ab:
40:41:b6:d3:41:d9:f4:50:d5:94:a7:27:b5:84:8a:
d5:88:c7:a0:92:f9:4a:f0:ca:97:0c:e3:38:6f:0b:
ed:95:eb:51:5a:b7:30:3f:25:5a:88:1c:74:0e:0b:
f8:f8:25:98:22:d9:b4:17:16:b8:80:ae:14:aa:5b:
0e:75:31:7f:3b:0d:5d:ad:67:c8:12:df:77:38:59:
2f:bf:44:f6:23:93:62:62:31:84:5f:17:00:09:f8:
fa:4e:bd:c4:e1:32:a9:4f:4b:49:ff:f7:ed:8d:f1:
2d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:DD:38:73:AF:2F:58:5D:56:85:71:CE:2F:99:27:60:3E:72:33:54
X509v3 Authority Key Identifier:
keyid:07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/_N04c68vWF1WhXHOL5knYD5yM1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.90.0/24
Signature Algorithm: sha256WithRSAEncryption
37:12:e2:f9:f5:f4:c7:c3:82:af:05:98:e6:2b:bf:c9:f4:6e:
fe:db:0b:7b:09:7b:4d:e5:87:78:27:be:dc:83:ac:e4:db:de:
25:ac:4f:39:e3:e3:d9:db:22:8f:e5:d1:e4:bc:8d:8b:32:71:
85:34:54:3e:f1:c6:65:00:ee:ed:75:3f:92:3f:8b:ed:55:36:
4e:7b:70:ed:22:48:d1:fb:4f:2c:38:c0:f9:18:44:ab:2b:dd:
be:fd:77:39:ec:fc:1c:d3:30:14:51:b7:f5:7e:2b:02:c7:ee:
af:e4:86:3d:f9:73:63:1e:13:7d:c8:5b:a5:84:59:8d:4b:47:
90:b3:fb:54:31:18:c4:44:57:ad:28:95:b2:b9:8d:d6:29:4b:
5b:34:18:a3:90:4a:7b:ae:db:80:33:ca:58:e9:b7:d4:1f:b8:
54:bb:da:f4:41:06:21:d3:66:d6:f9:d1:d9:10:5e:46:9f:d3:
e1:32:c8:66:c8:6f:ee:ac:d9:6e:e0:e0:c8:91:20:67:da:0d:
b4:92:98:b6:49:8f:5a:11:a2:34:88:e6:85:99:8f:c7:96:f0:
df:a5:ea:cf:e3:91:6d:69:18:ac:ed:21:6e:c7:b3:47:b4:ab:
8a:e1:8c:b5:88:03:64:4c:09:05:17:42:79:7f:b5:52:6a:92:
83:2e:25:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:30:15 2025 by rpki-client