Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/RDn2kmSbVnJw7wdF-wZa8vdfrGk.roa
File: RDn2kmSbVnJw7wdF-wZa8vdfrGk.roa (raw, json)
Hash identifier: PPPp3w62aTSvX+pwPQUqMdFImPKU9XLCtHdMFcqqr1A=
Subject key identifier: 44:39:F6:92:64:9B:56:72:70:EF:07:45:FB:06:5A:F2:F7:5F:AC:69
Certificate issuer: /CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
Certificate serial: 0198A8E24C0D71DE39B11785F3D4CE9904BC
Authority key identifier: 83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/RDn2kmSbVnJw7wdF-wZa8vdfrGk.roa
Signing time: Thu 14 Aug 2025 14:00:59 +0000
ROA not before: Thu 14 Aug 2025 14:00:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203020
IP address blocks: 2.58.76.0/22 maxlen: 32
45.67.4.0/22 maxlen: 32
92.119.168.0/22 maxlen: 32
103.110.160.0/22 maxlen: 32
103.113.29.0/24 maxlen: 24
103.195.144.0/22 maxlen: 32
103.219.212.0/23 maxlen: 32
137.59.4.0/22 maxlen: 32
185.72.240.0/22 maxlen: 32
213.173.60.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a8:e2:4c:0d:71:de:39:b1:17:85:f3:d4:ce:99:04:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
Validity
Not Before: Aug 14 14:00:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4439f692649b567270ef0745fb065af2f75fac69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e1:9a:fd:04:88:cb:ad:a7:d7:d9:5d:af:6a:
d6:95:cd:af:aa:d5:ab:0b:04:1f:5e:82:21:ed:1a:
8d:9e:37:a1:71:20:4c:07:24:9a:e3:22:9a:73:10:
2f:f3:ca:23:fe:7f:80:81:4b:9a:d3:27:26:c0:68:
c1:6c:6e:54:87:90:26:d6:03:50:4a:28:70:32:04:
31:42:a4:91:ad:ab:94:9b:d6:57:54:19:59:19:12:
dd:4d:a8:82:76:cd:df:ef:71:62:76:c6:9a:35:17:
6f:c8:3d:7e:95:ac:2b:fd:f2:5f:9c:41:97:c0:af:
15:11:5f:e8:27:49:bd:8e:b0:87:9e:b5:7d:9d:4f:
0a:51:7c:6a:f2:7c:52:f7:22:9f:98:82:af:db:23:
97:15:b0:2d:1d:e5:15:30:da:0f:86:e8:a7:cd:55:
1f:c9:04:79:f8:17:f7:13:dc:f4:03:f3:b9:72:d8:
8f:4a:6d:61:2b:62:b4:fe:0d:ea:2b:9a:24:69:b9:
f1:50:27:75:c4:8b:a9:52:49:76:b7:8b:98:70:56:
37:27:bb:e2:0f:ca:fa:84:c7:d9:47:7e:9f:60:78:
ba:c6:88:00:84:11:7e:21:fc:90:e1:95:27:b2:84:
aa:8f:21:d7:ba:5d:bb:f9:b6:2e:8f:80:bd:a0:d8:
c8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:39:F6:92:64:9B:56:72:70:EF:07:45:FB:06:5A:F2:F7:5F:AC:69
X509v3 Authority Key Identifier:
keyid:83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/RDn2kmSbVnJw7wdF-wZa8vdfrGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.76.0/22
45.67.4.0/22
92.119.168.0/22
103.110.160.0/22
103.113.29.0/24
103.195.144.0/22
103.219.212.0/23
137.59.4.0/22
185.72.240.0/22
213.173.60.0/22
Signature Algorithm: sha256WithRSAEncryption
59:dd:18:33:3f:48:23:6c:7f:a7:71:84:b5:da:a7:d6:74:8a:
96:b1:43:c7:bc:77:3d:de:27:74:29:93:2e:18:a6:43:77:44:
65:c4:7c:0e:be:89:e4:0f:fb:8b:2c:bf:dc:ca:a1:99:38:d3:
d4:db:ee:67:10:be:80:4b:3c:b0:50:b7:8c:1e:d5:dc:e6:c7:
fa:11:96:93:cb:e6:8d:c1:f0:fe:04:f5:d4:3f:f4:7b:42:42:
d7:81:39:76:df:e7:78:4b:80:e7:49:b6:7f:60:2d:a1:69:39:
33:90:e6:a2:5c:b9:e3:e1:06:61:5a:5d:a4:86:8b:64:08:c9:
79:b2:5d:a5:6e:4a:f8:67:e9:12:5a:52:d3:2d:3c:26:28:0a:
57:21:0e:83:bd:e3:5a:cc:ef:3a:15:8e:a3:6e:93:d7:48:91:
83:17:0b:d9:cd:5f:ba:21:74:31:50:8a:4e:dd:3e:b1:fc:36:
e1:68:92:c0:12:bc:72:97:81:66:bf:7a:3b:9a:16:ef:ed:b9:
78:bb:1d:86:6d:14:f8:ca:7d:58:7c:de:be:14:a6:5b:41:c3:
13:1f:83:22:c3:b7:12:a2:db:52:98:ea:b9:e9:bb:e4:6e:5f:
be:60:ac:f7:f0:f7:98:72:fb:ff:49:66:48:52:60:bb:c8:2c:
04:5a:3d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:32:59 2025 by rpki-client