Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/i_KPYNfH_ISHnwyYczzOTNrsq74.roa
File: i_KPYNfH_ISHnwyYczzOTNrsq74.roa (raw, json)
Hash identifier: 5HYx2Gk9YXAdl7mXcKfoivpRSdlZngwuZv9PRr3UOHA=
Subject key identifier: 8B:F2:8F:60:D7:C7:FC:84:87:9F:0C:98:73:3C:CE:4C:DA:EC:AB:BE
Certificate issuer: /CN=4ca66f3c0f25774e696d2a46723277eb961128c3
Certificate serial: 0199F2B8759AD1BF0D8CB97C4AF43F5001C9
Authority key identifier: 4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/i_KPYNfH_ISHnwyYczzOTNrsq74.roa
Signing time: Fri 17 Oct 2025 15:09:58 +0000
ROA not before: Fri 17 Oct 2025 15:09:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214967
IP address blocks: 176.65.139.0/24 maxlen: 24
176.65.140.0/24 maxlen: 24
176.65.141.0/24 maxlen: 24
176.65.142.0/24 maxlen: 24
176.65.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f2:b8:75:9a:d1:bf:0d:8c:b9:7c:4a:f4:3f:50:01:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca66f3c0f25774e696d2a46723277eb961128c3
Validity
Not Before: Oct 17 15:09:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8bf28f60d7c7fc84879f0c98733cce4cdaecabbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c5:29:96:78:9e:a1:d0:7d:f3:9f:c4:d4:cd:
a4:f9:65:35:ab:de:aa:17:6b:47:21:c5:81:72:88:
81:ed:48:17:f2:af:fc:f6:cd:77:6b:57:f4:30:b1:
84:25:ad:cd:a4:cf:29:7b:df:58:0a:4f:bc:52:86:
f1:a4:9b:bb:2d:e7:87:b6:36:53:67:d5:4a:74:d6:
4f:d7:fd:9d:97:a7:8d:66:b4:77:de:20:40:10:7b:
c3:10:08:2c:be:05:cc:70:cb:69:25:36:1c:ee:34:
5d:cf:29:fc:cd:6b:c8:be:26:c9:7b:64:d5:97:c9:
9b:a4:90:a1:3b:0a:7f:ac:d5:0d:fb:d3:3e:24:47:
04:d8:d6:c9:a7:2b:18:b1:78:00:cb:65:c2:42:1b:
53:25:43:6b:56:e3:17:86:2e:df:d1:8d:00:76:92:
4c:7b:d9:8d:37:64:16:24:24:57:6e:5f:a9:ae:fa:
a9:4b:8e:a2:6e:69:f2:cd:54:74:24:c6:e9:8a:03:
84:f7:82:bb:61:95:e9:e4:01:8d:82:00:ce:e8:3b:
74:92:4e:68:8b:f7:8f:41:57:01:48:f0:f5:95:ad:
73:24:d0:5e:81:fe:5b:20:2a:eb:8d:85:5d:e6:35:
65:d5:6f:ac:ec:17:5d:6e:46:01:44:12:20:31:21:
17:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F2:8F:60:D7:C7:FC:84:87:9F:0C:98:73:3C:CE:4C:DA:EC:AB:BE
X509v3 Authority Key Identifier:
keyid:4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/i_KPYNfH_ISHnwyYczzOTNrsq74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.65.139.0-176.65.143.255
Signature Algorithm: sha256WithRSAEncryption
61:34:70:53:b1:02:ad:2b:1d:60:56:03:d3:b8:e9:61:74:ce:
ed:c6:fd:ab:8c:e0:46:73:3e:23:06:ad:f4:a1:3a:1d:37:8a:
75:ca:f0:6f:f1:05:58:6a:47:d1:ea:18:ee:84:c0:31:7e:b4:
03:9c:b1:f5:fb:e9:3b:7e:07:d8:b2:2e:43:86:db:c6:12:f9:
bd:77:89:82:a4:4b:9f:9e:1e:11:bc:a6:af:49:36:94:29:50:
f4:32:13:9b:dc:bb:25:c4:dc:a7:ea:d8:5b:56:50:a2:74:bf:
0c:30:39:13:f1:35:d3:e0:31:2f:bc:3d:c0:05:57:b9:53:ee:
83:5b:92:73:c0:6a:c0:7d:eb:1f:26:5d:f7:95:4b:29:9a:84:
63:c5:89:6a:91:52:ee:96:9e:6b:49:53:62:60:07:c7:43:d9:
31:0c:87:b2:45:89:5d:fb:eb:1d:37:09:74:5f:f7:ca:b9:2e:
1a:9a:7d:f9:0d:aa:cf:3a:2f:4f:fb:86:93:24:6b:0d:5a:c4:
d7:fa:fb:de:dc:84:9b:c0:02:3a:3a:a7:ad:4c:f8:95:37:61:
95:d8:27:28:5d:bb:c7:12:5b:d3:d1:b4:7d:0a:46:a8:0b:f0:
56:d6:67:2f:bf:38:df:f1:7e:7f:b7:85:54:df:fe:1f:ae:97:
cc:37:d3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:43 2025 by rpki-client