Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/kC_Q9FQ-J4DvH1bNDORMySN0tt0.roa
File: kC_Q9FQ-J4DvH1bNDORMySN0tt0.roa (raw, json)
Hash identifier: VKlodJ8xjH2Yq58gYH0eZlUzy+prTwBQnlcgP5DbpSI=
Subject key identifier: 90:2F:D0:F4:54:3E:27:80:EF:1F:56:CD:0C:E4:4C:C9:23:74:B6:DD
Certificate issuer: /CN=559c64a6ac4c4976ad3621412a137459e649ab9e
Certificate serial: 0198C7AA5084E1FFDE10E042D2F2D1DC51D2
Authority key identifier: 55:9C:64:A6:AC:4C:49:76:AD:36:21:41:2A:13:74:59:E6:49:AB:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/kC_Q9FQ-J4DvH1bNDORMySN0tt0.roa
Signing time: Wed 20 Aug 2025 13:28:04 +0000
ROA not before: Wed 20 Aug 2025 13:28:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202004
IP address blocks: 45.11.60.0/22 maxlen: 22
185.38.222.0/23 maxlen: 23
185.56.208.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c7:aa:50:84:e1:ff:de:10:e0:42:d2:f2:d1:dc:51:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=559c64a6ac4c4976ad3621412a137459e649ab9e
Validity
Not Before: Aug 20 13:28:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=902fd0f4543e2780ef1f56cd0ce44cc92374b6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:33:b5:95:1e:04:e7:5f:01:7c:8a:ff:68:a6:
48:51:bf:85:8b:8a:20:06:36:de:68:a8:34:7b:c4:
57:f5:22:1a:e6:c1:93:5b:86:35:a0:69:e6:18:37:
33:67:2c:1d:78:d7:c0:49:7f:be:dd:7f:a4:c4:25:
0d:17:9c:fc:65:c8:77:12:38:31:8e:22:bc:98:ed:
01:c0:7b:2d:43:93:67:6d:b6:4f:8e:4d:9b:c1:a6:
4d:98:c4:e5:3e:f5:70:f8:30:fc:41:e7:1a:4a:29:
db:c8:6d:7c:03:30:25:b9:54:42:9c:03:be:f3:c0:
58:73:2d:fe:da:dd:19:5c:92:3c:25:7a:26:12:04:
9e:95:ee:99:ba:a9:23:0b:70:3e:f5:30:88:a9:c3:
cb:ec:9c:3a:38:79:7b:aa:c4:90:be:fa:98:eb:42:
e2:de:5b:96:d3:a7:4a:d5:07:b9:2c:5c:5d:33:41:
04:96:04:fd:51:3d:b1:8d:a0:ed:a3:18:e8:da:92:
89:c1:81:ee:47:fb:40:d9:dc:95:29:28:59:c0:70:
9d:09:b8:62:d2:76:8f:53:91:60:17:fd:67:e9:0a:
d5:f6:6e:95:4f:b5:f9:5a:e1:3f:2d:28:86:55:51:
d6:17:aa:ff:59:cb:ac:08:f4:14:6a:a3:e8:fe:86:
28:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:2F:D0:F4:54:3E:27:80:EF:1F:56:CD:0C:E4:4C:C9:23:74:B6:DD
X509v3 Authority Key Identifier:
keyid:55:9C:64:A6:AC:4C:49:76:AD:36:21:41:2A:13:74:59:E6:49:AB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/kC_Q9FQ-J4DvH1bNDORMySN0tt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.60.0/22
185.38.222.0/23
185.56.208.0/22
Signature Algorithm: sha256WithRSAEncryption
89:76:48:3e:88:2a:2b:72:7a:3e:20:7c:bf:dd:f4:49:dc:0a:
c0:0d:6a:64:5b:64:d7:16:a0:6e:2f:d6:d0:86:a8:5c:2f:3b:
31:ff:1d:90:e0:4d:47:2b:af:9a:35:72:5b:29:ae:df:48:91:
b5:2d:ad:35:ec:d0:98:b1:db:32:d7:d8:22:03:4e:62:d3:8e:
ca:a3:ef:ab:21:f3:2c:6d:58:a9:d9:ee:0e:7a:55:a8:bf:b2:
33:fe:5f:7a:46:6d:1e:e8:2f:f4:5e:0d:b6:0f:67:fe:92:3b:
aa:01:a4:a6:3c:b7:b7:3a:27:d9:e9:48:e5:3f:aa:af:f7:e6:
27:92:52:12:9c:a1:a2:b9:c4:89:94:ca:31:37:a8:13:4f:5b:
2f:b1:d1:14:d4:62:91:fc:73:bf:60:1c:99:10:05:54:38:4e:
e2:06:26:47:71:38:75:76:8a:39:a0:88:18:30:c2:c6:a4:ad:
d5:42:a8:d9:f5:30:c6:30:ce:a9:38:5b:39:7f:f0:e7:72:e0:
5a:9c:59:01:73:93:ac:c5:2c:74:d0:dc:8d:36:7a:ba:d3:e1:
b4:49:66:ea:f7:45:03:76:a1:ac:28:1a:a4:c9:83:85:95:1b:
77:98:49:ba:c3:80:9b:28:71:3d:fa:9c:5e:4d:f6:2c:ad:59:
6b:4a:17:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:47:38 2025 by rpki-client