Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/KK3OWrlDvPBfmeCu6TWdw9E-UrA.roa
File: KK3OWrlDvPBfmeCu6TWdw9E-UrA.roa (raw, json)
Hash identifier: Vy2fUsoJqiMmmehJ7Z8Mi7gsujBEWk6ek6y2ti8B4Vk=
Subject key identifier: 28:AD:CE:5A:B9:43:BC:F0:5F:99:E0:AE:E9:35:9D:C3:D1:3E:52:B0
Certificate issuer: /CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae
Certificate serial: 01998BC530E3A479D95D451EEC1E8DE6BFDE
Authority key identifier: BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/KK3OWrlDvPBfmeCu6TWdw9E-UrA.roa
Signing time: Sat 27 Sep 2025 15:23:00 +0000
ROA not before: Sat 27 Sep 2025 15:23:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48375
IP address blocks: 93.174.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:8b:c5:30:e3:a4:79:d9:5d:45:1e:ec:1e:8d:e6:bf:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae
Validity
Not Before: Sep 27 15:23:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28adce5ab943bcf05f99e0aee9359dc3d13e52b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4f:67:80:e8:c8:8c:57:ab:67:40:ec:25:24:
97:bf:17:0c:db:6d:bc:3f:d1:f0:7f:32:e6:92:3d:
ae:49:3d:f4:26:88:49:47:dc:bf:e9:0c:59:a2:eb:
a0:f3:7f:85:a5:66:f6:e2:ee:b1:c4:a2:b5:d2:ec:
44:2d:2f:8f:c8:d8:f1:a9:4e:31:45:06:4d:a9:44:
d8:4e:73:03:8f:6a:ce:5e:1f:22:fd:87:2b:d4:d0:
b1:6c:62:7d:e7:7f:40:21:27:87:5a:51:82:42:29:
32:5f:85:4b:8b:20:0e:cd:d4:33:b0:ce:d8:c2:f4:
77:35:25:a2:7c:68:d9:2a:4e:2a:19:4b:2d:0e:07:
9a:db:57:2e:7f:e8:8c:53:5e:e5:84:4c:4b:65:d3:
d7:db:a7:e5:62:b1:2e:c7:fd:ff:c7:bd:05:56:51:
4c:3f:68:25:d7:9f:7b:36:27:90:31:09:35:11:92:
56:8b:1c:4a:4d:16:33:b6:a4:6a:97:0a:8d:45:db:
76:d2:25:d7:d2:1f:0d:af:9a:c1:5a:7e:fd:a2:0a:
65:e1:86:28:1d:4b:92:52:8f:89:54:76:d6:27:36:
60:09:75:f7:74:4e:99:ba:de:d6:34:ee:16:91:b3:
cd:8a:c4:88:df:11:3a:d2:35:be:c8:9b:f9:71:d7:
ab:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AD:CE:5A:B9:43:BC:F0:5F:99:E0:AE:E9:35:9D:C3:D1:3E:52:B0
X509v3 Authority Key Identifier:
keyid:BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/KK3OWrlDvPBfmeCu6TWdw9E-UrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.174.209.0/24
Signature Algorithm: sha256WithRSAEncryption
18:af:23:24:04:7d:e3:b8:b8:0d:27:d8:dd:91:4d:ef:0c:c3:
87:05:36:43:c1:0d:07:9d:cf:06:92:01:a0:bf:ec:b4:74:08:
22:3f:6d:bd:64:ea:f8:86:24:fa:5d:62:ec:4d:40:59:eb:e9:
db:3c:dd:fd:9a:80:c4:db:6b:88:28:93:96:84:ff:de:55:f7:
4f:4c:13:a1:dd:8e:5c:d7:36:e1:de:3d:cc:39:ed:21:1f:14:
10:00:7f:b2:60:65:6b:c0:cf:69:fd:37:bf:04:ea:fe:4a:49:
ab:0a:ac:84:0a:e6:3f:54:66:4f:f5:7c:f5:48:24:da:0b:33:
40:3f:35:a9:30:8c:cd:c3:57:6d:2a:5e:db:e0:ef:2f:f1:34:
b2:52:8d:cb:3f:03:76:f7:16:0d:71:cd:ce:75:1e:c3:5f:65:
40:74:8c:8c:b2:9e:b2:35:f7:bb:d5:36:21:4e:33:4e:b0:32:
12:89:0e:45:48:ef:09:fa:ef:3e:7a:6d:a1:57:3a:ce:7e:76:
2b:0f:41:8a:f5:b7:a6:d3:b8:8d:9e:8b:1f:c4:49:5a:98:d5:
57:b9:b7:5f:c4:54:63:cf:65:73:b9:b5:88:04:70:2b:b7:a0:
e9:42:5b:04:04:70:1b:a5:c7:1e:cb:58:73:11:79:bc:a4:56:
3b:07:be:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:00:48 2025 by rpki-client