Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Kr7XV-ga4da7CKZKU2_cpupSdBE.roa
File: Kr7XV-ga4da7CKZKU2_cpupSdBE.roa (raw, json)
Hash identifier: 8O0iKYzT69+G+adjTjq40PuiMG5F0oDxKlIuRu5aj/s=
Subject key identifier: 2A:BE:D7:57:E8:1A:E1:D6:BB:08:A6:4A:53:6F:DC:A6:EA:52:74:11
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0199C3D93DB4482D882348053911C15DE906
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Kr7XV-ga4da7CKZKU2_cpupSdBE.roa
Signing time: Wed 08 Oct 2025 12:43:38 +0000
ROA not before: Wed 08 Oct 2025 12:43:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 185.254.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:d9:3d:b4:48:2d:88:23:48:05:39:11:c1:5d:e9:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Oct 8 12:43:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2abed757e81ae1d6bb08a64a536fdca6ea527411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:05:60:cc:48:dd:74:fc:05:72:d1:1d:20:1e:
57:ae:8b:89:8d:19:81:8c:47:71:23:ef:f8:11:41:
1b:a3:4c:92:b0:40:eb:f2:91:34:72:35:e4:de:67:
7d:53:75:fc:36:d1:92:06:84:d1:0a:c5:6a:7e:8d:
83:b0:21:1d:a3:84:06:e2:43:be:11:b0:55:7c:37:
08:ef:92:33:3d:30:5c:bf:54:73:6c:6f:b9:01:2e:
6a:78:aa:e7:bd:e4:8f:b4:ed:57:ab:40:86:ee:44:
0d:5b:5f:d2:51:55:5a:d6:66:24:90:07:4f:fe:9a:
92:0d:1c:49:ab:ee:f7:c8:67:0e:1e:c6:4f:19:2e:
da:21:e0:99:20:b1:e2:4c:f0:08:f7:e6:6c:48:46:
8b:6f:e9:36:7b:3d:1c:c8:6b:44:30:0e:09:c8:b7:
5a:a6:ec:78:2e:32:d4:5e:6d:50:b7:3f:f8:ff:02:
77:37:07:19:6c:f4:98:a4:e6:e9:68:e1:8d:7b:5f:
29:3d:be:b7:10:19:03:8d:60:a1:f8:5e:d4:69:61:
72:60:f9:46:b5:aa:81:ef:a3:6b:b9:0b:cf:b5:f7:
e6:3e:3e:32:ca:92:69:8e:f8:ec:5f:16:39:76:cc:
f6:a9:87:3f:1f:79:f0:9a:2f:a7:f1:0a:4d:0c:43:
8a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BE:D7:57:E8:1A:E1:D6:BB:08:A6:4A:53:6F:DC:A6:EA:52:74:11
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Kr7XV-ga4da7CKZKU2_cpupSdBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.18.0/24
Signature Algorithm: sha256WithRSAEncryption
67:5c:e0:b8:4e:e1:c1:ea:3c:17:f5:ca:80:c8:ed:43:92:84:
1f:29:a8:45:df:22:97:09:4b:4c:38:00:22:bf:11:79:6f:42:
1f:02:e6:26:74:8c:af:a4:3e:84:bb:d8:a5:65:82:71:39:cb:
5c:5e:22:ac:b8:0b:7a:84:73:a7:cb:26:ff:fd:97:18:1d:59:
ef:9c:94:19:36:0e:4a:f0:4e:c4:56:a4:0e:bf:fb:ea:35:25:
b6:a3:7d:e6:21:12:16:93:76:24:b1:25:5b:50:10:ab:e8:5c:
35:df:a1:0f:fd:c1:98:a6:04:9b:ee:93:e4:2e:51:0c:86:0c:
19:52:ed:91:27:44:30:c6:af:81:17:8e:e0:ab:4b:eb:49:13:
0a:82:95:bd:21:70:6e:5d:40:ec:60:9b:29:15:64:12:66:65:
f4:63:a2:cd:c8:e4:91:b3:12:ae:55:24:9e:ab:9d:0d:da:51:
ea:fc:a9:28:fa:2f:37:b7:01:0b:c5:bf:bf:46:dd:21:d8:d9:
60:e3:1b:7a:41:cd:83:cd:74:e6:87:80:5a:12:4d:c0:15:43:
d3:1d:50:d5:42:2b:13:51:8a:3b:15:b4:cc:58:8e:94:62:70:
5d:d6:8e:b7:48:2a:ab:e9:62:76:ac:ca:0d:47:c2:17:0b:d4:
27:b6:c9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:57:51 2025 by rpki-client