Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/KsV4ypUMMDUjJJVjW6YtHhuARTs.roa
File: KsV4ypUMMDUjJJVjW6YtHhuARTs.roa (raw, json)
Hash identifier: QjbyMQgBgBXkD/DrQUDMN8r2bzsdtW66F40jZ5PsjbM=
Subject key identifier: 2A:C5:78:CA:95:0C:30:35:23:24:95:63:5B:A6:2D:1E:1B:80:45:3B
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0198C0F120200C71ED163AB4791FB8B08820
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/KsV4ypUMMDUjJJVjW6YtHhuARTs.roa
Signing time: Tue 19 Aug 2025 06:08:04 +0000
ROA not before: Tue 19 Aug 2025 06:08:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 62.93.164.0/22 maxlen: 24
62.93.176.0/22 maxlen: 24
84.20.4.0/22 maxlen: 24
84.20.16.0/22 maxlen: 24
84.20.24.0/22 maxlen: 24
92.71.34.0/23 maxlen: 24
92.71.40.0/22 maxlen: 24
92.71.44.0/23 maxlen: 24
92.71.66.0/23 maxlen: 24
92.71.98.0/23 maxlen: 24
92.71.124.0/23 maxlen: 24
135.196.185.0/24 maxlen: 24
213.139.8.0/22 maxlen: 24
213.201.134.0/24 maxlen: 24
213.201.242.0/23 maxlen: 24
213.201.252.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c0:f1:20:20:0c:71:ed:16:3a:b4:79:1f:b8:b0:88:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 19 06:08:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ac578ca950c3035232495635ba62d1e1b80453b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a5:79:28:9e:2e:aa:f8:af:71:2e:fc:61:1c:
75:11:6c:66:76:65:54:41:fb:3d:88:cb:e9:07:5f:
59:12:11:47:74:34:ba:69:3b:79:2a:4c:38:1b:ef:
3d:82:c5:ac:60:6a:6f:e8:1e:45:d8:8d:fe:38:19:
ec:1a:e7:12:5d:37:b7:4f:78:d5:72:76:f1:7d:73:
42:25:b2:f7:fa:ba:66:7f:1f:3f:71:03:54:6b:b6:
da:8e:a2:f0:8f:0e:8e:ac:00:1e:cb:02:ff:9a:5d:
30:97:74:1f:48:02:67:3e:3d:a5:1c:dc:2e:4d:09:
6d:36:7b:55:52:40:30:e0:1b:84:d0:c3:cc:45:3e:
e2:d9:ff:08:45:8e:cd:41:13:03:e3:ee:b7:7a:c9:
0e:aa:b4:cd:b8:6c:9b:29:28:a5:7b:4b:42:03:54:
90:a2:48:81:6c:98:5d:82:a2:df:ff:bf:2e:08:90:
03:7c:10:2a:b5:29:8e:b6:ce:74:95:92:b4:12:b1:
1d:2a:3c:d1:92:b4:a5:38:4c:2d:5c:83:7c:20:d3:
e5:51:26:f1:af:30:66:44:ff:37:27:1a:24:d0:bb:
da:d5:3b:49:84:6a:bb:56:84:b1:e1:91:de:28:1a:
a5:89:4e:04:2a:5a:97:95:e5:c9:5c:ab:cd:95:39:
fc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C5:78:CA:95:0C:30:35:23:24:95:63:5B:A6:2D:1E:1B:80:45:3B
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/KsV4ypUMMDUjJJVjW6YtHhuARTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.93.164.0/22
62.93.176.0/22
84.20.4.0/22
84.20.16.0/22
84.20.24.0/22
92.71.34.0/23
92.71.40.0-92.71.45.255
92.71.66.0/23
92.71.98.0/23
92.71.124.0/23
135.196.185.0/24
213.139.8.0/22
213.201.134.0/24
213.201.242.0/23
213.201.252.0/23
Signature Algorithm: sha256WithRSAEncryption
37:7f:d1:3d:08:bd:2e:cf:b2:63:fc:f8:45:da:b2:2c:14:64:
1f:87:0f:ef:fd:f1:4c:df:6e:f4:e3:db:f3:d4:b3:3f:3b:9b:
db:c3:c6:eb:89:57:a2:77:5b:e2:a1:e9:5f:c6:ce:58:9f:87:
ff:3f:b5:0a:e7:b8:68:15:9a:c5:fd:4a:09:86:44:e0:51:58:
b7:7f:ef:96:ac:67:b3:43:27:5f:d8:af:82:47:65:aa:0c:8a:
d4:73:57:de:2d:3b:50:ad:bb:62:86:34:24:22:f7:e7:c9:c7:
48:93:a3:ce:13:c7:30:f8:50:b3:58:bf:7e:8a:d9:b5:f1:f7:
e2:0d:81:43:da:43:1c:e7:00:e4:10:98:af:5a:88:8e:4a:bf:
1b:06:d3:b3:37:4c:6d:99:6b:c9:b8:d6:4e:61:1d:da:de:83:
82:c6:da:96:71:33:09:af:4d:55:15:af:8f:7c:7e:1c:bf:69:
1e:84:e4:f5:dc:e5:64:26:50:40:ad:7b:d7:12:11:ef:dd:8b:
79:59:ea:45:be:fa:67:5f:2b:ad:12:0d:02:9a:3e:95:01:2d:
d3:cf:49:e3:ee:b1:fb:4f:a7:d8:e7:38:75:78:bc:44:c2:e4:
c2:bf:26:52:6f:fa:7a:a4:02:96:3c:8a:fa:12:93:90:ce:90:
75:9d:fb:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:26:06 2025 by rpki-client