Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/KveiqQQD52CVcDLxGnLBbDsvlrY.roa
File: KveiqQQD52CVcDLxGnLBbDsvlrY.roa (raw, json)
Hash identifier: eEqFx+YvI7BKpBptp/G76x1tK3Hsbq60UrWrsB5Irss=
Subject key identifier: 2A:F7:A2:A9:04:03:E7:60:95:70:32:F1:1A:72:C1:6C:3B:2F:96:B6
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0199528FE2CBA823871A00649372ABA42C31
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/KveiqQQD52CVcDLxGnLBbDsvlrY.roa
Signing time: Tue 16 Sep 2025 12:46:25 +0000
ROA not before: Tue 16 Sep 2025 12:46:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 178.219.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:52:8f:e2:cb:a8:23:87:1a:00:64:93:72:ab:a4:2c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 16 12:46:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2af7a2a90403e760957032f11a72c16c3b2f96b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5d:34:9e:df:d1:63:8e:6a:06:b5:d4:2c:8d:
b5:90:ff:7a:76:98:b6:03:fc:61:42:dc:bd:4b:78:
d3:29:d4:ce:cc:83:76:66:57:48:07:ee:74:77:57:
c9:aa:22:2c:43:8d:dc:1c:ed:65:70:d5:92:ee:e4:
b4:2f:63:5f:e2:93:d0:c3:4d:65:20:42:65:3e:8c:
73:67:9c:1f:03:cd:5a:46:4f:de:a9:21:5f:90:bd:
44:72:9a:ca:99:5c:65:c8:ea:ab:84:1d:81:b6:15:
24:68:b5:49:51:ee:cf:9a:9e:b5:f8:7f:90:b1:d2:
39:31:71:7c:d1:1a:ec:42:23:8d:43:ed:04:f7:d1:
40:a7:11:06:94:50:bf:7f:40:cc:49:e3:9f:5c:ea:
b7:1c:f1:b8:b2:13:1d:4c:6b:10:e8:2d:db:fd:cf:
39:f6:03:4e:b7:f6:7e:1f:7f:8c:d8:53:ac:ba:5e:
97:25:29:90:6c:5c:cd:c4:cd:e0:cd:b4:6f:7b:c8:
8a:ee:b7:b2:bc:2e:b4:ee:be:98:1e:37:5e:b8:9f:
1e:fc:d7:9c:2c:c3:9a:3b:de:bf:4e:5e:b0:7e:ee:
0c:7e:e9:4c:cd:46:92:e9:37:23:b8:75:c9:68:74:
94:16:99:b6:b4:29:e5:3e:f3:ae:3e:24:c4:67:fc:
03:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F7:A2:A9:04:03:E7:60:95:70:32:F1:1A:72:C1:6C:3B:2F:96:B6
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/KveiqQQD52CVcDLxGnLBbDsvlrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.219.4.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:a3:67:76:5a:bd:06:2b:cf:9c:de:48:1b:69:d7:89:2f:3c:
73:d3:f4:ea:35:1f:dd:01:4e:4e:16:d7:f6:d2:42:4b:ed:2a:
29:d3:98:3a:2d:3c:ae:99:fe:07:b9:cb:70:47:5c:bd:1a:42:
b0:d5:ce:73:04:d2:56:40:9f:f6:96:98:71:48:d2:94:8f:66:
6b:c1:66:3b:0c:6c:3a:1a:93:46:72:2e:7a:f3:15:35:32:64:
5e:b6:c1:3c:f8:3b:2c:d6:8c:a2:55:c0:09:0d:c2:86:51:9b:
b9:a7:e1:d5:fc:ee:ed:f0:e3:e8:f0:62:1f:4b:ac:99:37:87:
92:8a:ca:00:17:0c:32:d2:a6:00:b1:ba:fb:25:80:c5:73:23:
bc:62:81:51:0d:ed:fc:bd:10:9a:a4:ba:70:8b:51:4b:1b:b0:
1d:29:2f:fd:f3:75:c7:0e:e4:46:34:84:da:4a:18:fb:7a:0c:
f6:19:15:9c:56:1d:ce:71:0d:a6:73:0c:c7:6f:04:fe:f8:09:
a6:c8:24:04:72:f7:7e:04:43:6c:90:3f:98:2f:82:2d:28:a9:
d8:9c:1f:78:2d:60:b6:25:01:80:80:9b:76:a3:65:1b:16:24:
b0:85:58:ee:0b:87:1a:b4:c9:8f:83:dd:91:8c:e2:7a:b8:52:
32:e8:25:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:55:35 2025 by rpki-client