Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/kNGrNWMkPRKxA0MRcg_39BFktxU.roa
File: kNGrNWMkPRKxA0MRcg_39BFktxU.roa (raw, json)
Hash identifier: FS4ifwPhqHq7/xDfAzCWOXTJlYDeq4Hjwafnzz4jLuw=
Subject key identifier: 90:D1:AB:35:63:24:3D:12:B1:03:43:11:72:0F:F7:F4:11:64:B7:15
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01989851F6241357F89D13D4D5A3364248E7
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/kNGrNWMkPRKxA0MRcg_39BFktxU.roa
Signing time: Mon 11 Aug 2025 08:49:24 +0000
ROA not before: Mon 11 Aug 2025 08:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213541
IP address blocks: 45.131.162.0/24 maxlen: 24
88.214.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:98:51:f6:24:13:57:f8:9d:13:d4:d5:a3:36:42:48:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Aug 11 08:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90d1ab3563243d12b1034311720ff7f41164b715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:57:48:ae:79:e8:f7:9e:56:77:a5:48:43:2b:
cb:8a:d9:93:0b:c1:ed:62:33:db:db:fe:ba:a0:03:
69:fa:ef:c4:f6:46:b1:db:63:46:e7:b3:1b:16:7c:
46:23:8d:b5:fb:5e:41:09:de:c8:a3:b3:a8:70:53:
3f:d5:3f:fe:1b:49:d3:d1:de:f9:8e:4b:e3:3b:0a:
95:df:cb:ec:af:ef:b6:72:6f:dc:5f:58:bf:7f:87:
80:0c:3e:5a:5e:5c:9b:35:93:6b:84:8e:be:4b:e1:
19:66:1b:20:e0:e0:4c:f8:7a:28:ea:4c:68:f0:2a:
89:2f:60:44:de:6f:32:e2:85:66:fd:e5:70:e8:fe:
19:a2:19:13:5e:c0:ca:74:35:bf:7b:77:ce:04:74:
e0:e6:35:4a:13:63:f7:25:56:0e:9d:33:43:f7:10:
45:7f:01:0b:eb:be:81:e3:92:c0:a1:f0:74:2e:f9:
2d:2b:5c:2e:24:1b:65:14:02:5e:30:17:7d:67:66:
a5:ae:4e:98:fd:82:7a:41:77:37:74:0a:68:8f:fc:
bf:9c:10:5b:be:b3:d3:e4:e0:5b:17:fd:83:b1:70:
42:51:fe:9f:ac:2c:a8:88:af:c9:56:79:c5:e0:11:
a2:c4:9e:94:99:06:e5:5d:cb:20:c5:e7:13:f2:6f:
f1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D1:AB:35:63:24:3D:12:B1:03:43:11:72:0F:F7:F4:11:64:B7:15
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/kNGrNWMkPRKxA0MRcg_39BFktxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.162.0/24
88.214.51.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:b0:b9:c9:20:1b:78:59:bc:a1:ee:0a:6b:01:2b:b0:e4:96:
c5:e0:0e:3a:84:6f:da:b4:17:c4:49:43:7b:4b:42:7e:47:ed:
9d:77:36:a6:1e:89:c8:9f:be:a1:18:58:8c:12:6d:f0:94:1c:
07:27:6b:d2:ee:bf:fd:5c:39:29:29:46:21:f6:70:0d:eb:6a:
55:aa:58:a7:6a:ef:b2:81:bd:8b:20:1b:3b:1a:a3:71:fd:c2:
07:10:88:48:d8:d4:ef:c5:08:e6:8f:ef:df:36:dc:70:23:82:
1d:e7:26:f3:e1:23:d6:69:0b:bd:09:05:3b:16:95:11:5a:c6:
34:5f:3c:66:1f:e7:41:78:88:de:4d:1f:65:61:79:79:82:16:
5e:96:54:08:17:f9:1f:77:87:4b:69:b3:1f:68:4e:7d:5d:eb:
0b:9f:6c:41:1e:dd:b5:e0:61:e4:96:06:a0:a9:59:ac:fa:0a:
d4:41:57:5f:c5:6b:a4:3d:9f:5a:fb:59:4e:5c:23:b8:be:b4:
68:13:b2:4a:d7:10:3c:fd:72:bf:8d:21:a9:76:88:be:3d:ec:
cc:14:f7:14:4f:fe:d5:5c:0b:31:d7:40:f5:2f:3f:ad:96:f7:
16:9d:d6:86:d0:3e:f2:47:74:69:27:83:55:13:fc:17:57:7d:
83:fb:e5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:57:57 2025 by rpki-client