Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/KkGeGgwQ7m8Sts-3qCgCr48FCRQ.roa
File: KkGeGgwQ7m8Sts-3qCgCr48FCRQ.roa (raw, json)
Hash identifier: yck+9VkE1XOdJ49APNzhzHWJu+UVHD8nc7+eOqK0oNA=
Subject key identifier: 2A:41:9E:1A:0C:10:EE:6F:12:B6:CF:B7:A8:28:02:AF:8F:05:09:14
Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Certificate serial: 01993D04997E52E5C14790C739E4AD4ABA22
Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/KkGeGgwQ7m8Sts-3qCgCr48FCRQ.roa
Signing time: Fri 12 Sep 2025 08:22:15 +0000
ROA not before: Fri 12 Sep 2025 08:22:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203061
IP address blocks: 84.37.36.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3d:04:99:7e:52:e5:c1:47:90:c7:39:e4:ad:4a:ba:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Validity
Not Before: Sep 12 08:22:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a419e1a0c10ee6f12b6cfb7a82802af8f050914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:51:cd:2f:dc:bd:94:8f:cd:90:5a:17:a8:20:
77:b7:ae:80:e6:c0:a7:9c:ef:6e:b2:cc:cd:b8:98:
c2:60:66:b4:9d:ec:f4:b9:bf:05:4f:ab:1d:dd:c4:
a1:1d:9b:37:39:d2:fe:f4:dd:a2:76:21:dc:dc:9e:
da:b2:e9:69:5b:b8:fd:09:27:60:4f:79:7d:da:78:
90:09:7a:2c:14:3d:06:64:8c:b9:94:49:2d:ee:0e:
6f:85:b1:1f:f2:f2:37:c3:69:f8:0a:47:ff:f3:bd:
97:80:3c:05:92:b4:07:3f:66:37:a2:1a:0e:c3:da:
95:04:66:53:42:e3:02:71:0d:13:96:62:2b:41:dc:
6e:ba:ab:dc:87:68:02:db:6c:b4:b7:a3:29:f9:ab:
3b:72:36:d0:b4:39:ad:d7:dc:84:fc:d7:5e:d9:7b:
b2:d2:29:0b:5d:2e:31:82:d2:d0:79:5b:ab:39:67:
d5:d6:30:84:0c:94:c7:f9:fa:c0:ee:80:a8:e6:4b:
d6:b5:b3:b1:46:5b:3b:0c:06:fa:d6:c7:4f:a8:96:
8f:68:0d:5d:8f:8b:98:2f:cd:a7:dc:db:f1:36:eb:
fc:6a:3a:fa:87:a8:aa:79:04:d7:e9:9a:f9:f5:b2:
d5:50:fb:60:2f:4b:cc:0a:ea:44:04:4b:41:18:d9:
9c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:41:9E:1A:0C:10:EE:6F:12:B6:CF:B7:A8:28:02:AF:8F:05:09:14
X509v3 Authority Key Identifier:
keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/KkGeGgwQ7m8Sts-3qCgCr48FCRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.37.36.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:74:e3:85:90:47:e9:12:25:32:f1:0a:46:ef:79:ff:ef:d2:
c8:44:04:13:2a:36:f0:fc:e4:9d:26:2d:58:fe:7d:7f:b7:91:
14:53:da:59:ee:fc:3f:08:45:11:4c:ae:38:a3:89:1d:fc:f9:
65:bb:96:02:14:39:d5:1c:e5:85:c2:f1:30:e2:ad:fb:e5:bb:
a5:96:d1:ad:ba:54:a4:13:0e:17:01:68:76:c7:3a:dc:d1:45:
f5:66:9d:9e:d1:1a:ba:dd:a3:6e:7b:5f:fd:cc:02:a3:2e:a2:
2a:ba:48:71:0a:a4:0d:40:4a:67:f7:aa:d9:14:49:88:62:dd:
0f:14:3e:fc:3e:12:95:db:9a:1a:27:6a:3a:82:a4:59:ae:11:
a0:86:03:1b:10:19:39:fd:6f:83:45:e2:03:7f:3e:7b:0e:88:
fd:3d:3d:a7:49:33:f6:9a:00:8e:d9:6a:e8:fb:0f:1f:ff:1e:
c4:0f:5b:93:33:b2:99:c2:da:f4:fb:9e:7a:4e:07:dc:85:b8:
0c:47:69:a4:b1:3b:1a:62:b3:0c:14:3f:a5:85:92:8f:e3:7f:
69:cd:55:5c:70:71:28:10:1f:7a:d7:3f:0e:5b:3e:56:c2:97:
a1:99:ff:ed:0a:5d:7f:ad:7f:be:52:1d:17:64:3b:c1:c3:a3:
c5:c3:90:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:08:44 2025 by rpki-client