Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/KFGuuWvhGKXdRFWCPjT6bIvxr90.roa
File: KFGuuWvhGKXdRFWCPjT6bIvxr90.roa (raw, json)
Hash identifier: 5mNeMpLOgDP2WV53iNWD9JlTcJDz19nCtSLYypdRdgA=
Subject key identifier: 28:51:AE:B9:6B:E1:18:A5:DD:44:55:82:3E:34:FA:6C:8B:F1:AF:DD
Certificate issuer: /CN=21df245ead9980d2b39533782f65d7566d0462d1
Certificate serial: 0199877A603FF004D8FB01DCED2C78CEF712
Authority key identifier: 21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/KFGuuWvhGKXdRFWCPjT6bIvxr90.roa
Signing time: Fri 26 Sep 2025 19:22:48 +0000
ROA not before: Fri 26 Sep 2025 19:22:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207003
IP address blocks: 185.218.192.0/22 maxlen: 22
185.218.194.0/24 maxlen: 24
185.218.195.0/24 maxlen: 24
193.163.5.0/24 maxlen: 24
2a0b:a700::/29 maxlen: 29
2a0b:dbc0::/29 maxlen: 29
2a10:f2c0::/29 maxlen: 29
2a10:f2c0:a001::/48 maxlen: 48
2a10:f2c0:a002::/48 maxlen: 48
2a10:f2c0:a003::/48 maxlen: 48
2a10:f2c0:a004::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:87:7a:60:3f:f0:04:d8:fb:01:dc:ed:2c:78:ce:f7:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21df245ead9980d2b39533782f65d7566d0462d1
Validity
Not Before: Sep 26 19:22:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2851aeb96be118a5dd4455823e34fa6c8bf1afdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:26:5b:f1:6d:0d:77:f3:32:a5:08:07:d5:e0:
96:d8:e2:d7:fa:60:d2:44:3d:fa:41:b9:48:e9:30:
ac:6f:f0:55:77:21:40:44:1b:88:22:f9:25:71:cc:
e5:02:31:24:b1:da:4b:de:a8:f6:81:1e:7c:83:16:
e7:69:85:a3:c0:45:33:f3:00:87:f6:4c:b8:ca:63:
39:ca:ae:56:9c:ac:7c:ee:e3:c9:d5:d4:5f:22:58:
20:dd:67:82:d8:5b:58:f7:0c:2b:bc:9f:af:f1:15:
e9:96:92:0a:fa:32:c8:3c:0f:4d:dc:70:4b:47:0d:
ad:4c:d5:8d:c2:0e:f5:00:5b:f9:15:c9:b0:3f:30:
55:79:46:36:51:98:a5:0b:d3:ce:7a:47:29:17:7b:
d9:43:1b:e6:94:69:8a:c5:1a:fd:da:40:b2:ed:1e:
79:3d:68:0a:03:76:3c:07:3c:1a:ff:2f:13:1a:5a:
9b:3d:1e:58:ce:f5:0d:66:35:e1:02:02:30:c6:b3:
c1:29:b1:fb:95:ec:7a:5a:33:5c:d7:30:e3:fd:d6:
ce:11:f3:52:8d:dd:1d:24:5b:ba:21:bf:bf:54:06:
22:97:01:a7:2b:0b:fd:b9:37:a6:52:f7:34:d9:0f:
ff:86:4d:0e:e9:ac:53:c8:76:e7:4c:a6:af:92:e0:
94:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:51:AE:B9:6B:E1:18:A5:DD:44:55:82:3E:34:FA:6C:8B:F1:AF:DD
X509v3 Authority Key Identifier:
keyid:21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/KFGuuWvhGKXdRFWCPjT6bIvxr90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.192.0/22
193.163.5.0/24
IPv6:
2a0b:a700::/29
2a0b:dbc0::/29
2a10:f2c0::/29
Signature Algorithm: sha256WithRSAEncryption
9c:67:00:5a:d0:66:23:0a:b2:3c:64:f0:0f:bc:02:ef:42:d5:
26:0a:89:0c:a1:6f:34:fe:1f:89:e0:8c:10:3c:dd:10:4a:a6:
d0:a4:ed:24:de:90:e8:df:6b:31:6b:65:b5:ea:e1:4f:1e:d0:
0b:22:c9:cd:ca:cc:02:7a:f1:c4:88:97:49:66:f9:06:b4:4a:
19:68:10:37:3b:3b:5c:ed:48:9a:43:1b:a9:ee:99:b1:bb:ac:
fc:c2:43:aa:ae:60:ca:80:ad:57:c7:e8:50:82:6e:69:0f:b6:
52:75:15:4a:4c:8d:01:47:be:18:6b:4f:68:f1:2f:a7:08:9e:
2b:66:c9:29:25:65:26:44:fd:e6:6e:db:23:e8:97:1c:a8:99:
32:20:ea:ed:3d:f8:96:18:45:5d:c0:6e:1d:b3:a0:63:2b:9b:
8a:ec:75:83:58:19:64:85:20:0e:37:20:fd:59:df:08:e0:94:
13:e7:79:27:d9:6c:33:3b:e2:57:c9:91:1c:69:7d:05:af:99:
3a:5d:b3:d2:2a:53:88:00:39:32:88:d7:6b:e0:8d:99:35:71:
52:3a:a5:23:6a:4c:ab:1f:38:94:e2:72:55:cd:66:c8:c8:26:
b5:8d:c8:0a:d8:f1:e3:16:d2:6a:b4:92:d6:f7:72:f9:59:2d:
bc:50:2a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:25:52 2025 by rpki-client