Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/kIpWtrsK7_kFV_34HuBgdHo2heY.roa
File: kIpWtrsK7_kFV_34HuBgdHo2heY.roa (raw, json)
Hash identifier: cmh2HCbUPRleCRkC25jh5gcUSKAeBoZfRXmSZmlskDw=
Subject key identifier: 90:8A:56:B6:BB:0A:EF:F9:05:57:FD:F8:1E:E0:60:74:7A:36:85:E6
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 0199E8AEBCA069A8F590C87923B47EF868E8
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/kIpWtrsK7_kFV_34HuBgdHo2heY.roa
Signing time: Wed 15 Oct 2025 16:23:09 +0000
ROA not before: Wed 15 Oct 2025 16:23:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58061
IP address blocks: 170.168.4.0/24 maxlen: 24
170.168.5.0/24 maxlen: 24
170.168.26.0/24 maxlen: 24
170.168.27.0/24 maxlen: 24
170.168.32.0/24 maxlen: 24
170.168.41.0/24 maxlen: 24
170.168.43.0/24 maxlen: 24
170.168.48.0/24 maxlen: 24
170.168.49.0/24 maxlen: 24
170.168.50.0/24 maxlen: 24
170.168.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e8:ae:bc:a0:69:a8:f5:90:c8:79:23:b4:7e:f8:68:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Oct 15 16:23:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=908a56b6bb0aeff90557fdf81ee060747a3685e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:15:7c:fd:d7:ca:88:46:53:df:bb:41:bc:13:
d5:16:43:23:52:e9:ee:6c:a2:40:1b:f1:ac:cd:80:
14:80:b7:f8:19:ee:ae:64:80:3b:50:2b:5e:44:f8:
2a:e6:0d:47:ac:3e:31:fe:54:27:a4:05:01:ac:ea:
1d:9b:98:92:a1:2d:dc:15:c1:d6:2f:cd:e0:a4:9d:
3f:b5:63:9d:41:96:af:08:11:dd:bc:43:9c:27:aa:
fa:e3:e9:bc:a9:24:e2:ba:6e:00:6b:30:e5:cf:a5:
07:c3:81:9f:99:3b:17:4a:6d:1b:07:b0:e7:cd:63:
5f:d5:e2:ef:79:b8:be:c2:28:4b:cf:82:78:e2:76:
fc:e2:16:9d:26:d1:76:15:fb:5a:94:5e:dd:b6:9f:
b2:22:a6:9d:1d:20:ec:a5:d2:6d:33:87:8c:0c:80:
6d:3f:94:ed:d1:46:0d:02:2a:95:a7:d9:ee:fe:f7:
58:a6:d1:6f:05:46:76:e5:52:fd:53:7a:70:8c:20:
0c:72:68:aa:90:56:08:f5:3a:db:b5:67:bd:66:98:
48:13:86:0f:35:84:48:4b:9d:b0:bf:64:39:43:22:
4e:89:a9:6f:1a:74:d3:57:75:ca:b4:c9:60:62:0d:
53:e2:8c:91:71:82:09:24:55:b4:59:6e:ee:3d:8d:
fe:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8A:56:B6:BB:0A:EF:F9:05:57:FD:F8:1E:E0:60:74:7A:36:85:E6
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/kIpWtrsK7_kFV_34HuBgdHo2heY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.168.4.0/23
170.168.26.0/23
170.168.32.0/24
170.168.41.0/24
170.168.43.0/24
170.168.48.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:c8:14:85:aa:b2:b9:b3:04:82:4b:66:19:71:47:15:2f:7a:
08:be:11:80:99:c1:01:aa:23:74:d9:94:22:4b:be:08:a2:d3:
00:65:c6:65:c2:3e:73:81:d3:d0:5c:1e:65:c7:30:fc:bf:a6:
59:74:aa:89:ad:c3:6b:e2:d4:b0:29:30:88:74:08:ab:c5:e9:
b2:58:5e:ce:4f:6c:c6:17:b0:d1:da:af:4a:e8:5d:d6:36:2f:
cf:49:0c:93:01:3a:a3:e3:48:ca:b2:7f:2e:a6:fd:60:0f:7b:
62:c3:f5:1c:26:9b:87:18:cd:b6:0b:ed:67:44:14:f6:6b:41:
e9:ad:bd:c3:0a:26:99:83:b5:2d:66:25:12:6e:ff:93:09:55:
22:ee:83:31:88:dc:4f:8e:d9:87:ae:50:d9:be:0e:0f:74:c3:
43:37:be:87:e1:98:d4:83:4a:b1:8c:b9:c4:dc:6b:68:13:d7:
fc:b2:48:fc:c1:61:5d:90:b8:7c:3d:27:1e:ca:b1:35:ed:65:
a7:c8:3a:37:cb:4b:c6:b1:15:58:a0:ce:c1:91:aa:fe:1b:a7:
1d:f4:9e:43:8c:f3:85:b6:17:60:30:6e:c2:6d:03:0d:79:5c:
40:8d:20:f2:70:77:60:ca:e6:8b:a2:e2:37:2d:ed:f4:c5:ae:
0e:ae:9e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:14:28 2025 by rpki-client