Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/kfPXQBHHs_2camwqc_H_ql-nq_g.roa
File: kfPXQBHHs_2camwqc_H_ql-nq_g.roa (raw, json)
Hash identifier: MqGfCwVyJaEqGj5SMVt3EtpzoMRGLzaHW56+Nob5Z0g=
Subject key identifier: 91:F3:D7:40:11:C7:B3:FD:9C:6A:6C:2A:73:F1:FF:AA:5F:A7:AB:F8
Certificate issuer: /CN=713b9404a0c43223addc8ea1b10ab74b777a2a01
Certificate serial: 0199A3FC446A96F2EEB966CC7F13B8054EBC
Authority key identifier: 71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/kfPXQBHHs_2camwqc_H_ql-nq_g.roa
Signing time: Thu 02 Oct 2025 08:14:02 +0000
ROA not before: Thu 02 Oct 2025 08:14:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51013
IP address blocks: 45.10.97.0/24 maxlen: 24
81.95.108.0/23 maxlen: 24
81.95.108.0/24 maxlen: 24
2a02:4a8:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a3:fc:44:6a:96:f2:ee:b9:66:cc:7f:13:b8:05:4e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713b9404a0c43223addc8ea1b10ab74b777a2a01
Validity
Not Before: Oct 2 08:14:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91f3d74011c7b3fd9c6a6c2a73f1ffaa5fa7abf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:18:77:cd:7a:f3:c6:29:21:a1:df:55:c3:01:
4c:9b:4f:d3:ea:6a:a4:32:a8:c7:f0:52:db:37:c0:
60:31:30:81:ec:fd:6b:70:17:7e:07:b3:24:60:af:
63:30:e9:73:cc:24:10:74:07:8e:1a:7d:bb:5c:16:
27:de:cd:d5:59:d8:59:a3:24:74:b1:26:9f:4b:cd:
41:6c:7d:67:20:66:5b:9c:b9:8e:55:61:e7:c1:48:
ad:25:c8:97:72:10:78:98:cc:26:fb:2d:0f:4f:96:
dd:6b:36:40:f5:74:6e:78:32:ae:4c:16:32:d1:f6:
c8:34:85:b4:8a:aa:f8:57:df:c9:c8:2d:0e:23:20:
ea:4f:ad:95:73:ca:3d:83:12:bb:40:bb:3f:2d:a0:
af:68:07:70:c4:18:6d:77:f0:c3:82:63:cc:55:18:
6b:14:5a:9b:b2:c2:ff:f7:31:ba:00:01:17:d3:7c:
f8:78:ad:f1:89:72:11:b3:84:00:a6:e4:e0:46:92:
0a:44:bf:89:7a:cd:5f:6e:9c:4d:43:61:ff:01:5b:
17:c5:97:a3:bb:aa:6a:ee:a1:a1:5d:4e:be:74:18:
46:5b:c3:94:be:bf:bd:4d:e4:80:45:fb:da:06:99:
55:90:b6:a6:77:3e:e3:de:39:5d:61:9d:22:d1:d4:
31:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F3:D7:40:11:C7:B3:FD:9C:6A:6C:2A:73:F1:FF:AA:5F:A7:AB:F8
X509v3 Authority Key Identifier:
keyid:71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/kfPXQBHHs_2camwqc_H_ql-nq_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.97.0/24
81.95.108.0/23
IPv6:
2a02:4a8:10::/48
Signature Algorithm: sha256WithRSAEncryption
22:d5:1d:1c:97:72:d3:ee:98:62:a3:80:a5:3a:9c:00:a6:ac:
a7:ef:79:da:07:08:7d:86:9d:ec:fd:83:90:c1:f8:bb:85:1f:
3d:fb:7c:5e:c8:17:05:f0:6c:5a:9c:33:58:57:90:f0:33:de:
c4:20:d4:4f:ff:f8:2a:53:3e:59:b3:1d:b7:92:21:b1:9f:1a:
70:f4:f6:a1:5a:ca:57:e6:7e:20:e7:ac:f4:12:cb:80:97:74:
03:92:f6:19:be:27:a4:37:5d:b7:ac:0a:e3:89:29:99:4e:b7:
6a:7b:e2:e7:4d:a1:55:18:59:ed:87:25:80:68:0d:8c:b9:4d:
0b:55:f9:82:9d:a6:00:f2:cc:ad:c2:25:77:6b:b1:8c:ba:49:
4f:7f:ec:5a:73:dc:21:b1:11:f2:8a:42:de:b0:8e:7b:56:7f:
99:0b:52:b0:bd:58:94:44:82:d6:64:06:5f:12:7c:dd:b1:31:
3a:c3:81:9c:84:74:04:15:9a:81:9b:ee:b9:23:87:39:ff:86:
7c:45:ab:7d:60:a1:1d:03:96:51:d7:d4:b4:dd:ab:7e:05:92:
a9:b4:2f:79:65:97:b7:cd:f1:ff:ae:69:17:d2:35:5c:3d:3c:
c9:92:7f:68:36:13:bb:e0:90:af:5b:e9:dc:b3:ab:74:0f:e8:
00:4d:63:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:05 2025 by rpki-client