Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/KV5I-Jsue4gWUGGtJ0Aw1g6pU0c.roa
File: KV5I-Jsue4gWUGGtJ0Aw1g6pU0c.roa (raw, json)
Hash identifier: BZ1HA8rxetrouIlpnBmGcoyBTYS61T3HwnqvJdt7aD8=
Subject key identifier: 29:5E:48:F8:9B:2E:7B:88:16:50:61:AD:27:40:30:D6:0E:A9:53:47
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0197998B7A304B414F637964677C5C2CD0C3
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/KV5I-Jsue4gWUGGtJ0Aw1g6pU0c.roa
Signing time: Sun 22 Jun 2025 21:29:04 +0000
ROA not before: Sun 22 Jun 2025 21:29:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 82.153.159.0/24 maxlen: 24
109.176.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:99:8b:7a:30:4b:41:4f:63:79:64:67:7c:5c:2c:d0:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 22 21:29:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=295e48f89b2e7b88165061ad274030d60ea95347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:dc:fb:56:fa:cb:56:84:a5:ff:f0:df:ea:36:
7c:72:40:d8:be:4f:0b:42:5d:49:a8:b2:24:0d:91:
d8:38:3a:bd:50:06:a9:bc:d4:eb:04:27:e3:b5:e4:
d7:41:41:31:65:36:ac:f9:94:58:31:3a:74:51:90:
f3:a2:01:06:52:cb:55:73:cd:fa:ef:7a:6e:d2:ab:
69:d5:d5:4d:c0:83:d4:bb:c7:26:c2:4c:5a:47:77:
12:d1:b0:a7:87:26:02:d6:2a:6a:40:24:68:50:89:
c3:d5:53:01:d3:bb:01:82:84:89:3f:6c:af:76:35:
e9:d6:b1:d8:0c:36:e9:26:13:0b:b2:9f:f9:cd:84:
d7:11:aa:b2:5b:2b:c7:50:fe:8d:ea:02:a8:69:47:
0e:83:26:bb:7a:dd:5a:62:cf:c9:f7:fd:16:96:7c:
4c:17:a5:f1:0d:28:96:a3:41:12:8c:93:00:29:9a:
70:5e:35:b7:34:79:a0:c3:19:e8:0a:88:67:e5:08:
b3:1f:c8:7e:a9:4a:96:08:8d:63:c4:a3:0f:cd:5d:
82:9d:74:5f:73:f5:e3:b4:e2:cd:c1:b8:51:51:a7:
e2:23:72:7c:0e:76:87:56:dc:47:fa:b3:38:52:38:
28:fb:d1:b4:af:80:73:94:3f:0b:c6:e1:4b:a6:00:
6a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5E:48:F8:9B:2E:7B:88:16:50:61:AD:27:40:30:D6:0E:A9:53:47
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/KV5I-Jsue4gWUGGtJ0Aw1g6pU0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.159.0/24
109.176.193.0/24
Signature Algorithm: sha256WithRSAEncryption
70:a3:5f:75:37:99:70:09:5b:24:b2:2a:82:5a:20:6f:d5:03:
74:9b:0a:34:f3:86:41:04:c9:37:81:e7:bc:4f:85:79:bc:f7:
6c:2f:5f:d2:b2:59:72:df:9b:99:87:3c:19:90:88:49:83:a6:
f5:b0:32:aa:0c:83:63:88:fc:01:ac:41:8e:19:0b:3f:b5:e9:
68:a2:63:02:f7:d1:eb:5c:51:38:f6:74:65:d6:9d:7f:26:67:
e0:74:ef:3f:f0:ba:c6:3d:ad:31:63:0e:00:2d:17:79:d4:47:
b7:20:3e:3d:a0:d7:35:44:59:cf:dd:b0:48:ef:ee:02:ae:8d:
b5:07:32:07:b6:5a:4d:2b:37:50:15:29:1d:2a:69:0a:0f:b2:
af:fa:f4:dc:a0:ab:f4:83:20:a0:50:53:85:6e:65:18:ad:f3:
22:0a:79:ce:d2:96:cf:5c:0b:09:43:07:74:4d:58:ad:c8:24:
f9:8c:92:7f:3a:4e:1e:95:d6:9c:57:44:8a:d1:db:a8:ec:a9:
98:2b:11:00:06:07:87:c1:fe:11:71:64:0c:07:3a:d6:69:43:
c7:96:77:32:eb:7e:47:6b:c7:f9:4e:37:f8:2d:43:a1:60:4a:
50:87:4d:1d:88:2c:08:df:7e:83:ab:88:cc:cd:f1:9e:90:35:
40:3f:02:8b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZeZi3owS0FPY3lkZ3xcLNDDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwNjIyMjEyOTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTVlNDhmODliMmU3Yjg4MTY1MDYxYWQyNzQwMzBkNjBlYTk1MzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdz7VvrLVoSl//Df6jZ8ckDYvk8L
Ql1JqLIkDZHYODq9UAapvNTrBCfjteTXQUExZTas+ZRYMTp0UZDzogEGUstVc836
73pu0qtp1dVNwIPUu8cmwkxaR3cS0bCnhyYC1ipqQCRoUInD1VMB07sBgoSJP2yv
djXp1rHYDDbpJhMLsp/5zYTXEaqyWyvHUP6N6gKoaUcOgya7et1aYs/J9/0WlnxM
F6XxDSiWo0ESjJMAKZpwXjW3NHmgwxnoCohn5QizH8h+qUqWCI1jxKMPzV2CnXRf
c/XjtOLNwbhRUafiI3J8DnaHVtxH+rM4Ujgo+9G0r4BzlD8LxuFLpgBqfwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCleSPibLnuIFlBhrSdAMNYOqVNHMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvS1Y1SS1Kc3VlNGdXVUdHdEowQXcxZzZwVTBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUpmfAwQA
bbDBMA0GCSqGSIb3DQEBCwUAA4IBAQBwo191N5lwCVsksiqCWiBv1QN0mwo084ZB
BMk3gee8T4V5vPdsL1/Sslly35uZhzwZkIhJg6b1sDKqDINjiPwBrEGOGQs/telo
omMC99HrXFE49nRl1p1/JmfgdO8/8LrGPa0xYw4ALRd51Ee3ID49oNc1RFnP3bBI
7+4Cro21BzIHtlpNKzdQFSkdKmkKD7Kv+vTcoKv0gyCgUFOFbmUYrfMiCnnO0pbP
XAsJQwd0TVityCT5jJJ/Ok4eldacV0SK0duo7KmYKxEABgeHwf4RcWQMBzrWaUPH
lncy635Ha8f5Tjf4LUOhYEpQh00diCwI336Dq4jMzfGekDVAPwKL
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:17:43 2025 by rpki-client