Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/krWDWCzGg1jKZMw06dKTAnMefX8.roa
File: krWDWCzGg1jKZMw06dKTAnMefX8.roa (raw, json)
Hash identifier: hQOTE9M3OTHfSzXthXTMqohW502NCM73aWk/lM6+em8=
Subject key identifier: 92:B5:83:58:2C:C6:83:58:CA:64:CC:34:E9:D2:93:02:73:1E:7D:7F
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 0198A36F6B1EBC9089A43691AF85F9477E61
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/krWDWCzGg1jKZMw06dKTAnMefX8.roa
Signing time: Wed 13 Aug 2025 12:37:24 +0000
ROA not before: Wed 13 Aug 2025 12:37:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 85.204.181.0/24 maxlen: 24
86.105.58.0/24 maxlen: 24
86.105.211.0/24 maxlen: 24
86.107.164.0/24 maxlen: 24
89.34.112.0/21 maxlen: 24
89.39.97.0/24 maxlen: 24
93.113.70.0/24 maxlen: 24
93.119.144.0/24 maxlen: 24
93.119.201.0/24 maxlen: 24
93.119.232.0/24 maxlen: 24
188.208.124.0/24 maxlen: 24
188.214.136.0/24 maxlen: 24
188.214.137.0/24 maxlen: 24
188.214.138.0/24 maxlen: 24
188.214.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a3:6f:6b:1e:bc:90:89:a4:36:91:af:85:f9:47:7e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Aug 13 12:37:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92b583582cc68358ca64cc34e9d29302731e7d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e1:aa:c7:ec:c9:8e:24:26:c9:b5:d5:cb:11:
6e:81:ed:d5:24:36:e8:3d:24:f0:ed:dc:52:d8:f5:
a2:34:8c:53:df:77:af:d8:4e:16:6a:46:d1:b4:15:
23:95:51:dd:73:79:e0:6f:eb:0b:48:23:60:aa:36:
e3:90:61:68:b2:1f:49:f9:01:7c:e6:25:90:30:8f:
78:14:63:a3:8a:6e:b8:7f:a6:f1:ce:41:e6:31:60:
8e:12:1e:b8:6c:f2:3f:b9:c6:22:9b:9f:98:e7:8a:
ea:c1:b6:8b:18:70:16:3a:ac:13:a5:cb:4a:a3:19:
91:92:ce:c2:cd:7f:0f:cf:7e:d8:2e:bf:63:e5:70:
1e:4b:ce:08:7a:64:8c:4e:41:48:e6:1d:59:c2:ee:
15:19:29:85:79:66:9c:00:57:a3:a6:24:ea:ad:71:
06:52:a6:5a:bd:e6:ed:f7:62:70:f9:d7:6f:43:19:
74:3d:e6:00:c7:dd:9f:40:e1:78:02:e9:97:fb:c4:
19:a0:e3:7d:7d:8a:b7:3f:1c:ec:94:65:03:f0:28:
7a:27:42:2f:3f:86:0f:3e:27:48:62:b9:a9:57:85:
50:1f:35:97:84:72:de:51:e6:28:1c:4a:11:65:87:
62:21:35:e6:8b:fa:05:c0:04:85:1d:17:61:77:11:
b4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B5:83:58:2C:C6:83:58:CA:64:CC:34:E9:D2:93:02:73:1E:7D:7F
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/krWDWCzGg1jKZMw06dKTAnMefX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.181.0/24
86.105.58.0/24
86.105.211.0/24
86.107.164.0/24
89.34.112.0/21
89.39.97.0/24
93.113.70.0/24
93.119.144.0/24
93.119.201.0/24
93.119.232.0/24
188.208.124.0/24
188.214.136.0/22
Signature Algorithm: sha256WithRSAEncryption
64:e5:be:06:85:70:1c:cf:c7:c5:95:78:06:a0:55:8c:43:f3:
00:6d:53:61:f3:83:ba:a5:a9:1b:08:b5:49:a6:92:85:14:0c:
ec:b3:a7:6a:c3:be:9d:b1:02:89:1d:fa:7a:80:e1:74:b1:74:
e3:da:02:23:82:08:5d:1c:fe:4d:01:e0:71:22:66:10:12:2d:
38:31:6e:ec:30:f0:a7:29:10:b4:f6:4a:e5:1e:df:92:53:e7:
93:33:6d:b3:f3:89:74:36:7c:a2:67:e8:a6:95:2b:29:a4:33:
fb:aa:22:04:a1:3f:66:43:b8:5a:0a:57:5d:6a:b3:60:fa:06:
ca:8a:87:08:53:a7:9d:91:87:f1:39:21:d8:db:2a:47:dc:31:
49:8b:34:97:4b:60:ec:b3:12:4d:3d:31:23:a9:15:c1:d6:bf:
53:ad:ea:28:8a:d1:f3:41:61:7e:6d:c7:23:2a:cd:28:ee:65:
b1:78:30:85:be:50:4c:dc:aa:38:62:60:e0:dc:e7:24:6f:74:
d9:a9:28:d9:b0:aa:5e:5f:8d:36:92:60:ae:f8:86:78:8b:6f:
d9:1a:23:49:3a:b1:16:51:b6:59:8c:1c:44:fc:b9:0c:2a:39:
79:28:89:1c:56:4a:eb:46:06:fb:a9:aa:76:bd:66:01:fa:cd:
e2:6b:e2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:46:46 2025 by rpki-client