Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/knMcRzeWn60PeEDKHh4T-DsD47k.roa
File: knMcRzeWn60PeEDKHh4T-DsD47k.roa (raw, json)
Hash identifier: 1cCi1oSzq4A+m9C1hgD9P9MQKYKGGXYQlanHWTpFJ5s=
Subject key identifier: 92:73:1C:47:37:96:9F:AD:0F:78:40:CA:1E:1E:13:F8:3B:03:E3:B9
Certificate issuer: /CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Certificate serial: 0198A39A5AE46C77FBF9A1C4FF437D0AE01C
Authority key identifier: 6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/knMcRzeWn60PeEDKHh4T-DsD47k.roa
Signing time: Wed 13 Aug 2025 13:24:18 +0000
ROA not before: Wed 13 Aug 2025 13:24:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203020
IP address blocks: 45.114.12.0/22 maxlen: 32
45.250.64.0/22 maxlen: 32
91.132.114.0/23 maxlen: 32
103.53.216.0/22 maxlen: 22
103.240.180.0/22 maxlen: 32
185.232.45.0/24 maxlen: 32
193.28.182.0/24 maxlen: 32
193.28.191.0/24 maxlen: 32
193.28.202.0/24 maxlen: 32
193.28.237.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a3:9a:5a:e4:6c:77:fb:f9:a1:c4:ff:43:7d:0a:e0:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Validity
Not Before: Aug 13 13:24:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92731c4737969fad0f7840ca1e1e13f83b03e3b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ff:ee:8b:a9:bf:b5:00:14:14:20:26:8c:9a:
66:23:07:56:c8:2e:c4:4c:03:2b:6d:98:24:fe:46:
be:cb:d2:35:83:90:e7:f9:05:64:68:c9:ad:5a:94:
4c:bc:05:a8:7d:0e:6b:dd:cd:8d:66:e1:47:df:b9:
75:16:c7:b7:51:58:93:82:17:70:99:7e:96:4b:d7:
76:b0:63:cc:1e:81:1d:e6:4e:60:b5:b4:1d:7c:66:
9f:a2:56:8e:b3:a2:8c:dd:f5:62:11:21:45:20:80:
20:52:65:3f:f7:b0:ae:85:cc:9a:e0:b8:2a:74:fd:
90:89:ac:f7:f0:ec:55:55:5a:ee:92:19:48:85:dd:
d9:2f:56:94:ef:e3:f9:f8:eb:af:6d:a9:5e:d7:7d:
7b:52:1b:ab:d0:7a:6e:8f:1f:74:8e:f4:91:5e:92:
77:39:18:01:2d:fa:b6:61:8c:fd:84:35:05:c0:2e:
f9:b8:12:56:4c:1b:9a:ed:a5:95:09:4e:aa:51:03:
42:42:61:85:c0:4d:f4:bf:08:fe:92:41:ce:ce:0e:
a7:81:af:a5:d8:b8:28:dc:63:7d:11:9c:f6:5f:88:
3b:85:44:ab:fc:eb:e9:93:09:5f:94:bb:7f:60:a7:
68:fb:3e:f9:66:71:0b:29:35:38:21:e8:0e:cc:f5:
fc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:73:1C:47:37:96:9F:AD:0F:78:40:CA:1E:1E:13:F8:3B:03:E3:B9
X509v3 Authority Key Identifier:
keyid:6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/knMcRzeWn60PeEDKHh4T-DsD47k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.114.12.0/22
45.250.64.0/22
91.132.114.0/23
103.53.216.0/22
103.240.180.0/22
185.232.45.0/24
193.28.182.0/24
193.28.191.0/24
193.28.202.0/24
193.28.237.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:93:b6:bf:7b:cd:bf:0d:c6:4a:ac:53:f1:ad:f2:54:00:32:
9e:bf:96:f9:47:71:b4:6e:11:95:c9:00:fe:51:42:c4:da:e8:
19:a4:2c:27:28:33:df:7e:4b:ea:44:26:1a:f9:82:e7:d3:7f:
90:b4:fa:1f:40:30:b3:3c:e0:70:d9:3f:5f:5c:ee:47:d3:70:
94:d7:dd:a8:a5:9a:15:9d:7a:7e:19:07:1c:f5:fa:62:1c:99:
44:8c:ea:a2:c9:fe:70:b4:73:ba:b9:c0:aa:0e:63:b5:b7:94:
c9:a6:5d:d3:fb:14:22:5e:83:d0:8d:b4:66:ad:bb:cf:14:d8:
32:a7:f7:55:0d:67:be:b6:0a:d6:53:28:ee:b8:b1:ad:0c:42:
dc:3c:36:66:ce:1e:ed:51:c6:43:76:3d:e8:41:1f:cd:21:7b:
ce:98:b7:8f:07:7b:a1:c5:51:7a:d9:08:79:03:c4:54:78:e9:
2b:45:ab:d6:b7:eb:ef:2a:2e:38:6e:59:61:1c:f8:f1:b0:9d:
a0:17:c1:5f:1f:62:f6:b0:a4:66:46:3b:ea:d2:d1:21:cd:82:
cc:51:1f:53:18:30:21:56:8b:04:7d:e1:5a:b1:9d:08:96:bb:
33:ed:e9:a1:3b:b5:aa:95:fb:07:01:dd:71:e3:af:e1:a9:a0:
db:df:14:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:51:54 2025 by rpki-client