Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/kQsGPemVQTjeA88dAZ8pv0jsM5Y.roa
File: kQsGPemVQTjeA88dAZ8pv0jsM5Y.roa (raw, json)
Hash identifier: +/+dI6sKhxOqMNJuHemXER1d+kDUpiEiqbk+G5uJ4KU=
Subject key identifier: 91:0B:06:3D:E9:95:41:38:DE:03:CF:1D:01:9F:29:BF:48:EC:33:96
Certificate issuer: /CN=b541558181f7863119bf4a1554c75dab1f6c5292
Certificate serial: 019980E7DD26AC8754F467A423E7B18C599B
Authority key identifier: B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/kQsGPemVQTjeA88dAZ8pv0jsM5Y.roa
Signing time: Thu 25 Sep 2025 12:45:03 +0000
ROA not before: Thu 25 Sep 2025 12:45:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215826
IP address blocks: 83.217.208.0/24 maxlen: 24
83.217.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:80:e7:dd:26:ac:87:54:f4:67:a4:23:e7:b1:8c:59:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b541558181f7863119bf4a1554c75dab1f6c5292
Validity
Not Before: Sep 25 12:45:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=910b063de9954138de03cf1d019f29bf48ec3396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e8:7a:75:92:06:d3:08:8b:5a:67:ea:e7:c3:
ed:e8:b5:ad:97:6a:a9:c9:37:23:f9:ce:08:d6:14:
d5:37:2f:fa:0b:b4:ec:72:b1:0d:d8:d9:dd:a7:a2:
8c:c8:05:33:15:e0:b1:6a:31:9f:f0:1a:76:f9:02:
22:44:3a:ba:8e:a4:cb:5e:8e:6b:c7:c0:67:d3:2c:
45:c9:95:55:63:8a:c9:29:91:75:29:18:3c:95:a5:
26:18:62:03:e7:4c:b2:38:05:92:0d:4a:30:a1:c7:
0e:99:fc:38:42:5a:ff:2b:b3:c7:bd:4c:04:7d:b5:
e1:dd:f4:c9:45:aa:56:43:e4:7c:c5:4b:4a:bf:3c:
df:c1:89:83:37:89:80:e2:aa:06:e3:d4:6e:2d:7a:
a3:d7:b8:ef:81:78:d4:9b:81:70:e3:28:a2:57:76:
01:9a:06:9f:ec:3c:d8:a3:f0:38:89:f6:c0:cb:34:
81:8e:51:78:67:57:16:20:51:6f:6d:53:55:78:5f:
e0:4b:fd:12:46:4a:7a:d5:b1:e3:ce:2a:20:d1:c5:
14:f7:5c:92:e9:ed:57:6c:da:74:44:a8:0f:9f:10:
12:00:11:be:22:7c:bd:da:79:e5:68:41:b0:d5:bd:
37:0a:b7:7b:1b:b4:a1:7a:e0:29:d9:cb:1d:0f:a1:
7e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:0B:06:3D:E9:95:41:38:DE:03:CF:1D:01:9F:29:BF:48:EC:33:96
X509v3 Authority Key Identifier:
keyid:B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/kQsGPemVQTjeA88dAZ8pv0jsM5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.217.208.0/23
Signature Algorithm: sha256WithRSAEncryption
77:56:e9:49:d7:d2:96:6f:95:b1:24:3f:47:ac:59:dc:dd:cd:
a3:d2:bd:b9:67:b5:aa:8c:b6:fd:36:a6:e8:e9:ea:b1:03:fb:
a7:f7:e1:1e:56:ab:2a:3e:31:1f:8e:81:6c:bf:22:5e:74:c0:
45:57:81:be:b5:a3:8c:b2:b4:ad:eb:06:2a:98:44:64:ed:33:
6c:c5:9b:da:91:3d:3c:fe:97:7e:d1:6b:65:dd:32:ce:04:8f:
d4:bc:b9:53:86:cc:a0:65:18:78:0a:78:d7:21:a6:36:8b:54:
f5:d5:cc:60:64:60:d4:88:49:d8:b5:71:13:8b:4e:d2:97:f9:
62:6b:c9:7b:aa:86:14:93:bb:98:b7:9d:74:3d:b1:f9:c2:7a:
1b:65:79:12:de:a6:b2:73:69:6c:b9:38:2f:13:a0:2e:03:12:
4d:bb:ea:de:11:5b:4d:40:b6:f9:75:29:c6:b0:39:1d:57:48:
09:93:16:cf:2f:01:85:8b:37:7c:be:1b:ca:ef:af:48:aa:4d:
84:7b:d6:69:7c:b5:1f:0d:21:10:cf:b3:bc:5f:f4:7c:78:ad:
a6:83:f3:ae:d5:15:42:07:4a:64:19:d3:07:22:78:91:41:c9:
e8:a1:28:09:11:8f:a9:33:55:33:3b:eb:51:1b:ba:98:82:a2:
a2:e5:78:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:45 2025 by rpki-client