Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/KAKdqF7pUWKIcLA016-ctPkRogY.roa
File: KAKdqF7pUWKIcLA016-ctPkRogY.roa (raw, json)
Hash identifier: 0xz+3rn9XK7OZSSxBzqvEzRbsXpQfViNbB8GzswwJS8=
Subject key identifier: 28:02:9D:A8:5E:E9:51:62:88:70:B0:34:D7:AF:9C:B4:F9:11:A2:06
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 0199999C52F1D4C47B6788A7F5F03A0F4CFC
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/KAKdqF7pUWKIcLA016-ctPkRogY.roa
Signing time: Tue 30 Sep 2025 07:53:02 +0000
ROA not before: Tue 30 Sep 2025 07:53:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29581
IP address blocks: 82.179.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:99:9c:52:f1:d4:c4:7b:67:88:a7:f5:f0:3a:0f:4c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Sep 30 07:53:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28029da85ee951628870b034d7af9cb4f911a206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b6:58:77:e4:80:86:eb:ea:56:44:09:f4:11:
a4:0d:7b:4c:35:46:7f:8c:56:0f:60:cd:b2:97:ff:
c4:22:f8:8e:c4:14:54:02:05:c6:c2:75:1f:ba:ec:
34:c5:08:ad:0b:23:22:d7:cb:92:cc:20:2c:7f:92:
65:c9:d6:f2:26:17:3a:60:9e:51:ed:f1:6c:9d:4b:
e2:f4:ff:e9:d7:b8:b3:d2:f3:a1:35:70:ed:99:17:
8f:85:3d:66:81:19:29:10:da:01:f8:af:78:7f:80:
c5:6f:b4:07:d8:b1:9b:e0:d0:5f:15:bc:aa:25:ce:
03:f1:3c:1f:4d:24:91:d8:36:84:11:39:de:e0:4b:
68:88:ce:81:48:11:3a:a7:c6:e6:68:9b:ef:68:85:
cb:17:43:f8:96:61:30:5d:5d:8c:f8:ef:3f:4e:f6:
45:0a:5e:ae:99:7f:7a:d9:00:b7:6c:85:3c:f3:c0:
46:b3:85:e7:f4:40:63:2a:4e:79:1c:66:86:ea:39:
7e:5c:1f:fb:87:08:02:91:a6:be:b0:40:f2:b1:b3:
f9:a6:d9:f4:d4:f2:34:5e:9d:00:00:c0:04:ac:99:
02:93:85:71:05:84:77:a2:95:fd:70:8b:6d:04:d7:
65:40:3d:66:35:08:f8:4d:47:7b:23:cd:77:35:b2:
d8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:02:9D:A8:5E:E9:51:62:88:70:B0:34:D7:AF:9C:B4:F9:11:A2:06
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/KAKdqF7pUWKIcLA016-ctPkRogY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.179.16.0/20
Signature Algorithm: sha256WithRSAEncryption
83:0d:c2:89:ee:01:0f:fc:81:f6:83:0b:01:e1:3a:76:7e:75:
17:cb:7a:56:96:3e:44:30:29:62:bc:df:fb:5b:f9:0d:ca:37:
2b:fd:02:6b:4d:52:25:f1:ab:b8:bc:4d:56:89:45:78:b3:67:
4d:f3:80:ea:c0:2a:7f:15:e2:5c:7e:61:84:e6:a0:b1:18:90:
11:3f:a2:0a:d7:da:d5:61:7f:00:8d:1a:50:fb:f2:b1:16:a7:
82:ce:70:46:9b:bc:30:c5:ed:8b:bc:29:2e:46:1f:85:b2:ba:
08:97:e3:8d:d2:bb:98:8a:e2:3b:0f:90:9d:83:d7:d8:3d:b5:
1c:bc:d0:50:d2:dc:7e:56:8c:63:ea:b1:f8:55:fd:a5:f3:c5:
d3:10:61:9e:8a:bc:e3:f2:62:a0:31:78:ef:8b:ff:f8:55:50:
f9:e9:22:9a:44:b8:dc:45:af:5c:92:92:35:ee:0a:0a:53:b0:
c8:db:fa:87:f7:5e:2b:40:29:6a:c7:3c:da:2e:86:49:37:c8:
22:ae:67:bb:66:a5:75:3a:32:82:fb:6b:13:ab:d5:92:32:2e:
a2:31:f9:c4:21:ba:a1:e9:52:1f:28:df:9f:50:db:1b:3f:3b:
c5:9e:5d:a2:f3:aa:8f:3d:0f:8f:5a:dc:ed:ed:9b:0d:0d:34:
4b:88:95:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:12 2025 by rpki-client