Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/KE4XnKQhqPguqlRYcxIoqo981UE.roa
File: KE4XnKQhqPguqlRYcxIoqo981UE.roa (raw, json)
Hash identifier: az71zExo8C/1i/65qlceZGsCGShh0tDnt7kF10fzzW0=
Subject key identifier: 28:4E:17:9C:A4:21:A8:F8:2E:AA:54:58:73:12:28:AA:8F:7C:D5:41
Certificate issuer: /CN=a98e5943c355d48c004e6bf4a3b6cdb8c30adc4c
Certificate serial: 0199342CC54B58FFD793ACF73CB1EEEBB4A4
Authority key identifier: A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/KE4XnKQhqPguqlRYcxIoqo981UE.roa
Signing time: Wed 10 Sep 2025 15:09:33 +0000
ROA not before: Wed 10 Sep 2025 15:09:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1267
IP address blocks: 151.81.0.0/16 maxlen: 16
151.82.0.0/16 maxlen: 16
151.83.0.0/16 maxlen: 16
151.84.0.0/16 maxlen: 16
151.93.0.0/16 maxlen: 16
151.95.0.0/16 maxlen: 16
193.76.0.0/16 maxlen: 16
195.45.0.0/16 maxlen: 16
2a02:b000::/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:2c:c5:4b:58:ff:d7:93:ac:f7:3c:b1:ee:eb:b4:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a98e5943c355d48c004e6bf4a3b6cdb8c30adc4c
Validity
Not Before: Sep 10 15:09:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=284e179ca421a8f82eaa5458731228aa8f7cd541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:66:55:fe:13:83:66:f8:61:a2:7f:0c:12:85:
32:a7:bc:26:34:82:34:19:5f:0d:5f:e8:1d:83:f4:
1a:e2:82:94:49:1c:6d:4c:68:65:6c:b1:ca:9d:29:
71:e6:82:ef:81:4f:67:e9:79:63:26:90:fc:6c:f9:
4e:08:62:26:f8:23:dd:2d:dc:60:4a:3b:79:91:69:
82:9f:22:5f:ad:f5:ff:a2:2a:36:4c:0e:78:10:35:
4a:86:52:8a:b6:4e:42:08:25:08:70:6b:ab:ee:91:
8b:45:a5:aa:c9:ee:da:ed:11:eb:6e:8e:cd:04:0e:
17:d2:57:3f:c0:52:5e:b3:b2:35:04:a8:70:ca:32:
9b:16:33:84:34:b6:a0:a0:24:0e:f4:56:bb:92:90:
04:34:fc:b1:21:7e:e0:90:d4:73:0b:ad:42:b4:18:
f0:44:40:c3:9d:97:ae:39:91:6a:62:71:23:bc:39:
8c:7d:9f:74:7a:73:0f:6a:4f:1d:30:22:2e:b6:16:
1d:e7:a5:67:29:b9:99:3c:28:12:d8:93:ab:7e:4e:
64:03:84:0f:77:60:ce:9a:1e:1d:45:11:e5:cf:32:
33:6f:b5:c3:86:36:79:44:2f:f3:91:34:e9:2e:4d:
9a:aa:70:9a:5c:1a:ac:d3:39:30:79:b5:1e:83:dd:
af:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4E:17:9C:A4:21:A8:F8:2E:AA:54:58:73:12:28:AA:8F:7C:D5:41
X509v3 Authority Key Identifier:
keyid:A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/KE4XnKQhqPguqlRYcxIoqo981UE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.81.0.0-151.84.255.255
151.93.0.0/16
151.95.0.0/16
193.76.0.0/16
195.45.0.0/16
IPv6:
2a02:b000::/23
Signature Algorithm: sha256WithRSAEncryption
72:b5:3c:2a:6b:7d:01:d7:ea:4d:83:e7:4d:ad:ec:c4:94:67:
92:9e:3d:ba:20:ea:d5:f2:4b:c9:4b:87:62:be:16:de:52:a4:
d1:4d:8c:47:10:1d:67:83:1d:ff:6f:a4:e0:ce:39:45:5d:5f:
36:31:c7:bf:aa:f1:4c:89:75:04:86:25:9b:39:99:09:59:bd:
69:57:a4:4c:9f:0d:fe:19:d6:c0:96:b1:76:82:e2:b1:a2:0f:
31:35:d0:91:e5:0e:a8:40:a8:b9:74:7b:59:6c:27:a9:6a:d7:
11:1b:c4:0a:64:85:b3:22:2b:d0:2f:ff:f3:93:f8:60:de:62:
1a:48:39:ee:1c:79:b0:5f:ab:8f:2b:1f:04:98:84:e8:14:6e:
df:ea:c9:12:95:f7:8e:cb:70:6e:0d:8e:cb:a6:3d:6b:7b:c7:
6f:72:01:92:70:a7:fd:0c:8e:48:a8:1b:a1:3e:55:30:d1:e6:
81:8f:a8:35:55:d4:a7:2a:b5:0f:47:71:7e:ef:1b:56:ee:22:
29:33:8d:6a:d5:e4:79:45:29:ef:73:e6:96:f4:57:7c:52:ee:
be:c3:f4:22:5c:44:44:7a:23:ad:18:d7:d9:ac:8f:91:b5:b0:
1c:1c:42:d2:48:af:d4:66:c7:1f:64:5a:ff:d6:d5:70:6b:e7:
58:a5:29:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:27:18 2025 by rpki-client