Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/KcNtrkXfWD4wgCwB7qLlqtvzcgg.roa
File: KcNtrkXfWD4wgCwB7qLlqtvzcgg.roa (raw, json)
Hash identifier: z81PUb/8yP4dJX4BJ7raGDXpDYCTPlJci2iLGLvRqnQ=
Subject key identifier: 29:C3:6D:AE:45:DF:58:3E:30:80:2C:01:EE:A2:E5:AA:DB:F3:72:08
Certificate issuer: /CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Certificate serial: 0198A8E608152D21515F178C55F8946429CC
Authority key identifier: 5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/KcNtrkXfWD4wgCwB7qLlqtvzcgg.roa
Signing time: Thu 14 Aug 2025 14:05:04 +0000
ROA not before: Thu 14 Aug 2025 14:05:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212655
IP address blocks: 88.97.192.0/18 maxlen: 18
88.97.192.0/21 maxlen: 21
88.97.200.0/21 maxlen: 21
88.97.200.0/23 maxlen: 23
88.97.202.0/23 maxlen: 23
88.97.204.0/23 maxlen: 23
88.97.206.0/23 maxlen: 23
88.97.208.0/21 maxlen: 21
88.97.216.0/21 maxlen: 21
88.97.216.0/23 maxlen: 23
88.97.218.0/23 maxlen: 23
88.97.220.0/23 maxlen: 23
88.97.222.0/23 maxlen: 23
88.97.224.0/21 maxlen: 21
88.97.232.0/21 maxlen: 21
88.97.240.0/22 maxlen: 22
88.97.240.0/23 maxlen: 23
88.97.244.0/22 maxlen: 22
88.97.248.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a8:e6:08:15:2d:21:51:5f:17:8c:55:f8:94:64:29:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Validity
Not Before: Aug 14 14:05:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29c36dae45df583e30802c01eea2e5aadbf37208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:05:08:f4:57:d0:8c:06:11:d5:42:a1:53:70:
cd:04:86:67:4b:e8:3c:3b:07:c3:d8:20:c9:65:dd:
21:6b:27:d7:c9:86:59:6a:0e:00:63:65:43:41:4f:
1c:f2:5c:86:b6:b3:07:c8:8b:ee:02:ea:da:c6:4d:
0d:19:00:c2:d9:3d:90:15:86:17:74:19:11:0a:07:
7d:5a:5f:f8:da:3c:28:dc:d2:cb:85:b8:50:7c:52:
cd:15:7b:dd:63:ee:c6:c3:18:1f:de:c2:77:34:14:
97:32:53:b8:1a:a6:53:f5:9c:07:e3:66:9d:a2:60:
e9:9e:a8:89:2c:43:ad:49:b4:fd:67:1c:10:8d:af:
98:6d:6e:0f:d6:cd:e9:b4:0b:3e:b7:d1:13:ed:c9:
49:67:b8:5f:03:10:92:ef:e2:0b:6e:13:12:57:39:
ac:3c:2a:ca:1c:ef:13:69:d7:11:be:d6:c5:0c:13:
0b:de:28:ef:96:86:c4:11:44:8c:57:33:68:d1:9f:
9c:47:03:9d:9f:8c:de:ba:3e:dc:f6:b5:4f:24:49:
17:57:88:6e:02:79:50:0e:8c:2a:fa:cd:b6:d6:a0:
c3:a2:8f:1b:83:21:05:34:6c:be:b9:e5:ad:9b:e9:
39:b2:61:6f:82:68:b1:4e:c1:16:3e:e7:34:02:58:
69:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C3:6D:AE:45:DF:58:3E:30:80:2C:01:EE:A2:E5:AA:DB:F3:72:08
X509v3 Authority Key Identifier:
keyid:5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/KcNtrkXfWD4wgCwB7qLlqtvzcgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.97.192.0/18
Signature Algorithm: sha256WithRSAEncryption
a8:bb:47:04:89:7f:fd:a9:7e:65:c8:09:9e:46:02:5a:36:74:
c0:2d:43:b7:5d:7d:26:26:ad:e1:c5:0c:84:55:13:e8:57:60:
9d:82:88:c7:98:ad:d1:fc:2c:c0:da:d2:57:50:e8:e3:3d:bf:
26:6c:dc:4b:4b:61:34:31:7b:ff:ee:e8:dd:e4:88:6f:1a:7a:
73:8c:cc:14:4b:27:bb:25:4d:df:a7:1b:5c:83:dc:fd:c4:3e:
c7:17:c7:88:17:47:d6:a7:f8:a6:95:85:5b:fb:27:79:0b:ec:
0a:34:f4:75:69:55:aa:5f:28:ac:3c:b5:b8:0e:8f:81:e7:c6:
32:96:82:27:52:77:b3:e6:44:fc:15:5b:cb:1c:2d:a3:0a:f7:
54:1a:2a:d8:da:97:1f:d6:36:3e:02:27:21:b6:5c:4f:b3:e8:
78:db:6f:ee:bf:74:71:e8:78:5c:ea:f5:cc:08:c5:ed:3f:3a:
78:91:05:6a:58:7e:10:7b:4d:a9:c8:5e:48:63:d3:8d:c6:d6:
b8:33:f5:2f:20:93:fd:6d:0c:65:00:99:b8:8c:7c:a4:4e:ce:
72:ee:cd:99:31:fb:d7:9e:e2:fe:c2:7f:c0:59:2d:16:63:ec:
23:57:36:e1:17:67:ea:67:01:ba:9e:86:35:1f:a6:a5:5e:6b:
91:f8:21:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:11:22 2025 by rpki-client