
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/KOSFefQ82yRsHMP6xQC1amzxZ5A.roa
File: KOSFefQ82yRsHMP6xQC1amzxZ5A.roa (raw, json)
Hash identifier: PbOvMYy+aS17nQQCkPtiW0Swv+8ZrIMSdL3ZQAHYmIQ=
Subject key identifier: 28:E4:85:79:F4:3C:DB:24:6C:1C:C3:FA:C5:00:B5:6A:6C:F1:67:90
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 0199D39EB7AC10C051E02443C771286D0468
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/KOSFefQ82yRsHMP6xQC1amzxZ5A.roa
Signing time: Sat 11 Oct 2025 14:13:38 +0000
ROA not before: Sat 11 Oct 2025 14:13:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34918
IP address blocks: 185.118.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d3:9e:b7:ac:10:c0:51:e0:24:43:c7:71:28:6d:04:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Oct 11 14:13:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28e48579f43cdb246c1cc3fac500b56a6cf16790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:49:0e:bb:7e:10:e5:a6:e8:ac:ad:a3:c9:3d:
29:bf:d2:e6:a1:99:a4:76:4f:10:75:7a:2f:c8:de:
3d:0c:4a:fe:10:1d:5f:4a:ac:bb:a6:cc:7f:84:d3:
94:bc:fb:cf:ca:6f:20:c7:a9:19:c1:41:93:71:61:
42:bd:82:b9:e9:9b:f7:0c:0f:c3:00:b8:11:0a:cc:
e0:b1:a0:a0:03:6d:66:4f:1f:9a:1f:81:bc:f4:80:
74:d0:69:91:fd:98:06:0c:6f:a1:3b:b3:13:7f:c6:
86:38:c0:6d:03:a9:f1:6f:cd:94:3d:62:aa:51:b8:
fa:6f:10:a4:55:11:67:12:f2:94:a6:46:44:f7:6f:
9c:c2:d9:3c:ac:56:a8:ca:63:71:7a:1f:46:30:f0:
ae:0f:9b:88:db:84:f0:7e:0c:4e:e1:37:89:e3:53:
ac:49:93:57:00:26:61:cd:09:72:d5:cb:5a:78:1e:
c2:f7:c2:06:ad:97:95:04:fd:44:d1:25:66:44:c0:
5d:1d:9c:fe:24:f1:f7:4f:48:1c:dc:88:e8:91:a7:
f0:7c:41:62:9c:83:fa:ff:1c:fa:85:c5:c4:55:4c:
aa:41:9e:7a:ca:65:0b:52:c5:51:c2:6f:9b:a6:5e:
3c:9b:50:c0:69:82:2b:0e:13:49:7c:2c:b8:0f:27:
28:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E4:85:79:F4:3C:DB:24:6C:1C:C3:FA:C5:00:B5:6A:6C:F1:67:90
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/KOSFefQ82yRsHMP6xQC1amzxZ5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.15.0/24
Signature Algorithm: sha256WithRSAEncryption
79:4d:9e:6e:9d:ef:72:67:c6:9b:da:ea:67:dc:ed:b4:20:d6:
4c:80:66:86:2d:a5:9c:02:95:ac:a0:4c:a0:c6:73:a9:6a:dc:
ca:ef:70:af:a4:5a:b8:b6:c8:e8:fc:d4:2e:5c:0b:05:4b:6f:
db:fe:0a:a2:4a:26:0c:ac:97:99:dc:a3:f1:4a:5c:44:f7:1c:
07:80:a8:98:b0:16:1b:e5:2e:c7:a9:ef:6e:cf:18:fe:9e:28:
97:f0:d6:5b:d9:ef:86:b1:a1:ac:b2:f3:b9:a4:cc:fc:31:84:
9a:69:2b:52:af:5d:da:02:a2:9f:c7:7a:7e:1c:c5:6b:fb:dd:
cf:95:31:9d:b3:5f:99:81:14:37:d8:de:0f:e0:8d:ed:da:50:
48:97:57:0b:87:66:2f:5b:de:c3:1f:7c:f0:cf:8e:40:a4:3c:
24:27:c3:fa:40:1b:74:69:e9:7f:31:03:39:1d:2b:40:36:51:
69:9d:6f:05:09:50:83:d9:28:2b:3f:06:8f:3a:95:f9:96:c8:
09:e1:d1:f0:5b:6f:7b:6a:01:e8:1d:ef:b6:7a:b7:df:20:a1:
ab:2f:c1:99:ba:df:59:21:3b:bb:9e:7f:df:af:d9:f7:c7:76:
5b:e1:c2:1f:7a:dd:b5:b9:44:30:ea:f2:62:a0:9b:00:07:d3:
b7:6f:93:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:44:49 2025 by rpki-client