Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/Kp7QS5P4WvZzp6qAgCE-0Ndh8DE.roa
File: Kp7QS5P4WvZzp6qAgCE-0Ndh8DE.roa (raw, json)
Hash identifier: RVta5cu/zmPSf403glh7WoQpDtLpGKMPuUokA8G+dNU=
Subject key identifier: 2A:9E:D0:4B:93:F8:5A:F6:73:A7:AA:80:80:21:3E:D0:D7:61:F0:31
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 0198BA9F634516906A8C1704D204F5E9C852
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/Kp7QS5P4WvZzp6qAgCE-0Ndh8DE.roa
Signing time: Mon 18 Aug 2025 00:41:04 +0000
ROA not before: Mon 18 Aug 2025 00:41:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6079
IP address blocks: 45.248.55.0/24 maxlen: 24
94.154.177.0/24 maxlen: 24
162.218.88.0/24 maxlen: 24
185.52.136.0/24 maxlen: 24
185.253.122.0/24 maxlen: 24
192.145.71.0/24 maxlen: 24
193.160.80.0/22 maxlen: 22
217.197.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ba:9f:63:45:16:90:6a:8c:17:04:d2:04:f5:e9:c8:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Aug 18 00:41:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a9ed04b93f85af673a7aa8080213ed0d761f031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8d:66:4b:a3:e8:df:a7:9e:b7:54:fa:3a:6f:
35:68:e3:1d:4d:39:da:ee:17:af:01:8a:28:79:2f:
e3:30:d8:fe:36:56:d3:74:2e:7e:6c:da:01:db:9d:
2a:d6:9a:9f:12:fd:bc:e8:4c:f0:9d:bf:53:7c:0a:
e2:c1:ce:59:cc:ad:6c:01:4e:e5:cd:85:a0:f1:d8:
e8:da:c0:c6:df:cb:7d:2a:18:db:33:7d:fa:ec:fb:
96:f3:52:10:bf:75:f0:80:21:fc:6c:62:67:3d:ad:
1b:97:4e:95:90:04:c0:59:cb:b7:21:ef:15:2c:07:
a5:42:c1:59:d4:af:ec:32:04:2c:13:43:c0:ba:4b:
62:be:5b:b6:50:3d:6b:e1:7b:aa:83:24:fd:d7:6b:
fe:0e:82:32:0d:24:88:77:e2:77:ea:0c:86:35:c5:
66:c6:99:6a:8d:61:78:d0:41:57:22:c2:89:b0:e2:
c1:50:c4:af:0c:b3:22:e4:37:0d:63:86:fa:79:54:
d0:36:a6:9b:4f:b9:71:f1:39:83:aa:81:0f:77:cc:
10:8a:b3:bf:41:90:7d:45:bd:93:3f:ad:44:a0:b7:
86:32:2a:1a:a0:ee:b6:79:fd:fc:40:a6:17:ef:1c:
05:e4:b0:cd:1b:f2:4f:59:f2:6b:dc:a9:53:0d:37:
8f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:9E:D0:4B:93:F8:5A:F6:73:A7:AA:80:80:21:3E:D0:D7:61:F0:31
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/Kp7QS5P4WvZzp6qAgCE-0Ndh8DE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.248.55.0/24
94.154.177.0/24
162.218.88.0/24
185.52.136.0/24
185.253.122.0/24
192.145.71.0/24
193.160.80.0/22
217.197.170.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:4b:7c:f7:28:b9:cf:42:85:f0:60:c8:d3:65:ea:0e:90:df:
95:ea:f0:20:7f:11:c9:3e:45:a2:9d:9a:25:7b:f1:38:12:82:
d1:34:60:6c:1f:e5:b3:ff:75:70:3e:12:e7:2d:49:f4:e7:2e:
56:47:03:07:dc:b7:91:8e:0b:bb:bb:60:1c:a9:45:98:bf:24:
ca:a1:b1:74:8d:72:7b:0b:16:7c:fa:86:9d:1c:83:01:9a:f8:
07:5a:49:b6:52:2c:43:ed:cd:25:45:8b:bd:b3:a0:a4:3d:e9:
bb:3f:e8:cd:2b:8b:75:8d:bd:17:aa:30:31:41:f7:6a:8a:12:
3b:d2:26:38:d9:33:78:00:a7:9f:40:a1:ea:ff:c1:ab:a5:57:
b6:26:58:c1:3c:09:cf:f8:42:e0:43:5d:bc:12:69:e3:8c:84:
fa:b2:07:02:92:cf:c7:66:33:55:ac:d9:0d:43:af:dd:7d:c9:
93:91:e4:14:33:a0:e0:bf:9b:99:7d:b9:39:51:15:5e:d5:e4:
00:4e:19:e3:39:86:ca:5a:93:14:02:48:93:9b:27:6a:5d:59:
af:b2:30:9e:26:5a:1d:41:ed:e0:1d:7b:15:29:b8:f9:68:b9:
5e:d2:01:4f:5d:71:b9:12:28:19:01:be:1f:77:09:28:8b:02:
86:65:4a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:27:13 2025 by rpki-client