Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/kSYUKc4rBAz8MfIEJ_WMzjzhFA8.roa
File: kSYUKc4rBAz8MfIEJ_WMzjzhFA8.roa (raw, json)
Hash identifier: irH9QeqTuF37osVFPeokf05FXw+yoOdv4lX5HDy0GLE=
Subject key identifier: 91:26:14:29:CE:2B:04:0C:FC:31:F2:04:27:F5:8C:CE:3C:E1:14:0F
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 0199D4446E6F4499BC20155E57B244C04D00
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/kSYUKc4rBAz8MfIEJ_WMzjzhFA8.roa
Signing time: Sat 11 Oct 2025 17:14:38 +0000
ROA not before: Sat 11 Oct 2025 17:14:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 262287
IP address blocks: 149.126.12.0/24 maxlen: 24
2a0a:8f40:4::/48 maxlen: 48
2a0a:8f40:5::/48 maxlen: 48
2a0a:8f40:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d4:44:6e:6f:44:99:bc:20:15:5e:57:b2:44:c0:4d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Oct 11 17:14:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91261429ce2b040cfc31f20427f58cce3ce1140f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:08:bb:29:50:e0:c1:b5:5d:1a:62:94:60:8b:
d9:b5:ca:d9:a6:7a:4d:0d:6d:db:14:cd:9f:ae:ca:
9e:a8:08:23:ee:6e:ef:e5:11:8c:55:05:76:07:34:
5a:4c:aa:25:0c:29:a5:ba:16:f2:52:e7:39:f2:eb:
fd:6a:a2:17:5b:f7:90:f2:67:e3:a6:94:c6:94:f2:
66:fe:1a:9b:3a:e5:0f:ce:5b:a1:80:3c:d1:c4:5d:
87:3a:60:71:78:5d:48:e8:1f:ba:0f:e0:df:32:fd:
92:18:07:e4:2a:23:7c:9c:43:16:99:7c:55:93:f3:
65:06:e4:08:c8:16:e0:3c:20:dc:28:4d:14:3b:d2:
35:99:f4:80:0c:5f:44:25:6c:78:06:10:82:be:bc:
e0:7a:f7:d3:b8:d6:23:14:8b:a2:41:41:1f:d9:88:
63:a9:de:fb:e8:79:0d:df:ef:f5:a9:09:bf:8a:0f:
37:c7:6f:49:f5:eb:3e:88:10:a1:02:1f:d2:fe:a6:
a5:42:79:b9:34:02:92:69:83:1d:31:56:bd:7a:46:
8e:e3:a4:47:f2:70:3f:3f:8d:3e:45:da:16:06:c4:
e3:34:0f:c9:2d:8c:43:d1:50:73:56:18:20:30:35:
8c:90:bb:56:32:f7:d0:9f:09:30:00:36:42:1e:e1:
16:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:26:14:29:CE:2B:04:0C:FC:31:F2:04:27:F5:8C:CE:3C:E1:14:0F
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/kSYUKc4rBAz8MfIEJ_WMzjzhFA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.126.12.0/24
IPv6:
2a0a:8f40:4::-2a0a:8f40:6:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
91:d0:79:f0:00:94:cc:d1:eb:bb:3d:40:95:57:95:e6:a2:cf:
fe:9e:6c:14:7e:2b:96:30:75:f3:f0:f2:5d:aa:6c:57:8f:69:
75:aa:fa:df:b5:8e:38:7f:50:9f:d8:a5:85:c3:f3:33:fd:cd:
1f:97:ac:25:7b:33:ea:a5:db:61:f7:3b:49:51:11:0a:db:7b:
a1:d9:11:07:9a:30:27:94:bc:c9:4f:44:34:25:65:0f:ff:76:
3d:d0:ff:88:e9:a5:4a:94:39:31:be:2d:40:cc:c0:90:fb:0f:
35:af:e7:f8:5b:b7:e2:8e:bb:b6:ed:dd:b9:f0:df:c3:7e:b0:
ae:f5:10:34:73:6b:4d:fa:e6:05:47:48:07:53:af:d1:e7:0e:
88:53:fd:ed:2e:77:84:d1:5f:b0:82:dc:eb:8f:15:c3:f1:a4:
9c:2f:ca:61:3b:2c:4c:60:a3:34:62:21:d9:26:bc:1d:39:a9:
b3:36:5e:3e:06:f7:ba:f1:c5:1a:4c:e8:1a:67:04:a7:72:69:
a1:46:46:2e:35:6c:16:11:29:e4:27:1e:fb:99:dd:10:1a:b9:
62:5b:a5:61:a2:bb:c6:71:af:4e:d0:76:dd:09:f5:6d:d5:a3:
da:3a:ac:95:e6:37:11:ab:9e:1d:dd:9a:f9:91:f7:0b:23:7f:
fe:1e:29:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:08:55 2025 by rpki-client