Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/kvd87x8t1PGUep5eUwNbvYfj-AA.roa
File: kvd87x8t1PGUep5eUwNbvYfj-AA.roa (raw, json)
Hash identifier: Kt5G8onkZV1CMoFulV/VV3/ApunjUuQ11gDnhV8epFw=
Subject key identifier: 92:F7:7C:EF:1F:2D:D4:F1:94:7A:9E:5E:53:03:5B:BD:87:E3:F8:00
Certificate issuer: /CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1
Certificate serial: 0197B29695B76955086160E2F4B00F3069AA
Authority key identifier: 17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/kvd87x8t1PGUep5eUwNbvYfj-AA.roa
Signing time: Fri 27 Jun 2025 18:11:42 +0000
ROA not before: Fri 27 Jun 2025 18:11:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26380
IP address blocks: 92.43.40.0/24 maxlen: 24
92.43.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 00:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b2:96:95:b7:69:55:08:61:60:e2:f4:b0:0f:30:69:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1
Validity
Not Before: Jun 27 18:11:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92f77cef1f2dd4f1947a9e5e53035bbd87e3f800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3f:2a:fa:5f:4e:f6:99:42:0f:f2:9a:76:4b:
97:65:3f:0e:d6:c1:67:d2:31:1d:7d:b7:9a:2c:85:
14:99:02:ce:9f:73:38:80:36:af:7d:48:8b:7d:a8:
48:06:34:3a:d7:f4:3f:f6:68:9e:d6:e4:12:88:1c:
44:fa:3e:2c:0f:8a:4c:9e:9b:5a:37:4e:e1:c7:8c:
cd:0e:10:5d:a8:9c:1a:de:2f:2f:8b:ed:cf:37:54:
70:47:c6:f6:dd:21:fd:29:27:0d:29:e8:1a:66:ca:
ae:5e:80:12:8c:c7:15:c8:be:34:1c:f3:4d:25:d7:
83:f7:41:bb:21:11:9c:a3:ee:68:8b:d3:b7:3f:a6:
b9:ef:25:42:eb:8a:7e:f3:d0:0e:10:8f:21:58:b0:
d5:96:80:d3:f1:bf:45:93:6e:94:33:2a:9a:d3:b1:
96:63:c3:4e:81:79:ef:c3:c4:11:ef:dc:4a:de:0b:
9f:55:ee:b0:ba:0e:3c:2e:ab:e7:95:0c:13:f5:14:
1a:40:d4:60:6e:92:34:3f:5c:a0:bb:54:a7:c5:9f:
74:39:71:6f:43:e5:68:3d:ef:27:33:5b:0f:19:2e:
8d:2c:59:7c:8a:cf:87:1b:4f:21:eb:6a:e8:95:8e:
b6:69:1f:6a:97:e3:4c:5c:f0:22:4c:63:ad:6b:f7:
79:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F7:7C:EF:1F:2D:D4:F1:94:7A:9E:5E:53:03:5B:BD:87:E3:F8:00
X509v3 Authority Key Identifier:
keyid:17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/kvd87x8t1PGUep5eUwNbvYfj-AA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.43.40.0/23
Signature Algorithm: sha256WithRSAEncryption
69:98:e1:f2:74:19:bb:8e:25:43:43:7c:79:c0:8b:e5:38:06:
19:ac:8a:64:26:fb:00:fb:48:b9:4b:b8:63:c7:80:a4:a9:1c:
78:44:f9:af:f0:77:da:74:e9:16:b8:e1:a2:70:9d:be:39:3a:
5a:9d:3c:8c:bf:13:c0:2c:3a:d2:8e:df:48:4f:55:e1:ce:7b:
a2:4b:11:c2:2f:6e:2a:cc:48:e7:08:90:55:17:b3:90:99:02:
4d:bc:cd:d2:74:fe:1a:e0:a7:cc:7a:c5:6d:50:65:d2:21:d5:
27:21:3f:c5:60:b1:f2:8f:57:e1:82:8f:ef:5a:34:ac:6e:e4:
b1:94:7d:ae:a5:52:43:0d:b0:43:b3:2e:17:3e:05:52:df:c3:
99:8e:99:a1:6f:2e:0e:53:a6:35:ea:38:1a:e6:d3:09:94:88:
6b:a0:28:15:65:a5:37:2b:15:65:8a:58:94:7e:c2:76:83:8f:
b4:6c:bd:42:88:c2:5a:d1:50:93:aa:41:af:a4:05:c8:73:0e:
dd:50:1b:ed:73:ea:0a:46:dc:48:d3:db:5d:f7:cf:9f:78:84:
61:b6:3a:ba:10:b3:13:86:62:5e:bb:69:08:a3:3c:f6:47:b1:
bf:10:0e:91:6a:0f:2e:98:16:e1:5f:5b:2e:40:68:b5:c7:98:
06:74:77:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:40:08 2025 by rpki-client