Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/cko5XG2psMaYdcntaN1HSK0684Q.roa
File: cko5XG2psMaYdcntaN1HSK0684Q.roa (raw, json)
Hash identifier: lkQjevFu2rUCjSzyySmPcpI4TxYE/2LkAr/jbemyCPU=
Subject key identifier: 72:4A:39:5C:6D:A9:B0:C6:98:75:C9:ED:68:DD:47:48:AD:3A:F3:84
Certificate issuer: /CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Certificate serial: 01978409B39AA6E0090B10A4646E607F1478
Authority key identifier: 29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/cko5XG2psMaYdcntaN1HSK0684Q.roa
Signing time: Wed 18 Jun 2025 17:15:17 +0000
ROA not before: Wed 18 Jun 2025 17:15:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215287
IP address blocks: 79.110.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:84:09:b3:9a:a6:e0:09:0b:10:a4:64:6e:60:7f:14:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Validity
Not Before: Jun 18 17:15:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=724a395c6da9b0c69875c9ed68dd4748ad3af384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e1:a9:34:66:8f:a4:6b:0c:1f:b3:0d:58:f8:
c5:14:dc:38:db:2e:ca:dd:92:f1:ae:15:b0:a0:1a:
90:fe:6f:13:f0:75:a4:30:29:d5:14:9c:c6:ac:71:
b5:d7:ab:e5:c2:5d:94:3e:69:e5:0d:89:3c:00:58:
91:2a:c2:7c:be:47:04:0d:cd:9c:c5:20:34:d1:50:
8c:30:83:a8:5f:1f:4d:fc:62:78:0a:be:8a:e4:d0:
a6:71:b3:b7:02:ab:9e:b3:f8:ea:a6:e2:1c:45:67:
0b:3d:6c:00:58:08:b6:e4:ae:82:e7:da:83:e2:60:
4c:f1:76:c3:38:8c:6a:80:1c:17:2c:6a:bc:77:53:
8e:88:60:5e:e9:a4:8f:97:d5:97:2b:72:c4:1b:57:
ab:69:ff:9b:3e:fe:51:05:95:86:6d:01:11:2b:62:
a3:eb:76:8d:28:47:ee:e3:69:df:4d:90:a7:de:78:
27:16:15:88:eb:fe:5e:07:5e:61:23:44:e4:c0:60:
99:07:24:19:ef:c2:af:35:fa:65:06:81:5a:7d:6a:
82:99:76:ac:8c:22:6f:6d:73:fe:d5:cd:a8:02:31:
57:c2:91:43:25:98:cc:19:72:ec:b3:f5:63:02:a1:
b5:0b:8c:cc:91:2c:6a:fb:4b:e9:a5:33:86:31:e3:
26:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4A:39:5C:6D:A9:B0:C6:98:75:C9:ED:68:DD:47:48:AD:3A:F3:84
X509v3 Authority Key Identifier:
keyid:29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/cko5XG2psMaYdcntaN1HSK0684Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.167.0/24
Signature Algorithm: sha256WithRSAEncryption
57:42:6d:87:dc:35:64:29:fa:f6:b1:26:63:58:8b:4b:7a:91:
03:73:f3:04:da:9a:33:eb:c9:f7:07:70:69:30:fe:96:c0:ea:
4f:ea:f1:eb:7c:66:ab:80:2a:1a:f1:73:c8:70:e4:35:0e:5d:
cc:7b:2c:99:91:e1:56:8c:90:e8:a7:cc:88:8d:60:29:58:0d:
81:b3:1e:91:e7:38:25:4b:92:23:15:1f:4d:77:7d:0b:fd:1e:
b2:a8:10:e1:a7:a7:a8:70:65:87:2e:bc:24:46:21:c6:97:de:
8b:53:57:ae:61:34:0d:92:58:7f:c8:8e:11:9c:fb:e1:c4:f8:
65:22:4b:6b:bb:1d:40:8f:99:19:57:e5:e7:a3:31:24:18:97:
2e:ab:ef:fe:10:54:8c:ce:c1:8a:51:4c:52:c6:7f:da:f4:2c:
ee:4e:3c:4d:b7:3a:30:cf:3a:f7:fa:a3:86:95:b2:a1:6e:a7:
42:48:4d:7a:dc:f3:ea:7b:04:ee:09:76:1c:67:d6:42:28:57:
18:79:31:b9:ab:cc:42:80:a3:7a:50:93:88:90:cd:66:da:1b:
01:2c:b6:89:5e:2d:1d:f8:f2:4e:5f:0f:c3:a2:d2:b0:bf:d7:
be:79:0a:61:3c:ef:0a:a1:36:ba:d3:66:5f:a0:33:ed:58:ce:
2f:87:bd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:47:06 2025 by rpki-client