Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/Kg2E44WbCS4yTdLjrBUGsaS33HY.roa
File: Kg2E44WbCS4yTdLjrBUGsaS33HY.roa (raw, json)
Hash identifier: aRXCQBjOK2Xnaq6p1kUfl1+5mTae9HIybqh0Ip+XXpU=
Subject key identifier: 2A:0D:84:E3:85:9B:09:2E:32:4D:D2:E3:AC:15:06:B1:A4:B7:DC:76
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 0198936CDDC8EB12C4AA119A0DB079CA1B35
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/Kg2E44WbCS4yTdLjrBUGsaS33HY.roa
Signing time: Sun 10 Aug 2025 10:00:42 +0000
ROA not before: Sun 10 Aug 2025 10:00:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205896
IP address blocks: 93.88.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:6c:dd:c8:eb:12:c4:aa:11:9a:0d:b0:79:ca:1b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Aug 10 10:00:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a0d84e3859b092e324dd2e3ac1506b1a4b7dc76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:33:56:70:c0:b3:d2:70:fc:df:6e:f1:60:85:
be:32:e8:b7:19:5a:0d:ea:05:4f:cb:71:7e:48:dc:
3e:9f:c1:b3:93:b6:03:5a:7a:35:a1:9b:32:21:97:
13:df:00:15:ad:8e:ae:ec:b3:3c:01:eb:55:11:73:
f9:7d:91:1c:22:74:94:16:0a:c1:72:1a:60:30:1b:
98:67:de:b8:a3:d7:0c:8c:a0:b2:b7:ee:b3:f1:37:
dd:1c:b2:bc:81:db:6e:ed:2a:07:df:09:fc:71:14:
52:9c:fa:55:d4:d9:66:34:b8:55:33:2a:e9:80:e6:
69:c9:45:5c:0a:54:3c:24:06:5e:81:1f:4f:20:a8:
63:68:70:ef:3b:7a:bb:b5:32:fa:96:28:41:6d:b4:
eb:a0:e3:84:b7:b4:ed:d4:e8:02:fa:76:bc:2e:14:
f5:af:e8:5b:21:50:6a:f2:9a:31:e7:86:9b:56:9c:
a8:55:e5:df:d4:68:d9:7f:72:be:0c:79:9e:17:b2:
6d:3a:16:7b:f4:ed:f1:30:76:99:10:62:62:1e:09:
39:ac:13:3c:d4:20:ea:8e:77:6a:39:8b:05:d7:d9:
89:ff:b5:38:29:46:6e:e8:18:cf:eb:ef:24:00:95:
fc:2f:f2:7c:5e:9f:4d:ec:ef:8f:52:a4:3e:4f:86:
e9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:0D:84:E3:85:9B:09:2E:32:4D:D2:E3:AC:15:06:B1:A4:B7:DC:76
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/Kg2E44WbCS4yTdLjrBUGsaS33HY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.158.0/24
Signature Algorithm: sha256WithRSAEncryption
00:1c:7d:38:95:55:58:4d:1b:ee:90:e3:6e:34:5f:ca:00:30:
9a:09:9e:1a:2e:26:95:c3:ce:57:24:86:1f:08:b5:35:95:0a:
b2:e6:c5:4f:f3:d7:45:fc:0d:99:63:74:a3:66:e2:f8:a5:c7:
e3:5a:16:5a:ac:86:37:19:b2:1e:e2:52:82:57:0f:d5:30:3f:
3e:cd:dd:60:51:3d:e6:66:d2:d4:cc:eb:76:11:af:e9:7f:67:
80:5f:7e:ec:23:d8:16:6c:77:3f:24:b5:01:41:f4:6d:75:26:
6d:6d:3a:ad:72:38:b5:d0:d2:0f:53:21:7e:89:de:69:b5:97:
dd:ce:a9:07:d3:41:22:b5:7b:b8:9e:12:0b:70:1b:29:2e:83:
80:a3:fe:f2:37:60:46:0f:16:b8:22:a3:7c:06:3b:79:e5:5e:
b4:fa:46:c9:77:6f:b8:a4:4a:36:c1:fc:0c:39:09:e3:64:7e:
d8:e5:ec:1b:a3:4c:cf:c0:27:9c:40:c5:e8:00:e1:be:90:f6:
0f:f0:df:5c:f4:56:b4:cc:72:c7:47:aa:df:17:e6:96:f1:59:
a5:0b:88:f8:80:a4:9d:86:22:f3:48:c3:63:66:78:19:50:b4:
40:6b:ea:03:3f:52:32:fa:7e:8b:25:45:a6:f4:be:0a:1c:74:
b5:d2:4f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:34:20 2025 by rpki-client