Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/kP1MLzfrQwWk1GVdDlBjhCK5JJM.roa
File: kP1MLzfrQwWk1GVdDlBjhCK5JJM.roa (raw, json)
Hash identifier: +NDOnTtKyng4Xa7G5fvhPU29tORd7PYP5BmWYtRjBxk=
Subject key identifier: 90:FD:4C:2F:37:EB:43:05:A4:D4:65:5D:0E:50:63:84:22:B9:24:93
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 01981E38F59C29CB52A28EC70071EA83D088
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/kP1MLzfrQwWk1GVdDlBjhCK5JJM.roa
Signing time: Fri 18 Jul 2025 15:48:25 +0000
ROA not before: Fri 18 Jul 2025 15:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31898
IP address blocks: 185.83.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1e:38:f5:9c:29:cb:52:a2:8e:c7:00:71:ea:83:d0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Jul 18 15:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90fd4c2f37eb4305a4d4655d0e50638422b92493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:98:af:c8:56:7e:11:d4:71:46:69:bd:65:17:
99:c9:b8:f8:69:03:12:77:24:4c:e0:08:26:69:9a:
6e:6d:31:51:89:24:36:9c:e5:7e:b6:27:63:cb:fc:
61:d4:a2:3d:3a:f5:b1:a4:08:f5:32:23:25:b7:68:
46:f0:5c:2e:1f:fc:38:7a:96:a0:fa:47:67:8a:46:
64:86:c5:a0:ac:23:11:4e:fb:7f:e2:eb:13:02:1e:
28:f9:fb:0f:b4:fe:8f:bb:50:44:ae:dc:68:2b:37:
35:dd:0b:f5:11:a5:92:e0:50:38:41:c5:32:b2:c6:
de:6c:d7:62:4b:52:3d:fc:72:af:c2:38:d3:39:78:
7a:10:56:82:25:48:b2:59:0e:92:8e:84:db:7e:08:
a6:64:74:1c:c8:05:65:49:dd:82:78:b2:05:4c:b5:
f2:e5:b8:00:11:72:f8:4a:8f:e5:30:bb:b0:67:2d:
0e:2d:85:45:d2:16:d0:97:1c:9d:db:1f:58:dd:54:
95:b7:8a:42:10:7e:6a:17:4d:41:ad:c7:f5:d6:2e:
34:86:3c:f1:16:0b:e8:72:1e:f1:c2:ca:97:eb:6b:
a8:42:99:ac:5d:a9:ae:31:13:c0:60:a1:33:43:89:
7a:44:34:e0:5b:08:f7:da:c9:17:1a:6b:9f:8b:12:
eb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FD:4C:2F:37:EB:43:05:A4:D4:65:5D:0E:50:63:84:22:B9:24:93
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/kP1MLzfrQwWk1GVdDlBjhCK5JJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.202.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:92:f1:b4:47:da:5e:a8:86:b6:4a:2c:45:c1:17:fa:19:f4:
9a:90:4f:bd:db:2a:e0:21:f1:82:8d:c5:cf:77:c6:a1:89:f1:
6e:9e:4a:ca:fa:e5:70:ab:65:10:7c:0c:ed:05:f8:6a:b7:43:
d7:f8:8b:1e:bc:20:3a:9e:7a:dc:18:78:c0:5e:82:1f:68:3a:
0b:cb:f9:8d:d5:4a:23:ff:62:af:30:4d:6e:da:f1:1e:ba:3c:
26:ce:db:10:81:83:18:85:9a:46:f1:cb:29:30:db:37:f7:df:
0b:52:9b:5b:b5:1c:24:22:34:62:c2:67:e1:06:59:45:4e:c5:
c6:a9:9f:86:42:4f:67:9c:74:d8:74:1b:29:0b:4b:db:7a:46:
ce:b8:ae:4c:95:a1:34:c8:27:24:91:08:7c:55:92:95:45:c3:
70:46:77:7a:58:4d:94:6c:db:20:22:b1:0f:c4:4e:02:5c:55:
75:33:27:82:85:19:65:64:80:07:fd:7f:81:08:89:e2:75:87:
35:96:bf:ed:5f:e2:f9:9b:62:a5:72:44:43:1c:1b:6c:07:c5:
7b:6a:21:b0:4a:c0:bd:3c:ce:ae:48:90:97:cb:7d:25:24:18:
9d:22:23:e0:5b:9e:23:18:04:a2:7d:69:53:1d:d6:23:67:41:
df:2f:0d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:21:21 2025 by rpki-client