Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/KRRgEY5J9boMUrndIUmlvBcTLR4.roa
File: KRRgEY5J9boMUrndIUmlvBcTLR4.roa (raw, json)
Hash identifier: CW0uh8nglOoc+DPgscZ1+3WHF3OZPNatiXZrr6ZGP7A=
Subject key identifier: 29:14:60:11:8E:49:F5:BA:0C:52:B9:DD:21:49:A5:BC:17:13:2D:1E
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 0197FDC09FB3B77FCDA257952206F5F26BC1
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/KRRgEY5J9boMUrndIUmlvBcTLR4.roa
Signing time: Sat 12 Jul 2025 08:29:08 +0000
ROA not before: Sat 12 Jul 2025 08:29:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 109.122.20.0/24 maxlen: 24
109.122.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:fd:c0:9f:b3:b7:7f:cd:a2:57:95:22:06:f5:f2:6b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Jul 12 08:29:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=291460118e49f5ba0c52b9dd2149a5bc17132d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1f:11:51:4d:0e:22:19:4c:ab:40:37:9a:da:
a0:3a:aa:e9:f9:b7:e1:a7:66:48:d6:c4:b6:a7:2c:
ed:d8:e7:64:4f:37:22:3c:67:97:4a:0c:fb:1c:da:
fb:a6:79:a6:28:67:ec:26:e9:24:5e:91:a9:2d:77:
1c:01:ef:5f:65:f0:e8:b1:e1:1a:ee:c1:f1:01:40:
2a:ee:2c:7f:80:a2:19:16:77:62:48:fd:f4:7f:31:
a6:ad:d5:51:da:cd:37:98:f4:eb:e2:cf:c6:ff:22:
e5:45:be:e2:f2:48:4a:a6:52:f5:6e:f7:cf:88:15:
57:e7:f7:95:b2:e4:8b:b1:a2:39:01:0d:c8:fc:b1:
a0:67:49:70:5b:95:43:ca:7b:fb:1e:84:d3:f8:75:
a5:f6:7d:8b:7f:a1:73:44:41:ba:ad:7f:5d:86:cc:
7e:c8:91:0a:d8:92:f4:13:42:85:30:6b:87:3d:da:
71:7e:58:37:e3:88:70:d9:4b:ad:98:d4:0e:82:e2:
ea:61:b3:f3:5f:b5:ba:29:59:2f:4e:b4:7f:d1:34:
4c:58:cd:bd:7f:07:d4:61:4c:2c:0a:bf:8a:9d:13:
fb:dd:ce:76:0d:b6:4a:2f:39:98:04:17:df:c0:95:
71:2b:a2:c8:eb:be:80:6d:bd:0f:ad:43:2b:80:8f:
ba:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:14:60:11:8E:49:F5:BA:0C:52:B9:DD:21:49:A5:BC:17:13:2D:1E
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/KRRgEY5J9boMUrndIUmlvBcTLR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.20.0/24
109.122.26.0/24
Signature Algorithm: sha256WithRSAEncryption
30:3c:68:98:77:ef:cb:57:03:58:37:0a:39:22:97:3b:12:e2:
47:41:00:3c:7a:7b:d3:3e:e9:8e:10:86:fb:47:9a:73:8c:3f:
61:8f:cc:5f:57:16:7d:7b:2a:ad:65:25:e1:f6:7b:00:73:8f:
d2:cd:58:cf:f7:c6:3a:f4:77:95:58:32:a1:a5:4a:74:76:d2:
fa:c8:98:09:6b:d7:7c:4d:7b:5b:b7:0b:5b:bf:b0:81:6c:19:
9a:a0:7c:f5:bf:35:1b:0a:e9:d9:8f:db:42:0e:ff:46:a0:76:
f2:b5:2e:3a:c4:58:8e:6f:d8:c7:eb:16:25:fa:9a:52:9d:75:
fe:63:ea:98:f7:d2:51:2d:a2:c0:f8:1d:a7:08:27:cf:ce:fe:
3b:e2:d9:e0:21:87:9f:e3:ee:97:7b:ba:79:69:0a:f8:5f:91:
e4:0e:26:40:bc:4b:fa:e5:93:5d:e9:42:24:59:41:99:c9:7e:
b3:db:f9:ef:e4:ab:50:a5:0e:7d:ee:84:b4:00:03:93:ca:e2:
e0:01:9a:d6:0f:e8:f4:21:93:4c:5a:24:cd:ec:ff:ad:d6:a9:
bb:f9:2d:21:eb:b7:1d:91:5f:5e:71:b6:71:01:ff:6b:04:6e:
47:c3:fc:cd:16:e6:67:da:43:2c:83:53:4e:83:39:48:03:52:
4d:9d:c1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 03:08:18 2025 by rpki-client