Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/1-KKzJUCNPPXvfs50dce1cbfiWMY.roa
File: 1-KKzJUCNPPXvfs50dce1cbfiWMY.roa (raw, json)
Hash identifier: jVGyXLe98f2aA3WGzwFHo9btWoP5lEFJLj3g4uMkn5w=
Subject key identifier: F8:A2:B3:25:40:8D:3C:F5:EF:7E:CE:74:75:C7:B5:71:B7:E2:58:C6
Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414
Certificate serial: 019982D553CCA355A418BC8F287A60C9A773
Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/1-KKzJUCNPPXvfs50dce1cbfiWMY.roa
Signing time: Thu 25 Sep 2025 21:44:02 +0000
ROA not before: Thu 25 Sep 2025 21:44:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51765
IP address blocks: 77.243.88.0/22 maxlen: 24
83.143.106.0/24 maxlen: 24
178.20.215.0/24 maxlen: 24
185.101.20.0/23 maxlen: 24
194.26.129.0/24 maxlen: 24
194.104.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Oct 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:82:d5:53:cc:a3:55:a4:18:bc:8f:28:7a:60:c9:a7:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414
Validity
Not Before: Sep 25 21:44:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8a2b325408d3cf5ef7ece7475c7b571b7e258c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e2:10:19:30:fb:f1:06:3e:2e:20:a5:f5:fb:
6e:b3:08:6f:72:28:5e:c8:8d:4f:e0:27:f9:6a:06:
48:e6:21:03:ef:7d:25:e2:7f:97:d5:8d:ed:df:ac:
90:f0:08:ea:0a:2d:f8:da:59:a0:6f:6d:68:03:20:
11:e1:d1:17:90:2d:c5:cd:64:67:0a:35:12:ad:c7:
48:57:d3:e6:45:a0:82:fb:cd:74:4e:70:3d:37:46:
88:28:c7:63:20:a8:c0:51:be:18:83:82:12:c1:04:
0f:0c:34:3c:f2:7f:bd:b5:8e:e6:5a:f8:41:13:51:
fc:bd:a0:95:a5:d5:fd:ce:15:2e:31:77:41:1a:59:
dc:7e:60:3a:02:ec:bf:e5:28:46:fa:37:b9:be:3f:
2e:0b:11:f2:4e:1b:81:f5:35:d5:98:8d:4b:55:a6:
7b:84:fb:06:2d:20:14:e7:53:df:07:a1:b7:01:36:
93:6e:68:ad:bd:58:0d:3a:b3:9c:05:2c:36:6c:97:
37:0e:29:bb:f2:c6:a2:e1:17:f0:26:0d:65:8d:a7:
09:2d:c7:a6:a9:f1:6e:c5:8b:3c:26:ad:d1:73:0e:
20:30:d6:0d:45:70:19:ce:fa:c4:5f:cb:2f:da:ec:
e9:90:6a:db:c5:dc:e4:3a:18:b6:8c:11:da:12:3f:
b2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A2:B3:25:40:8D:3C:F5:EF:7E:CE:74:75:C7:B5:71:B7:E2:58:C6
X509v3 Authority Key Identifier:
keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/1-KKzJUCNPPXvfs50dce1cbfiWMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.243.88.0/22
83.143.106.0/24
178.20.215.0/24
185.101.20.0/23
194.26.129.0/24
194.104.128.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:ad:09:b4:14:96:03:05:17:c8:2a:31:0e:a0:a3:60:eb:57:
a8:24:ee:53:99:8e:5d:0f:44:28:43:6a:db:cd:4c:ad:a0:03:
0f:c4:0d:5c:9c:0f:5b:76:cf:58:b0:39:4b:bf:e5:90:0f:63:
44:38:2f:21:10:8c:54:5d:ba:2d:5f:43:6a:22:4b:17:96:14:
c9:4d:dd:06:57:92:fe:f8:60:b8:6d:2b:23:76:45:91:16:07:
ed:61:c6:43:84:1e:d1:88:2a:74:04:a1:fb:37:e9:f0:87:14:
48:ab:44:e1:3e:b2:f4:46:88:e3:b9:1f:ea:a7:37:97:38:6d:
c6:91:30:a6:e6:dc:c9:6f:85:ed:12:61:8f:3d:32:d8:87:61:
26:bf:f2:e7:07:a1:fc:d8:98:94:94:b6:44:1e:a8:30:b3:ca:
9c:18:0a:9c:7c:32:ea:8c:e7:db:9f:db:cb:2c:74:da:4e:ca:
86:eb:e2:88:e6:65:73:25:58:57:61:31:71:8b:ea:da:a3:67:
32:02:23:2c:98:9c:26:cb:4f:a7:84:80:96:21:fd:80:df:99:
55:01:83:d9:3b:46:98:c0:f8:74:4b:cd:c5:15:52:0d:9c:e9:
73:6d:fd:e5:22:01:c0:75:27:89:5f:e0:92:63:78:62:fa:fd:
99:ca:49:b7
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgISAZmC1VPMo1WkGLyPKHpgyadzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NGUyNzI5YjE3MzY5ODkwYTE1MTJmNjQzY2QwOGU0YmEy
ZmY0MTQwHhcNMjUwOTI1MjE0NDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGEyYjMyNTQwOGQzY2Y1ZWY3ZWNlNzQ3NWM3YjU3MWI3ZTI1OGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eIQGTD78QY+LiCl9ftuswhvcihe
yI1P4Cf5agZI5iED730l4n+X1Y3t36yQ8AjqCi342lmgb21oAyAR4dEXkC3FzWRn
CjUSrcdIV9PmRaCC+810TnA9N0aIKMdjIKjAUb4Yg4ISwQQPDDQ88n+9tY7mWvhB
E1H8vaCVpdX9zhUuMXdBGlncfmA6Auy/5ShG+je5vj8uCxHyThuB9TXVmI1LVaZ7
hPsGLSAU51PfB6G3ATaTbmitvVgNOrOcBSw2bJc3Dim78sai4RfwJg1ljacJLcem
qfFuxYs8Jq3Rcw4gMNYNRXAZzvrEX8sv2uzpkGrbxdzkOhi2jBHaEj+yXwIDAQAB
o4ICKDCCAiQwHQYDVR0OBBYEFPiisyVAjTz1737OdHXHtXG34ljGMB8GA1UdIwQY
MBaAFDdOJymxc2mJChUS9kPNCOS6L/QUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYt
Y2ZjNDZhNzZlYzc4LzEvMS1LS3pKVUNOUFBYdmZzNTBkY2UxY2JmaVdNWS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNTgvOTUyMjMwLWMyNjItNDFjYy1iOTU2LWNmYzQ2YTc2ZWM3
OC8xL04wNG5LYkZ6YVlrS0ZSTDJRODBJNUxvdjlCUS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjA9BggrBgEFBQcBBwEB/wQuMCwwKgQCAAEwJAMEAk3zWAME
AFOPagMEALIU1wMEAbllFAMEAMIagQMEAMJogDANBgkqhkiG9w0BAQsFAAOCAQEA
C60JtBSWAwUXyCoxDqCjYOtXqCTuU5mOXQ9EKENq281MraADD8QNXJwPW3bPWLA5
S7/lkA9jRDgvIRCMVF26LV9DaiJLF5YUyU3dBleS/vhguG0rI3ZFkRYH7WHGQ4Qe
0YgqdASh+zfp8IcUSKtE4T6y9EaI47kf6qc3lzhtxpEwpubcyW+F7RJhjz0y2Idh
Jr/y5weh/NiYlJS2RB6oMLPKnBgKnHwy6ozn25/byyx02k7KhuviiOZlcyVYV2Ex
cYvq2qNnMgIjLJicJstPp4SAliH9gN+ZVQGD2TtGmMD4dEvNxRVSDZzpc2395SIB
wHUniV/gkmN4Yvr9mcpJtw==
-----END CERTIFICATE-----
Generated at Sat Oct 11 10:36:42 2025 by rpki-client