Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/K03TI5nYUitEhr3tDnZaspm3S48.roa
File: K03TI5nYUitEhr3tDnZaspm3S48.roa (raw, json)
Hash identifier: 0GhwyXOcDmriRSuXnm9/II1OmPaoLu8Djc5b090uRNw=
Subject key identifier: 2B:4D:D3:23:99:D8:52:2B:44:86:BD:ED:0E:76:5A:B2:99:B7:4B:8F
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 0197E633DF5095D31B32910A9A15976366BE
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/K03TI5nYUitEhr3tDnZaspm3S48.roa
Signing time: Mon 07 Jul 2025 18:44:08 +0000
ROA not before: Mon 07 Jul 2025 18:44:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216246
IP address blocks: 178.159.94.0/24 maxlen: 24
185.221.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e6:33:df:50:95:d3:1b:32:91:0a:9a:15:97:63:66:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Jul 7 18:44:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b4dd32399d8522b4486bded0e765ab299b74b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7c:82:70:a7:3c:f2:33:60:32:61:5e:10:b1:
27:27:34:85:2b:89:76:eb:19:0d:b2:dd:26:96:ca:
be:91:0c:b0:18:ed:b4:68:10:8c:9d:f3:a5:fe:d1:
8b:b4:f7:fd:cb:12:9a:4a:21:21:01:00:ab:8d:a9:
1c:c4:b0:41:c4:10:49:59:ab:03:dd:b8:ae:27:32:
a5:bb:52:07:23:29:50:46:0f:c0:10:7d:39:3c:19:
21:9a:53:32:db:b5:e3:52:34:2e:36:08:ca:75:a9:
b7:21:5e:5b:44:40:5c:d6:6b:28:ed:53:8d:6d:6c:
37:db:e3:d4:8b:1a:39:76:b8:1a:82:a5:bf:78:fa:
96:bd:31:a0:51:49:b2:88:b6:9a:5d:46:44:61:05:
26:a4:fd:a5:20:c0:85:52:bd:e2:d7:93:33:94:9f:
27:94:3d:a8:77:16:ae:31:0a:61:bd:ab:f6:81:37:
f6:c9:c3:e4:87:a1:d4:82:b8:0b:66:2b:9a:74:18:
74:fc:54:1c:b0:78:38:4a:4d:3b:50:d6:66:07:e5:
49:84:c7:2f:0b:e2:80:bc:cf:b5:02:40:f4:3b:50:
5b:e6:33:d4:33:7a:f4:0e:4b:23:cf:f4:8d:f5:c6:
9f:57:ae:39:ff:2b:8e:7c:e7:d0:f5:8c:d1:95:f1:
e9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4D:D3:23:99:D8:52:2B:44:86:BD:ED:0E:76:5A:B2:99:B7:4B:8F
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/K03TI5nYUitEhr3tDnZaspm3S48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.159.94.0/24
185.221.199.0/24
Signature Algorithm: sha256WithRSAEncryption
97:9a:bf:bb:60:27:bd:01:90:c0:81:fc:74:83:bc:e9:6d:0a:
f6:2e:c6:04:94:46:96:b6:19:88:f1:22:e3:55:9b:bc:6f:0a:
64:62:3e:74:86:eb:b1:aa:2f:f9:60:b9:1f:c6:f5:10:2b:f5:
19:91:9b:47:0f:c4:74:a4:5f:1c:2c:b6:f3:8f:9c:b3:d3:d0:
37:cc:15:97:fc:c9:e0:84:32:61:39:7a:87:5a:ce:58:01:52:
3b:f4:16:20:b3:77:96:79:91:07:8f:92:82:8f:90:9d:45:e0:
13:33:bf:f9:97:af:bd:55:1e:2b:ed:40:e2:b2:38:01:91:ca:
eb:9a:c2:86:79:5a:35:8f:49:51:c7:23:96:4d:11:07:38:19:
a4:08:24:2f:d8:5a:db:d1:e2:8e:02:bd:9c:69:1d:ef:7c:57:
7b:d1:43:9d:28:b8:ff:ad:57:ec:e2:3f:0d:04:39:46:35:73:
4c:c8:d6:0f:8f:f6:87:04:4d:e8:d7:e0:61:cb:ac:b1:19:57:
6e:42:12:06:8d:05:f1:94:f9:35:f9:7f:70:a8:1a:97:19:23:
be:42:ba:01:1c:28:a9:b4:ef:40:46:36:68:d1:eb:3f:bf:9f:
b8:37:4f:18:80:7d:31:16:07:b0:2c:3a:dd:e6:92:34:e7:30:
1e:bc:2a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 20:51:56 2025 by rpki-client