Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/k8owzGKR3p8TNUwZfT3WZpwUXDk.roa
File: k8owzGKR3p8TNUwZfT3WZpwUXDk.roa (raw, json)
Hash identifier: zd86eQX/m7nsBnQ7vZC6hU6VP7t3kc+Xq7wQQVQMfCM=
Subject key identifier: 93:CA:30:CC:62:91:DE:9F:13:35:4C:19:7D:3D:D6:66:9C:14:5C:39
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01995E0361D1672002D6CDA6323D73DDB6FC
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/k8owzGKR3p8TNUwZfT3WZpwUXDk.roa
Signing time: Thu 18 Sep 2025 18:08:23 +0000
ROA not before: Thu 18 Sep 2025 18:08:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7459
IP address blocks: 167.17.48.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Oct 2025 08:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5e:03:61:d1:67:20:02:d6:cd:a6:32:3d:73:dd:b6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 18 18:08:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93ca30cc6291de9f13354c197d3dd6669c145c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:4d:9a:26:79:b7:c1:b7:cb:fb:2a:66:05:df:
ec:e1:dd:7c:33:76:51:84:7d:c3:36:6d:9d:81:e2:
3d:af:9e:ba:5f:7d:cc:4f:1b:cd:fb:53:61:79:60:
ee:cf:56:98:ef:d4:4c:7c:75:8c:d7:3b:d7:a9:0c:
30:ba:a8:2d:cd:5c:38:e2:0d:56:2f:48:b2:3c:a0:
27:5b:04:3c:3f:fb:24:7a:65:3f:10:4c:b5:0a:cb:
be:79:f6:6e:8b:0c:3b:30:7d:b9:07:b4:7f:df:e2:
04:f3:1d:96:8d:21:73:a5:7a:c8:e4:55:e8:9f:68:
f8:37:e8:80:20:2a:09:20:86:e0:95:69:97:58:15:
57:4a:d2:60:98:bb:56:a2:5e:fc:31:fc:42:1b:5e:
a4:9f:79:96:c5:41:e4:1e:65:ac:8c:74:b4:60:eb:
37:c2:54:4c:bc:01:bd:f1:22:dd:de:aa:9f:b4:35:
4f:5a:d5:18:b1:60:2a:a5:76:70:5b:77:fc:32:41:
62:cc:a6:78:a1:d1:fb:49:22:04:39:9b:0d:ae:c4:
4a:bb:36:00:1c:7b:19:a7:98:e8:24:e5:c1:9d:c9:
70:db:12:92:12:a8:9b:64:05:b9:1b:27:d0:7a:82:
e9:da:57:d1:f5:af:c6:f7:4e:b1:43:6a:df:de:66:
7f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:CA:30:CC:62:91:DE:9F:13:35:4C:19:7D:3D:D6:66:9C:14:5C:39
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/k8owzGKR3p8TNUwZfT3WZpwUXDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.17.48.0/21
Signature Algorithm: sha256WithRSAEncryption
2f:21:07:7d:2d:ad:37:72:8f:89:94:53:e9:07:f4:a8:ed:e6:
c4:5a:d7:e3:09:1d:d6:78:c9:3e:8d:f8:b4:5b:cc:10:15:ec:
09:b8:ff:3c:2d:ac:45:7a:48:1c:31:40:f8:05:82:92:25:0a:
d7:3f:67:f9:43:ab:4c:c0:de:3c:26:9c:19:57:9d:25:60:34:
aa:7f:e8:05:d1:2e:5a:1c:1f:ff:73:44:c3:c1:ca:88:9f:95:
6f:7e:5f:3b:c0:b3:c5:03:8a:82:e1:aa:c3:68:c8:53:bb:41:
47:a6:b4:e1:cf:df:51:c3:aa:73:9b:81:5b:b4:ea:92:56:5c:
33:5f:e0:07:55:d5:cb:c4:ec:35:77:67:8a:a3:74:f1:21:7b:
e4:7d:8f:72:bf:c9:06:b6:c9:08:94:93:d4:e4:37:19:84:fd:
2b:d4:56:36:56:bb:e0:87:40:ab:39:7c:9d:15:5e:83:5a:a3:
cd:2f:f0:a0:2d:b4:ec:3e:ec:9b:c3:07:2a:a6:e0:ca:b2:d4:
bd:c4:ff:c1:e3:81:22:08:d1:08:c0:b1:9d:eb:a1:da:a4:85:
13:c9:1e:02:a9:ab:21:f0:ea:97:b1:43:50:e6:f2:45:55:9e:
be:fd:f4:5e:6d:6c:e7:de:9b:0f:a8:60:4f:a8:45:53:0a:42:
d6:ad:a2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 15:43:28 2025 by rpki-client