Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/ktlX3SLAF-YNCTgumZIXLbUnbdQ.roa
File: ktlX3SLAF-YNCTgumZIXLbUnbdQ.roa (raw, json)
Hash identifier: zK0y4Hfa+Cd7i8O+iE+DO6cd+9VnESfA1kHZCk8+iwY=
Subject key identifier: 92:D9:57:DD:22:C0:17:E6:0D:09:38:2E:99:92:17:2D:B5:27:6D:D4
Certificate issuer: /CN=ff32d6463621b13f78e530d144feac023e1e4582
Certificate serial: 0198147B29F1944BA029AB090047FCFCCF73
Authority key identifier: FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/ktlX3SLAF-YNCTgumZIXLbUnbdQ.roa
Signing time: Wed 16 Jul 2025 18:24:32 +0000
ROA not before: Wed 16 Jul 2025 18:24:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47216
IP address blocks: 185.84.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:14:7b:29:f1:94:4b:a0:29:ab:09:00:47:fc:fc:cf:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff32d6463621b13f78e530d144feac023e1e4582
Validity
Not Before: Jul 16 18:24:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92d957dd22c017e60d09382e9992172db5276dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a4:85:0e:b3:2c:92:45:ba:a4:34:49:20:a3:
9d:47:0a:5d:20:16:fd:39:93:9e:6b:7e:a6:3a:4e:
e5:6f:ed:7e:cc:a7:cd:4f:78:d1:4b:fd:2e:37:11:
b2:74:4a:01:63:26:18:e4:15:63:20:21:36:e2:60:
7e:23:70:43:28:ec:05:81:58:0c:b6:6d:51:ec:7b:
c9:e5:a9:a4:5c:0b:8f:69:1e:6a:c2:38:8d:89:e4:
53:f0:03:d4:5a:b8:76:2e:f9:f3:9c:de:ac:3f:10:
da:9a:d1:f7:2f:77:cf:00:23:34:14:17:c2:29:91:
80:27:d5:7d:83:7d:81:89:5a:92:25:19:44:9a:da:
4a:fb:72:11:53:dd:2a:27:27:71:35:89:ea:5b:43:
89:4c:f7:62:e5:aa:a6:83:ba:dd:2d:4e:32:5f:d7:
f6:1f:d9:ad:b9:b8:72:bb:8f:de:76:f0:b8:d1:fe:
17:f1:72:60:86:fa:04:ca:25:5e:b2:a5:76:b9:d3:
8c:21:8a:9c:91:d3:92:fc:59:30:66:57:a7:05:76:
ac:44:6d:8f:fd:ac:ff:43:11:4d:8c:58:82:5c:e4:
3e:03:c7:42:aa:e4:63:90:9e:43:8b:80:13:a6:91:
9b:b8:e1:f0:d6:ec:b3:b4:3e:e3:2f:91:49:67:47:
ee:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D9:57:DD:22:C0:17:E6:0D:09:38:2E:99:92:17:2D:B5:27:6D:D4
X509v3 Authority Key Identifier:
keyid:FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/ktlX3SLAF-YNCTgumZIXLbUnbdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.158.0/24
Signature Algorithm: sha256WithRSAEncryption
28:75:08:30:41:98:71:77:89:f2:cc:70:24:bd:34:6c:30:f9:
0c:63:1d:15:2d:bc:c5:a2:cc:e3:b0:2d:d9:15:78:36:d1:e4:
5c:28:f5:79:45:41:b9:a9:e0:5c:be:ed:58:73:58:2e:4d:3d:
cd:09:c1:c7:fe:8a:a4:1e:59:62:ed:61:d8:e6:ed:60:23:c1:
24:36:d1:3d:e1:9f:c7:3d:82:50:6e:23:48:7e:f9:14:fe:1d:
61:5a:97:58:c6:8f:1b:ed:5d:bc:06:6c:0d:e4:66:9c:00:09:
2b:78:d1:58:9c:97:ac:f2:e8:07:cb:1f:be:19:0a:09:2f:9f:
88:f1:e1:c1:fa:70:e5:1a:bc:63:33:cd:6c:f9:03:a8:d3:1a:
c8:11:3d:75:e6:d9:de:8f:7a:f8:1f:2f:20:37:0c:8e:4c:35:
d2:67:fa:86:42:e1:39:76:9e:4d:c5:02:3f:08:7e:dc:0f:3f:
b7:b1:f5:8c:27:df:5b:83:d4:66:b6:05:39:01:10:43:d0:d8:
1d:0b:e4:e9:00:b7:bb:ee:94:8b:db:0a:91:ea:24:ea:09:73:
73:1a:36:16:b0:8b:dc:d3:ba:41:df:83:b4:80:be:c1:ca:66:
3e:19:b7:3f:2d:42:66:31:22:70:1c:f2:86:4c:37:02:1c:49:
82:c8:1f:4c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZgUeynxlEugKasJAEf8/M9zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMzJkNjQ2MzYyMWIxM2Y3OGU1MzBkMTQ0ZmVhYzAyM2Ux
ZTQ1ODIwHhcNMjUwNzE2MTgyNDMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MmQ5NTdkZDIyYzAxN2U2MGQwOTM4MmU5OTkyMTcyZGI1Mjc2ZGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26SFDrMskkW6pDRJIKOdRwpdIBb9
OZOea36mOk7lb+1+zKfNT3jRS/0uNxGydEoBYyYY5BVjICE24mB+I3BDKOwFgVgM
tm1R7HvJ5amkXAuPaR5qwjiNieRT8APUWrh2LvnznN6sPxDamtH3L3fPACM0FBfC
KZGAJ9V9g32BiVqSJRlEmtpK+3IRU90qJydxNYnqW0OJTPdi5aqmg7rdLU4yX9f2
H9mtubhyu4/edvC40f4X8XJghvoEyiVesqV2udOMIYqckdOS/FkwZlenBXasRG2P
/az/QxFNjFiCXOQ+A8dCquRjkJ5Di4ATppGbuOHw1uyztD7jL5FJZ0fuoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJLZV90iwBfmDQk4LpmSFy21J23UMB8GA1UdIwQY
MBaAFP8y1kY2IbE/eOUw0UT+rAI+HkWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3pMV1JqWWhzVDk0NVREUlJQNnNBajRlUllJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9mOTY5MDAtY2YxNy00MWY1LWFlMjgt
MmIwMGVhMzI5MzdiLzEva3RsWDNTTEFGLVlOQ1RndW1aSVhMYlVuYmRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9mOTY5MDAtY2YxNy00MWY1LWFlMjgtMmIwMGVhMzI5Mzdi
LzEvX3pMV1JqWWhzVDk0NVREUlJQNnNBajRlUllJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVSeMA0G
CSqGSIb3DQEBCwUAA4IBAQAodQgwQZhxd4nyzHAkvTRsMPkMYx0VLbzFoszjsC3Z
FXg20eRcKPV5RUG5qeBcvu1Yc1guTT3NCcHH/oqkHlli7WHY5u1gI8EkNtE94Z/H
PYJQbiNIfvkU/h1hWpdYxo8b7V28BmwN5GacAAkreNFYnJes8ugHyx++GQoJL5+I
8eHB+nDlGrxjM81s+QOo0xrIET115tnej3r4Hy8gNwyOTDXSZ/qGQuE5dp5NxQI/
CH7cDz+3sfWMJ99bg9RmtgU5ARBD0NgdC+TpALe77pSL2wqR6iTqCXNzGjYWsIvc
07pB34O0gL7BymY+Gbc/LUJmMSJwHPKGTDcCHEmCyB9M
-----END CERTIFICATE-----
Generated at Wed Jul 23 06:12:02 2025 by rpki-client