Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/KN3USh-JJW9-jhGDxiVWDhsPPA0.roa
File: KN3USh-JJW9-jhGDxiVWDhsPPA0.roa (raw, json)
Hash identifier: Xi9JL3Kg6iH7DV1CRgQBlVdsSYD/fpvtM7GyTmDdH4Q=
Subject key identifier: 28:DD:D4:4A:1F:89:25:6F:7E:8E:11:83:C6:25:56:0E:1B:0F:3C:0D
Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520
Certificate serial: 0199A0A7E8B58DCF8FCBC54512C5CA68F831
Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/KN3USh-JJW9-jhGDxiVWDhsPPA0.roa
Signing time: Wed 01 Oct 2025 16:43:02 +0000
ROA not before: Wed 01 Oct 2025 16:43:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401650
IP address blocks: 185.161.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Oct 2025 21:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a0:a7:e8:b5:8d:cf:8f:cb:c5:45:12:c5:ca:68:f8:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520
Validity
Not Before: Oct 1 16:43:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28ddd44a1f89256f7e8e1183c625560e1b0f3c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:48:14:1f:a7:b5:fa:1e:44:89:d9:c2:d1:bb:
80:8f:c4:55:72:dd:b8:bf:0b:62:38:20:5e:f3:66:
be:3e:ec:89:e0:90:dc:0d:e1:63:59:c3:b9:07:54:
13:42:d0:31:7d:55:1e:f8:fc:5f:f8:a1:b3:61:40:
fc:ff:56:8b:b5:37:10:e0:58:c4:d8:8b:03:a5:ef:
21:f9:ed:ff:6a:1f:04:3c:09:ef:36:9b:dc:c2:c7:
6a:51:68:34:c1:60:83:53:da:10:fd:b6:ee:9d:c0:
5c:c8:d2:ac:3c:bc:9e:d4:70:35:7d:5b:d5:e1:bb:
d9:85:2a:3a:ed:96:ce:8d:42:85:15:48:46:d3:c3:
23:2f:6c:f0:8b:d1:b0:9e:ec:54:27:85:b2:76:cc:
7a:0a:0b:d7:c1:9e:c6:c2:86:10:9c:34:ab:5f:a8:
1c:5d:db:f7:05:ba:d5:ba:29:07:32:65:b2:15:57:
26:63:06:bf:bb:54:6f:4d:9d:96:af:f0:30:89:65:
62:35:f4:a0:6f:1d:1f:c4:4c:18:4d:a7:3c:27:03:
aa:26:5d:82:0e:a7:8e:a8:24:79:da:72:6c:09:7a:
6b:61:65:5e:1f:b8:06:70:ea:98:13:27:36:64:79:
07:16:b2:38:4f:c0:e7:c6:91:79:9c:8f:b5:33:be:
6a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:DD:D4:4A:1F:89:25:6F:7E:8E:11:83:C6:25:56:0E:1B:0F:3C:0D
X509v3 Authority Key Identifier:
keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/KN3USh-JJW9-jhGDxiVWDhsPPA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.252.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:7d:60:79:2c:1b:ad:bf:cd:5d:3c:20:80:a4:7d:e4:f9:51:
69:da:92:0a:34:02:f4:d4:94:49:40:4c:e0:91:ae:2a:95:fb:
f3:bc:ca:7f:5f:e9:c8:e9:ee:ba:87:a8:75:d4:68:a2:b6:a6:
db:6e:9a:e5:f7:48:80:95:31:d2:3b:db:c9:0e:44:27:d2:56:
0d:52:03:80:34:6c:20:c9:bb:b3:d8:27:24:b4:50:a0:ec:63:
3d:33:5a:4d:e8:d8:06:97:25:b9:d5:14:c5:c4:e7:74:e0:ac:
9f:2d:de:f7:41:64:5e:18:ea:e3:67:7b:b7:0b:e6:24:90:ec:
98:d6:5c:a0:12:c3:99:84:60:e4:11:a4:19:ea:6a:ff:c4:c7:
a6:fd:97:25:c9:c4:e4:00:4a:c2:81:09:43:f4:34:64:ef:a8:
ad:cd:16:85:74:49:b7:52:3b:ae:04:21:87:de:df:ed:2d:88:
ee:b2:9b:99:af:45:6f:48:9f:6e:01:b9:82:c4:31:cc:ed:60:
bf:f8:08:13:3a:b5:95:b2:bc:74:3c:bb:4a:8b:29:7e:ab:c9:
88:e5:0a:7b:a9:45:23:68:c1:1a:9d:5d:79:bf:6e:5e:83:6f:
c5:84:5d:80:89:59:1c:d3:a7:8a:3f:79:6f:44:9d:b5:51:a7:
b9:83:ed:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 06:14:24 2025 by rpki-client