Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/KynLe6Isqqlf4ymHTSDycoUXo6I.roa
File: KynLe6Isqqlf4ymHTSDycoUXo6I.roa (raw, json)
Hash identifier: 5ToAaDMV3/VF4hOG6Q6X59h91PT10t726RRqo0H2234=
Subject key identifier: 2B:29:CB:7B:A2:2C:AA:A9:5F:E3:29:87:4D:20:F2:72:85:17:A3:A2
Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Certificate serial: 01992F60E1AB3CEEB3C3AA3FE94C171CB016
Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/KynLe6Isqqlf4ymHTSDycoUXo6I.roa
Signing time: Tue 09 Sep 2025 16:48:22 +0000
ROA not before: Tue 09 Sep 2025 16:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213784
IP address blocks: 91.149.229.0/24 maxlen: 24
91.149.230.0/24 maxlen: 24
91.149.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Oct 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:60:e1:ab:3c:ee:b3:c3:aa:3f:e9:4c:17:1c:b0:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Validity
Not Before: Sep 9 16:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b29cb7ba22caaa95fe329874d20f2728517a3a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:bb:d3:74:62:2a:cb:86:3e:14:09:f6:31:a0:
7c:aa:1e:64:e7:a6:82:76:79:c7:d4:80:49:60:f2:
23:47:04:98:77:71:45:70:23:fd:e3:46:eb:e1:f4:
29:66:44:a0:a3:92:a2:7b:57:e6:66:a6:75:82:a6:
04:7e:af:c9:0b:e6:9e:1e:0b:66:90:1c:6b:a6:a5:
97:b3:51:9c:29:9b:96:16:98:a0:62:ce:f0:13:15:
1f:a5:8f:57:d6:d6:e6:bc:5f:45:e9:30:2c:1f:bc:
e5:45:21:75:40:7b:2a:8e:90:bf:7c:21:6e:67:7c:
93:f6:56:94:23:e1:ae:c4:4b:64:14:ad:06:11:7d:
fd:52:82:12:9c:eb:96:70:47:6d:f7:c5:68:4f:33:
5d:f4:d0:d7:b8:64:13:bd:12:cf:c8:e5:cf:3f:64:
11:57:a0:67:a6:db:5f:c3:a4:a6:8b:b3:1a:4b:0f:
b4:50:7e:9f:f1:49:90:7b:e4:25:39:44:02:89:65:
25:90:20:13:d7:b5:f2:96:1e:ac:11:b8:f3:ce:33:
d3:2a:23:3e:f6:b0:0d:51:04:04:8d:bf:ef:15:60:
8d:c6:79:b8:66:77:e3:b3:48:dc:23:0f:e5:b6:16:
3b:29:03:6b:04:c1:1b:66:bc:82:48:c6:08:c5:74:
bb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:29:CB:7B:A2:2C:AA:A9:5F:E3:29:87:4D:20:F2:72:85:17:A3:A2
X509v3 Authority Key Identifier:
keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/KynLe6Isqqlf4ymHTSDycoUXo6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.149.229.0-91.149.231.255
Signature Algorithm: sha256WithRSAEncryption
cc:07:f9:3d:d3:fc:f2:68:26:f3:50:54:f9:0c:57:e5:26:6e:
dd:1e:94:8d:96:31:75:64:a6:a9:e3:80:0c:55:36:54:75:f6:
7e:eb:01:5d:52:68:43:37:21:89:14:f3:40:4f:69:f4:07:db:
da:9a:bf:6a:4c:b4:7b:07:06:c8:9f:74:ab:72:df:0b:b2:62:
d2:36:04:52:23:6d:b3:db:04:60:9a:41:0e:97:7c:dd:02:b8:
43:48:9f:f8:8e:6a:79:1e:12:7c:1e:f9:d9:07:31:de:32:80:
ff:64:2e:42:e0:a8:66:36:a7:73:d7:f6:1d:f6:d3:b6:ef:ce:
9f:57:6f:1b:e9:d0:96:9e:98:b7:ad:b1:5d:5c:38:06:13:49:
c5:3e:b3:e8:65:a2:59:6f:fa:bc:cc:8c:ad:bd:44:9b:35:9b:
32:3d:c4:92:ca:54:10:3a:94:5d:e5:33:68:d9:96:4a:d4:04:
db:d9:64:d2:77:99:bb:ac:5b:8c:d6:77:40:87:34:33:77:46:
28:d1:3f:69:e7:40:17:6a:cc:a0:9e:65:b3:29:2d:a3:a4:3c:
79:c7:e2:d7:4f:f1:0a:6e:f9:e4:14:05:3a:e5:4b:05:2b:a1:
c6:97:b0:96:ce:4d:de:fd:0b:77:fb:66:19:13:0c:cb:bf:13:
df:66:18:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 10:36:41 2025 by rpki-client