Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/kJNmbBAcX5VkHV_EqLQCBrY5F0s.roa
File: kJNmbBAcX5VkHV_EqLQCBrY5F0s.roa (raw, json)
Hash identifier: qjqDS7zlcVvdFxuRkBahP89SqyWQqIjGQgsXya2h7mY=
Subject key identifier: 90:93:66:6C:10:1C:5F:95:64:1D:5F:C4:A8:B4:02:06:B6:39:17:4B
Certificate issuer: /CN=32a77427c03709b339a95b0ad9a4ac9d2c92c903
Certificate serial: 0198326572CE73EB13E5377DC23F70439002
Authority key identifier: 32:A7:74:27:C0:37:09:B3:39:A9:5B:0A:D9:A4:AC:9D:2C:92:C9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mqd0J8A3CbM5qVsK2aSsnSySyQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/kJNmbBAcX5VkHV_EqLQCBrY5F0s.roa
Signing time: Tue 22 Jul 2025 13:49:25 +0000
ROA not before: Tue 22 Jul 2025 13:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47682
IP address blocks: 91.197.182.0/24 maxlen: 24
91.205.8.0/22 maxlen: 22
2001:67c:18c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mqd0J8A3CbM5qVsK2aSsnSySyQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:32:65:72:ce:73:eb:13:e5:37:7d:c2:3f:70:43:90:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32a77427c03709b339a95b0ad9a4ac9d2c92c903
Validity
Not Before: Jul 22 13:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9093666c101c5f95641d5fc4a8b40206b639174b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e9:4b:d1:f7:b2:40:e1:dd:9b:81:99:ae:3f:
fa:8e:59:84:b8:ad:49:4e:8e:0e:3f:6a:ae:eb:ba:
3c:c4:e1:fc:e6:e4:34:16:08:23:44:6e:ed:a6:ef:
64:cb:97:c4:34:6e:d6:c7:b1:5f:1b:82:ad:b9:7e:
8d:40:fe:de:05:7a:31:58:3b:f3:33:35:52:7d:7a:
5f:35:06:d9:e9:1e:1c:18:c0:71:a2:72:4d:1b:f7:
14:a8:9e:71:db:f9:fb:d6:b1:6d:f9:47:7f:a5:44:
05:03:3b:41:f7:11:8f:17:d7:f0:91:3f:65:d3:9c:
0d:14:bd:1a:0a:32:3e:dc:3f:7a:30:06:ed:31:9b:
c2:8b:ae:ee:b1:04:32:4d:af:13:8d:68:6e:e3:70:
19:40:56:1a:c9:78:ac:9d:21:1d:a7:5e:41:a4:5e:
1a:54:85:41:3d:15:af:5b:40:2b:06:6a:69:e7:58:
df:e4:8e:37:44:aa:83:02:03:59:26:c2:83:d8:00:
19:59:2b:53:ad:2a:db:3f:25:c7:13:01:54:03:6c:
78:ce:59:67:7a:c0:a7:00:a2:88:c5:eb:75:78:e7:
3d:da:38:3c:03:cc:04:b9:d8:51:2c:00:44:98:f1:
0d:a0:e8:9c:54:28:03:78:f1:1d:06:03:c3:fa:9f:
c0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:93:66:6C:10:1C:5F:95:64:1D:5F:C4:A8:B4:02:06:B6:39:17:4B
X509v3 Authority Key Identifier:
keyid:32:A7:74:27:C0:37:09:B3:39:A9:5B:0A:D9:A4:AC:9D:2C:92:C9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mqd0J8A3CbM5qVsK2aSsnSySyQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/kJNmbBAcX5VkHV_EqLQCBrY5F0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.182.0/24
91.205.8.0/22
IPv6:
2001:67c:18c::/48
Signature Algorithm: sha256WithRSAEncryption
d2:d9:20:b2:8e:76:15:69:e2:74:01:9c:27:bc:2d:db:db:6e:
4e:1d:87:d0:4f:b5:8b:b2:07:ce:c0:3c:8e:31:38:46:4b:14:
de:6a:11:8b:63:ea:f2:e7:f0:fd:db:8e:c6:9e:3c:6a:8f:d7:
b4:0d:08:ab:66:16:ad:37:84:05:a3:d8:bb:a0:46:65:73:88:
73:ec:42:e6:89:24:46:a3:7c:78:ef:79:de:e3:2f:8b:ac:ad:
be:87:e4:35:3a:cf:c3:82:d1:7a:53:37:dd:96:58:c5:97:ff:
dc:3e:e8:04:f4:f7:27:94:98:b4:d3:bb:22:37:37:cb:b4:7a:
b9:22:c2:26:52:bf:c3:ec:1b:0a:4f:6e:02:0d:d0:b5:ff:96:
2d:0c:7a:85:db:f8:16:1d:7d:a6:5b:64:36:61:a5:0f:24:02:
49:ce:5c:25:84:e6:8f:d5:9d:b3:79:dd:ec:ec:e1:65:3b:00:
ad:73:0f:96:f0:63:ab:d2:30:46:6d:e5:f6:e0:df:94:d3:8a:
e1:b5:36:a0:05:f0:05:68:63:19:f7:57:b1:0f:63:4f:3b:9e:
b8:2a:99:10:d6:60:5b:97:e8:0c:3e:69:d3:d7:5c:3d:d3:b9:
dc:cb:11:da:56:5a:b0:b7:2a:06:09:74:a2:a7:48:64:42:8a:
7f:c6:ca:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:23:15 2025 by rpki-client