Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/KMMYTHWzO61QXhv91ffqv9vqcto.roa
File: KMMYTHWzO61QXhv91ffqv9vqcto.roa (raw, json)
Hash identifier: tTySNgCXVj/sPrnXWcWMwYNiIdJvJu1O6zs3jqbRqEs=
Subject key identifier: 28:C3:18:4C:75:B3:3B:AD:50:5E:1B:FD:D5:F7:EA:BF:DB:EA:72:DA
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 0197FA346B924A744AB084473486FD2F154D
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/KMMYTHWzO61QXhv91ffqv9vqcto.roa
Signing time: Fri 11 Jul 2025 15:57:08 +0000
ROA not before: Fri 11 Jul 2025 15:57:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216039
IP address blocks: 185.176.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 18:40:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:fa:34:6b:92:4a:74:4a:b0:84:47:34:86:fd:2f:15:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 11 15:57:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28c3184c75b33bad505e1bfdd5f7eabfdbea72da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:04:f5:95:a9:12:92:21:8f:94:13:b6:84:dc:
e0:f0:72:82:fd:70:de:69:e7:08:8a:fc:bb:39:4f:
fd:12:cf:7d:d9:40:e6:47:8c:0f:46:ab:bc:97:b7:
37:31:4f:8f:84:38:f9:a7:ff:fe:b8:d1:b2:a3:91:
c9:32:59:de:cd:b7:bc:07:18:4e:f6:00:c6:91:19:
99:ba:5e:05:bf:ce:e7:2a:3b:77:33:f1:b4:e4:ee:
1b:2a:e4:89:90:81:8b:9b:d1:2c:3e:df:43:51:a6:
d6:ab:a9:7a:59:31:69:fc:be:5a:96:20:26:fd:60:
38:a4:18:98:a0:f3:91:64:e1:14:b4:e2:8b:b8:5d:
34:e3:f4:bb:35:57:ed:57:ce:8a:80:15:10:6a:8a:
e5:c8:59:8e:57:01:9f:57:69:45:05:57:de:c9:ed:
30:90:b2:35:c1:fa:e9:da:0e:2c:b8:28:2a:f7:36:
a4:49:e7:aa:11:50:ef:b5:79:fa:e3:eb:04:ee:60:
7f:7e:c5:20:1a:42:cf:d2:2a:42:68:e5:53:d5:49:
1f:01:21:8f:45:5f:b5:d4:04:2b:6f:aa:68:dd:4c:
d2:4a:ab:1f:91:e4:dc:5d:f4:65:38:05:96:9d:d9:
1c:04:15:5b:4b:fd:ea:d3:a2:dc:8a:4c:3f:72:cd:
07:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C3:18:4C:75:B3:3B:AD:50:5E:1B:FD:D5:F7:EA:BF:DB:EA:72:DA
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/KMMYTHWzO61QXhv91ffqv9vqcto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.94.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:ce:02:2c:55:6f:03:b0:da:0a:46:93:e9:cb:8d:99:db:bb:
c6:64:ce:83:3a:6c:9a:66:08:eb:7e:fb:67:7c:3f:8c:52:85:
06:46:8e:3f:b6:4a:a9:db:d6:0f:c8:fc:88:cb:2a:b1:09:be:
04:b5:0a:fe:f4:7f:8a:bb:f8:5e:71:fc:ee:6c:62:39:6c:b1:
5e:41:2d:ef:c6:72:ae:64:99:a6:9a:71:17:34:7a:a7:f6:c5:
33:9b:b8:1a:bd:8a:55:65:f1:52:f0:76:4f:9f:2c:68:0f:f5:
0d:05:0f:ae:6d:ad:12:c6:db:54:85:6f:86:61:a1:ab:81:f7:
12:87:1f:26:9c:e7:c2:55:7d:56:01:78:26:78:33:36:51:60:
1c:bf:02:3f:30:a2:a8:49:77:59:33:fb:cd:ff:ac:ff:b1:84:
3a:d1:08:a0:c7:48:60:2a:25:f5:e4:82:7e:86:01:79:d9:cf:
76:de:82:b7:df:e1:78:f4:57:f3:05:83:1d:a1:b0:40:5b:86:
45:32:27:ab:92:f4:83:29:d8:48:3f:00:03:9c:01:cd:e0:a5:
14:a6:9f:58:e4:7f:a2:8e:cc:5c:13:7b:60:9e:63:9a:55:84:
a9:4d:f1:f0:db:71:49:05:5a:d9:a1:68:e1:41:7a:94:d4:e3:
76:b2:b6:3a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZf6NGuSSnRKsIRHNIb9LxVNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjUwNzExMTU1NzA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOGMzMTg0Yzc1YjMzYmFkNTA1ZTFiZmRkNWY3ZWFiZmRiZWE3MmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wT1lakSkiGPlBO2hNzg8HKC/XDe
aecIivy7OU/9Es992UDmR4wPRqu8l7c3MU+PhDj5p//+uNGyo5HJMlnezbe8BxhO
9gDGkRmZul4Fv87nKjt3M/G05O4bKuSJkIGLm9EsPt9DUabWq6l6WTFp/L5aliAm
/WA4pBiYoPORZOEUtOKLuF004/S7NVftV86KgBUQaorlyFmOVwGfV2lFBVfeye0w
kLI1wfrp2g4suCgq9zakSeeqEVDvtXn64+sE7mB/fsUgGkLP0ipCaOVT1UkfASGP
RV+11AQrb6po3UzSSqsfkeTcXfRlOAWWndkcBBVbS/3q06Lcikw/cs0H1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCjDGEx1szutUF4b/dX36r/b6nLaMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvS01NWVRIV3pPNjFRWGh2OTFmZnF2OXZxY3RvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubBeMA0G
CSqGSIb3DQEBCwUAA4IBAQC6zgIsVW8DsNoKRpPpy42Z27vGZM6DOmyaZgjrfvtn
fD+MUoUGRo4/tkqp29YPyPyIyyqxCb4EtQr+9H+Ku/hecfzubGI5bLFeQS3vxnKu
ZJmmmnEXNHqn9sUzm7gavYpVZfFS8HZPnyxoD/UNBQ+uba0SxttUhW+GYaGrgfcS
hx8mnOfCVX1WAXgmeDM2UWAcvwI/MKKoSXdZM/vN/6z/sYQ60Qigx0hgKiX15IJ+
hgF52c923oK33+F49FfzBYMdobBAW4ZFMierkvSDKdhIPwADnAHN4KUUpp9Y5H+i
jsxcE3tgnmOaVYSpTfHw23FJBVrZoWjhQXqU1ON2srY6
-----END CERTIFICATE-----
Generated at Wed Jul 23 01:59:18 2025 by rpki-client