Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/Ki0VpZPDB05iBNr9zTJnZUYgkRQ.roa
File: Ki0VpZPDB05iBNr9zTJnZUYgkRQ.roa (raw, json)
Hash identifier: kXkb0C3P3Jd7C25J4hlzR7yFoj/XDlCSljhLx8GQQ0c=
Subject key identifier: 2A:2D:15:A5:93:C3:07:4E:62:04:DA:FD:CD:32:67:65:46:20:91:14
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 0197FECDC94B0D294A5E705C7E07731B3187
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/Ki0VpZPDB05iBNr9zTJnZUYgkRQ.roa
Signing time: Sat 12 Jul 2025 13:23:08 +0000
ROA not before: Sat 12 Jul 2025 13:23:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200740
IP address blocks: 95.81.112.0/24 maxlen: 24
95.81.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:fe:cd:c9:4b:0d:29:4a:5e:70:5c:7e:07:73:1b:31:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Jul 12 13:23:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a2d15a593c3074e6204dafdcd32676546209114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:74:f8:b9:b8:54:5c:1f:b6:dc:da:69:e7:bc:
0c:45:cd:58:ba:a7:75:c9:69:6c:e2:2a:41:c7:86:
b3:96:5a:13:87:f3:bd:72:7c:8c:8a:f8:a4:cc:d2:
6c:56:12:6c:b5:6f:c2:3d:bb:6e:08:98:dc:f2:e5:
2b:bf:f8:44:11:92:b3:fc:a2:a7:09:10:5e:25:df:
85:ac:c5:4e:7c:e8:1a:1f:22:50:34:5a:ff:26:a0:
6b:d6:35:b1:f6:80:20:5b:fa:cd:8a:c7:07:f6:cf:
eb:b6:3a:a5:28:ec:27:c6:87:43:74:9d:17:bf:ff:
fd:03:69:3c:0d:9d:f4:68:4a:8c:ea:54:d9:4c:db:
61:55:42:fd:3b:6f:e6:cd:04:e6:ba:75:26:57:d9:
08:3c:83:c1:5a:10:91:0a:94:26:74:64:52:4a:7d:
c3:49:35:c4:fb:02:41:09:05:c4:8f:26:d2:8c:1e:
ee:14:8e:72:0a:39:9a:32:ed:e5:d4:d3:15:46:f8:
74:9a:67:2a:2b:ee:2c:a5:e1:0b:cb:3e:7d:38:93:
c7:be:8c:fc:83:1b:26:c8:0c:63:c3:a2:bb:4b:9e:
60:02:4f:03:be:af:56:63:29:91:e0:2b:97:8d:42:
3a:3a:71:60:f6:f3:94:84:53:9a:bd:f3:35:20:09:
ee:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2D:15:A5:93:C3:07:4E:62:04:DA:FD:CD:32:67:65:46:20:91:14
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/Ki0VpZPDB05iBNr9zTJnZUYgkRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.81.112.0/23
Signature Algorithm: sha256WithRSAEncryption
33:91:90:75:a3:80:b2:33:80:97:1e:17:20:f9:03:82:e4:11:
ed:11:6b:a4:e9:9e:42:46:a7:d6:12:07:5e:cc:8f:27:68:94:
ba:4a:45:40:c4:f3:34:ce:b7:dd:9c:e1:85:02:b5:e0:93:44:
44:7a:45:77:e1:1c:27:d4:41:9d:78:2e:ae:80:56:f3:ae:6c:
62:f9:f5:28:52:43:1e:65:b9:b2:eb:30:a6:70:db:f1:61:d0:
75:4d:63:11:42:e3:a1:48:74:5a:ad:f1:98:7f:4d:35:10:8f:
08:44:ec:94:75:ce:e3:d0:43:7b:69:0b:14:92:3b:5b:b0:88:
6c:d1:88:a4:88:87:fe:e4:75:a2:ec:32:7b:d2:3b:b1:3c:6b:
98:e6:ae:34:8c:e7:52:44:49:be:a9:11:27:63:c0:bc:fb:c9:
50:bd:4d:8f:1c:f9:42:dc:da:44:0a:ca:17:1a:ff:07:2f:1d:
27:0b:73:8b:be:e1:5f:7e:47:6d:a9:db:f2:77:da:84:20:67:
74:65:96:e7:cb:a9:a1:3a:f7:55:81:a4:5a:92:ef:f4:54:64:
37:6d:3a:7b:26:77:1e:aa:41:12:7d:5e:e5:5d:30:e8:e6:08:
25:4c:42:c4:ca:fe:ce:63:ea:e4:12:7e:26:ee:b3:60:cb:0d:
41:8d:c8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:47:55 2025 by rpki-client