Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/KulVakBvwbVv5xXObvn_Py6ECrk.roa
File: KulVakBvwbVv5xXObvn_Py6ECrk.roa (raw, json)
Hash identifier: LBTjWC3x61Ugle7Tbb8SnIfRkRrHBdl2y6NzyWWyUR8=
Subject key identifier: 2A:E9:55:6A:40:6F:C1:B5:6F:E7:15:CE:6E:F9:FF:3F:2E:84:0A:B9
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 01980A3F7971A590C1436B025A7587354166
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/KulVakBvwbVv5xXObvn_Py6ECrk.roa
Signing time: Mon 14 Jul 2025 18:43:08 +0000
ROA not before: Mon 14 Jul 2025 18:43:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209847
IP address blocks: 95.164.0.0/24 maxlen: 24
95.164.21.0/24 maxlen: 24
95.164.32.0/24 maxlen: 24
95.164.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0a:3f:79:71:a5:90:c1:43:6b:02:5a:75:87:35:41:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Jul 14 18:43:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ae9556a406fc1b56fe715ce6ef9ff3f2e840ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7b:ff:97:c9:2c:95:75:e1:42:5f:04:34:55:
75:1a:8f:4e:53:2e:62:4b:61:c9:f6:cf:8a:d1:f9:
f9:35:8e:7a:b1:d0:73:e0:fb:4d:3d:f6:b4:e2:13:
b8:16:03:28:25:dd:cc:00:f6:a2:01:94:97:c0:88:
a1:31:f7:bc:88:ec:01:c0:59:13:9c:24:d3:b9:ea:
45:98:31:42:58:4e:67:92:fc:53:0c:6b:bf:0c:37:
14:7d:1f:86:af:81:14:75:0a:54:75:bd:3a:31:69:
7b:5b:06:2b:42:3b:2e:af:fd:02:6b:92:1d:6c:24:
ab:97:a7:e3:25:91:0c:b7:d8:84:6b:00:e1:ba:36:
ca:da:71:4f:54:7a:b0:4e:83:69:71:83:0e:d1:2d:
1b:f9:f8:6a:13:c4:87:bd:39:84:8a:c7:1f:a1:d5:
09:3a:b9:b6:fd:a5:95:04:5c:45:bb:13:1f:43:0d:
ba:4b:1e:44:55:0f:29:af:cf:97:96:50:df:f9:fe:
7c:8f:de:d5:07:b6:f6:56:b9:39:49:27:84:c5:8e:
c0:7c:63:80:3d:7b:27:0e:f6:62:14:a2:30:52:b2:
5d:63:bc:cf:8d:63:be:85:13:59:54:fb:2c:5d:6e:
33:93:55:49:74:34:df:b8:53:47:16:c9:b9:64:b4:
ff:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E9:55:6A:40:6F:C1:B5:6F:E7:15:CE:6E:F9:FF:3F:2E:84:0A:B9
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/KulVakBvwbVv5xXObvn_Py6ECrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.0.0/24
95.164.21.0/24
95.164.32.0/24
95.164.35.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:fc:7f:56:c8:42:01:9b:59:13:ab:46:86:7f:25:84:35:be:
5c:33:c4:ac:fd:96:7f:05:82:d9:d6:3b:5b:b0:76:36:06:0b:
46:45:6e:7a:be:81:e0:39:bb:bc:bf:fa:75:60:66:71:fb:7c:
c7:a4:05:ac:d3:fa:ed:74:db:8e:23:d3:59:b9:5c:06:26:3d:
97:39:b0:5f:99:ae:91:a3:71:aa:f5:cd:de:0a:67:d4:40:76:
ba:c6:80:3b:8f:b3:a5:0a:9c:3f:a1:af:2e:8a:32:8b:98:fa:
8e:85:a2:c0:8e:a3:3b:dd:7f:a0:3c:cc:b7:fb:2f:34:1b:d5:
b5:8d:a1:1e:a6:c6:80:0c:27:f8:6a:22:65:b2:09:89:a7:bb:
3d:b8:ca:c1:ee:0a:d4:c6:f0:4a:a3:05:14:9d:6d:47:ab:3d:
3a:4e:f6:50:c4:6d:d9:be:b1:24:43:6c:6f:61:07:f9:00:37:
f1:05:19:7c:2d:eb:12:91:8d:e7:51:fc:71:2c:8b:b0:a1:ac:
82:92:cc:2d:45:45:67:ab:6b:2b:e0:bb:68:27:0f:2a:1a:56:
cc:39:7d:e8:cd:df:81:56:12:3b:a8:46:6c:af:9d:f2:27:39:
00:c1:e6:9e:1e:f0:e7:61:24:51:d2:f6:90:51:3c:53:04:1f:
8b:7b:47:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:48:45 2025 by rpki-client