Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/KOSoig2OcfAUHpP5S4cPuKe0-qQ.roa
File: KOSoig2OcfAUHpP5S4cPuKe0-qQ.roa (raw, json)
Hash identifier: h7WOd3FoOyE3z3s6Su64D7SfxJalvzda0YokBEiVb1w=
Subject key identifier: 28:E4:A8:8A:0D:8E:71:F0:14:1E:93:F9:4B:87:0F:B8:A7:B4:FA:A4
Certificate issuer: /CN=d8ccbab3a2d810c5fa29dcda9d50202616efb9e8
Certificate serial: 01977E05C94ADC7F0478877251A0B45D685F
Authority key identifier: D8:CC:BA:B3:A2:D8:10:C5:FA:29:DC:DA:9D:50:20:26:16:EF:B9:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2My6s6LYEMX6KdzanVAgJhbvueg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/KOSoig2OcfAUHpP5S4cPuKe0-qQ.roa
Signing time: Tue 17 Jun 2025 13:13:17 +0000
ROA not before: Tue 17 Jun 2025 13:13:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206940
IP address blocks: 185.156.76.0/23 maxlen: 23
185.156.78.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2My6s6LYEMX6KdzanVAgJhbvueg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:05:c9:4a:dc:7f:04:78:87:72:51:a0:b4:5d:68:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ccbab3a2d810c5fa29dcda9d50202616efb9e8
Validity
Not Before: Jun 17 13:13:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28e4a88a0d8e71f0141e93f94b870fb8a7b4faa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:65:e3:7b:03:5e:a6:80:a1:4d:b8:f4:c6:71:
0b:eb:60:42:21:fd:a3:3c:7a:1b:30:ac:64:27:0f:
8d:79:29:29:ea:b7:4d:62:67:82:07:d4:b5:ec:03:
27:84:1b:6c:d0:b7:90:8f:39:b3:6a:33:b3:b0:f5:
94:1d:8b:de:ab:5e:d1:1f:93:5b:cb:24:10:45:4c:
9a:69:31:05:da:f2:2c:88:01:b9:d7:31:71:6d:5e:
39:c5:4d:20:6a:d8:f1:61:e6:d1:94:a0:64:c9:4e:
f4:c5:20:02:c0:8b:66:59:5e:95:60:0a:a5:d9:cd:
b5:b7:f1:96:56:98:e2:89:c0:85:df:29:d2:38:d4:
cb:75:eb:40:92:73:5f:4f:4d:ed:44:45:b6:86:6b:
c5:ab:f5:c8:3e:dd:7d:cb:00:b5:fa:e0:1e:3c:f1:
43:c5:48:04:22:1c:6f:0b:e0:74:84:60:73:55:af:
eb:96:be:d5:99:c0:49:18:bd:26:d0:9e:85:4c:65:
d2:ab:7c:23:79:c0:eb:9b:e4:60:a1:47:63:88:52:
b5:f9:22:51:7e:e4:28:79:76:6f:04:9e:f5:08:61:
f2:6e:6b:e5:47:98:5d:ef:a5:7f:e6:cc:c1:54:6a:
1c:26:28:9a:1e:ff:76:89:b1:e4:fa:68:53:f8:22:
08:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E4:A8:8A:0D:8E:71:F0:14:1E:93:F9:4B:87:0F:B8:A7:B4:FA:A4
X509v3 Authority Key Identifier:
keyid:D8:CC:BA:B3:A2:D8:10:C5:FA:29:DC:DA:9D:50:20:26:16:EF:B9:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2My6s6LYEMX6KdzanVAgJhbvueg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/KOSoig2OcfAUHpP5S4cPuKe0-qQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/46fa02-6587-4c62-973e-b12501f34ff0/1/2My6s6LYEMX6KdzanVAgJhbvueg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.76.0/22
Signature Algorithm: sha256WithRSAEncryption
72:74:af:96:a5:4a:bd:8f:50:02:a7:13:89:45:00:8e:2d:11:
3b:63:87:8b:8c:75:29:03:ab:89:55:40:10:f2:84:1d:3d:53:
c2:75:bf:32:d4:c1:74:72:80:e6:64:c3:60:3b:9b:ff:f8:45:
83:16:f6:2c:6b:8d:fc:69:c4:e7:58:1b:20:13:41:e8:d1:9a:
b3:8b:7f:44:4b:2a:55:a6:8b:3d:87:f3:43:b8:ee:9b:eb:38:
81:27:50:e6:30:fb:ba:7e:e2:e1:4e:39:b7:61:41:54:59:a0:
e9:7e:5f:f4:f2:49:f0:2e:92:92:a9:9d:dd:94:17:86:7c:d1:
6d:4f:fa:31:5b:99:5e:bb:10:86:d3:73:5b:05:dd:85:dc:3a:
65:44:fc:72:b7:e9:40:18:d2:ec:de:17:85:b3:02:e2:23:01:
ca:a2:46:8c:6b:dd:6c:b0:af:ba:ed:b3:b6:86:c1:d7:a1:61:
6b:40:8d:5d:77:40:e3:aa:3d:29:dc:24:00:76:0c:92:5e:de:
1b:6a:31:66:22:5f:3f:26:8a:b9:d4:06:9f:45:0a:4f:1a:7a:
81:98:17:83:5c:be:b7:df:ce:12:d6:ab:98:22:20:86:2b:67:
27:bb:2d:65:74:ce:6b:c8:1f:48:7a:96:2b:18:a1:32:52:55:
ae:83:82:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:36:27 2025 by rpki-client