Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/kwVeacE9Id0juKigol5W8QUGZmY.roa
File: kwVeacE9Id0juKigol5W8QUGZmY.roa (raw, json)
Hash identifier: 7cxULpmrleNFyzISvZ8CMCvy9RGxzfGSr5MdwYQQpa0=
Subject key identifier: 93:05:5E:69:C1:3D:21:DD:23:B8:A8:A0:A2:5E:56:F1:05:06:66:66
Certificate issuer: /CN=77c7dd25ca5fb1dc913c2ffb916fa22fb8610b78
Certificate serial: 0199720D1385D62E06B912057BD3393519F4
Authority key identifier: 77:C7:DD:25:CA:5F:B1:DC:91:3C:2F:FB:91:6F:A2:2F:B8:61:0B:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/kwVeacE9Id0juKigol5W8QUGZmY.roa
Signing time: Mon 22 Sep 2025 15:31:23 +0000
ROA not before: Mon 22 Sep 2025 15:31:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39182
IP address blocks: 81.16.184.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Oct 2025 09:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:72:0d:13:85:d6:2e:06:b9:12:05:7b:d3:39:35:19:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c7dd25ca5fb1dc913c2ffb916fa22fb8610b78
Validity
Not Before: Sep 22 15:31:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93055e69c13d21dd23b8a8a0a25e56f105066666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:df:f4:5d:e7:59:c7:71:92:e5:8e:d4:9c:39:
39:f2:35:5b:65:4e:90:2f:71:a8:cd:bb:26:0d:0e:
23:de:a5:50:d8:3c:8e:98:b0:cd:fb:7e:3f:08:5a:
a1:48:b2:a4:06:0b:cc:3b:c4:e6:df:95:8c:0c:ea:
6d:8a:c0:89:c8:9b:84:b2:a6:40:b6:1a:44:42:60:
40:96:ec:37:d7:fd:3f:a0:5c:c9:b4:51:ff:5d:1a:
2a:bd:76:a4:c4:e1:c2:34:dd:f4:14:c5:b7:f1:2f:
71:b6:45:ad:78:f5:6f:85:85:d0:97:58:ff:81:53:
70:12:9e:e2:dc:fa:b5:98:13:49:d1:97:0a:be:bb:
03:7f:26:95:77:bd:f3:42:9b:9c:c0:a9:37:2e:43:
f3:b6:88:47:af:b4:ce:43:5f:2a:e0:80:0c:f7:45:
57:47:95:54:74:77:32:af:a4:fe:ed:22:fd:d8:78:
89:fa:f8:fa:06:dd:2a:86:72:05:be:cd:ca:54:ce:
66:c7:1a:7d:38:72:b9:3b:9d:83:e8:33:c9:c3:f7:
e8:3b:97:81:5f:92:4d:41:40:67:14:14:6a:e6:dc:
d3:e3:6a:2a:c7:b9:9c:8c:32:e9:98:ed:06:0c:89:
51:af:28:94:27:89:8a:08:62:53:91:8c:a1:3c:46:
7a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:05:5E:69:C1:3D:21:DD:23:B8:A8:A0:A2:5E:56:F1:05:06:66:66
X509v3 Authority Key Identifier:
keyid:77:C7:DD:25:CA:5F:B1:DC:91:3C:2F:FB:91:6F:A2:2F:B8:61:0B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/kwVeacE9Id0juKigol5W8QUGZmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.16.184.0/21
Signature Algorithm: sha256WithRSAEncryption
20:72:a1:26:72:b5:da:c9:9e:1b:fd:cc:48:0f:1c:74:05:2b:
81:51:c1:c1:db:36:fa:97:95:01:b2:9e:61:ea:da:30:2b:74:
08:09:c6:47:6d:8b:e0:e3:89:d4:74:97:e9:e4:e9:5e:13:40:
c6:f7:7b:09:30:82:ee:cb:0a:dd:56:f6:d5:bd:42:00:5c:35:
f1:8f:17:d3:33:d1:e9:36:04:c0:80:32:b1:c7:76:f9:87:05:
52:9b:99:02:c5:2c:0e:ae:a8:6a:21:24:5a:4b:f3:09:26:bf:
46:da:1f:b7:cd:20:0d:2f:94:07:f1:35:43:25:88:5a:60:e4:
ac:68:c4:d3:e2:4b:99:8f:1c:f0:e2:bb:8c:7c:ce:4f:1d:fa:
79:41:4a:df:0f:1d:c4:21:05:99:62:0b:12:7c:86:a8:69:4e:
f4:fa:13:f9:2e:d7:e4:4e:0c:2d:54:a5:ae:1d:ad:6d:6f:07:
ec:8f:73:17:2a:17:f8:8d:14:bc:00:2b:6e:9f:14:68:66:bd:
ad:d1:a5:8c:0b:c8:24:34:ac:02:ee:66:02:94:6e:bb:90:5c:
cd:e3:7c:81:b1:cf:c0:c3:d5:07:0b:b1:e4:b4:e2:7d:dc:c9:
b9:58:8b:1e:0f:94:2b:06:c3:11:ca:d0:07:e6:cf:e0:a4:50:
e4:0f:ae:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 13:23:29 2025 by rpki-client