Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/KNr8dCxZSv2tLdivt-ye5q6LflE.roa
File: KNr8dCxZSv2tLdivt-ye5q6LflE.roa (raw, json)
Hash identifier: OddKT0B3adcsA3ke/HzglyeCPb/vcMLtq5FBhRNFDKs=
Subject key identifier: 28:DA:FC:74:2C:59:4A:FD:AD:2D:D8:AF:B7:EC:9E:E6:AE:8B:7E:51
Certificate issuer: /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Certificate serial: 019A0AE2BE2D895F1FB979BE0BAEFB3C5B39
Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/KNr8dCxZSv2tLdivt-ye5q6LflE.roa
Signing time: Wed 22 Oct 2025 07:47:03 +0000
ROA not before: Wed 22 Oct 2025 07:47:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12301
IP address blocks: 82.150.37.0/24 maxlen: 24
193.194.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:e2:be:2d:89:5f:1f:b9:79:be:0b:ae:fb:3c:5b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Validity
Not Before: Oct 22 07:47:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28dafc742c594afdad2dd8afb7ec9ee6ae8b7e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ff:a1:dc:dc:6e:c0:58:83:4c:84:a2:08:c1:
a0:1d:a5:34:08:82:a1:61:0e:83:28:be:73:dc:e7:
17:e5:c3:3b:c7:07:ef:f5:0c:de:18:de:7b:a5:07:
61:4b:8f:bb:d7:f5:5a:a6:39:97:8a:c4:c7:27:1e:
bf:a6:08:60:ba:3e:8c:64:41:5b:71:e5:bc:20:1a:
55:6d:aa:f2:50:b0:a0:f9:6e:41:f2:3d:0c:a4:73:
a2:74:db:51:08:a3:0c:ab:71:b7:2f:0e:4e:de:e9:
cd:30:08:e6:7e:ab:e9:24:3f:ef:e0:8c:b0:42:d3:
d2:37:c0:9a:e7:9b:50:75:2e:52:cd:24:26:b3:37:
02:bd:94:e4:f2:e5:8b:58:f2:07:35:7f:58:80:02:
1a:21:7a:dd:53:c0:9c:7d:6d:b4:01:37:b4:14:8d:
83:22:aa:2b:e3:4b:9a:d8:36:14:ff:8c:92:ca:98:
59:76:bb:9e:24:fe:84:a0:42:29:80:e1:a6:c9:97:
b2:82:ac:03:60:23:2d:e2:c4:46:f0:47:64:60:35:
32:4f:7f:7c:40:0e:56:cc:28:ea:d3:f9:95:b4:54:
65:63:56:2b:b8:d4:ee:e1:ea:f7:4f:f4:8a:5c:73:
aa:38:ba:4f:1d:89:ba:c4:c1:95:31:f4:3d:69:5f:
98:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:DA:FC:74:2C:59:4A:FD:AD:2D:D8:AF:B7:EC:9E:E6:AE:8B:7E:51
X509v3 Authority Key Identifier:
keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/KNr8dCxZSv2tLdivt-ye5q6LflE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.150.37.0/24
193.194.159.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:7a:74:64:ee:66:fb:79:53:41:3e:47:cd:d2:e1:f3:6d:4d:
14:1c:9c:e4:d0:6c:f4:4d:db:8c:7d:30:43:3a:72:0c:4e:44:
da:b1:2d:b8:13:67:d9:a2:70:7a:ea:af:28:94:67:4e:ea:2b:
63:62:e1:44:d1:6c:88:90:20:6d:ee:67:34:f9:e3:ba:d6:d1:
df:d4:c2:74:b0:62:a1:26:2a:c3:6a:52:fc:cc:f5:1d:d9:5b:
f2:cc:61:f6:7e:14:a4:56:23:a3:3f:54:e7:48:78:f0:e9:ed:
7b:4d:59:78:83:92:13:4b:b5:be:f1:fb:6e:69:70:50:2f:01:
d9:61:ff:f0:41:d3:f7:af:53:64:d3:3f:fa:53:d4:bf:45:4d:
53:de:cb:3d:80:1c:8a:19:15:81:f5:a9:78:d7:b9:e5:ee:f2:
83:d0:9e:52:23:5a:5a:22:78:ad:19:36:c0:a7:78:13:bf:33:
70:03:db:e7:d4:0c:dc:06:8f:87:a5:b1:4b:ac:a5:fe:bf:ae:
96:ed:a3:79:4d:35:94:42:0d:63:84:2b:38:d9:46:e3:a6:da:
58:8f:9a:4a:86:24:e1:9a:b3:42:4f:2d:f5:20:ff:37:16:08:
e6:c8:40:45:4f:c9:c5:a2:03:c8:c7:65:d0:99:1c:00:6f:3d:
df:63:b4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 23:11:25 2025 by rpki-client