Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/kiwWFz0NoDfmogGyzMi0YU9jRAA.roa
File: kiwWFz0NoDfmogGyzMi0YU9jRAA.roa (raw, json)
Hash identifier: gnYS4uF1s0u5dRaD7UkJnFNCx2ghQj+jdKnUfu0aqw0=
Subject key identifier: 92:2C:16:17:3D:0D:A0:37:E6:A2:01:B2:CC:C8:B4:61:4F:63:44:00
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 0197F3EAAC03A3EFC91ACAB683DC25B0C159
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/kiwWFz0NoDfmogGyzMi0YU9jRAA.roa
Signing time: Thu 10 Jul 2025 10:38:52 +0000
ROA not before: Thu 10 Jul 2025 10:38:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59682
IP address blocks: 94.131.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f3:ea:ac:03:a3:ef:c9:1a:ca:b6:83:dc:25:b0:c1:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jul 10 10:38:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=922c16173d0da037e6a201b2ccc8b4614f634400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:43:ce:a8:d8:11:13:58:8b:91:b1:2a:89:3a:
b3:f3:82:cd:0c:35:ad:0f:87:11:cd:e6:10:f1:61:
a2:56:50:1e:aa:51:10:47:21:5b:a6:9b:42:2f:2e:
fa:43:e3:13:70:b1:db:9e:93:8d:cf:d8:21:94:2a:
15:5f:bf:92:ea:ec:ca:38:9e:5b:33:97:1a:97:76:
2b:d6:9b:27:26:ca:23:ad:ee:f1:ca:0b:01:f5:ce:
47:3f:10:45:e2:30:d7:85:e2:b5:5a:4f:8c:5d:d2:
8d:4c:19:fb:52:2b:84:9c:2d:57:fb:f9:01:06:a6:
e1:df:fc:06:6f:c7:b0:e8:2b:56:a6:9b:94:af:20:
a6:e4:e3:c8:dc:68:a8:44:6a:24:ce:39:fc:01:14:
96:3f:d4:cc:6e:27:b2:ae:78:17:87:1e:ee:57:ae:
85:60:4a:dd:63:63:6f:43:a8:f9:3f:d8:5b:98:e7:
9a:79:d1:4d:45:d2:f6:96:86:92:8b:f9:ed:56:bd:
21:94:58:cc:f6:1e:ce:65:d3:31:58:bc:b7:67:ab:
3b:94:f1:61:53:e4:a3:7e:f0:a8:f2:ab:f5:8a:52:
28:00:86:95:e8:e9:96:dc:63:78:1a:8a:06:b3:c9:
17:5d:e9:32:3c:27:ee:0b:73:8d:44:95:29:13:ef:
cf:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:2C:16:17:3D:0D:A0:37:E6:A2:01:B2:CC:C8:B4:61:4F:63:44:00
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/kiwWFz0NoDfmogGyzMi0YU9jRAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.5.0/24
Signature Algorithm: sha256WithRSAEncryption
26:84:5e:85:ba:19:01:93:cc:f9:d1:1c:ba:3b:56:ba:fe:d3:
61:8a:44:9b:78:00:97:9a:5a:70:89:9d:cc:ec:bd:50:b9:c8:
86:17:24:5d:18:81:84:2e:cc:9f:a4:65:24:d9:85:ab:51:29:
c0:29:f9:cb:f6:a2:31:66:a7:aa:4b:29:b8:ee:a7:68:26:ba:
fb:03:0d:ad:56:96:14:50:20:ac:27:3f:80:fe:eb:8e:0c:94:
e6:c0:de:00:c8:ed:81:a3:e1:06:32:c1:67:cd:23:3c:c9:03:
25:10:4d:72:0e:2d:37:35:0d:53:7e:3a:7f:30:fd:4e:1b:ac:
a7:02:84:f2:c0:80:fa:a5:04:6e:dd:a6:9f:b7:cf:6b:8f:70:
7d:a1:4d:02:6a:db:f5:eb:3a:d4:37:03:9e:07:9a:2a:98:9d:
6d:dd:c8:cc:93:b9:18:15:95:8e:d6:99:45:0a:4c:78:1d:ce:
52:f5:fd:49:87:1d:a5:e1:6f:ba:ba:dd:fe:4b:de:9a:01:0f:
b6:ef:27:b1:d9:4a:c7:6f:4f:b1:07:88:a2:63:37:56:b2:22:
4b:c7:e8:23:d5:36:27:12:8c:d4:52:a1:62:22:f8:89:ea:e8:
87:33:8e:da:a5:91:b2:b6:4c:2f:20:e0:83:ad:a4:cc:5c:a1:
5a:22:5f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:13:15 2025 by rpki-client