Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/kwPr5vzt3-ySJo5MI-LQFyEqrD0.roa
File: kwPr5vzt3-ySJo5MI-LQFyEqrD0.roa (raw, json)
Hash identifier: wgaBbEuKlBEgI0/63TFwHnJqqn8xIpVCdKTwEP7oyo4=
Subject key identifier: 93:03:EB:E6:FC:ED:DF:EC:92:26:8E:4C:23:E2:D0:17:21:2A:AC:3D
Certificate issuer: /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Certificate serial: 01991E156ACC2FF995FB760AEC2415A99167
Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/kwPr5vzt3-ySJo5MI-LQFyEqrD0.roa
Signing time: Sat 06 Sep 2025 08:12:23 +0000
ROA not before: Sat 06 Sep 2025 08:12:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57497
IP address blocks: 14.102.14.0/24 maxlen: 24
45.89.236.0/22 maxlen: 24
61.14.229.0/24 maxlen: 24
103.130.146.0/24 maxlen: 24
212.18.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1e:15:6a:cc:2f:f9:95:fb:76:0a:ec:24:15:a9:91:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Validity
Not Before: Sep 6 08:12:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9303ebe6fceddfec92268e4c23e2d017212aac3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b0:4c:19:ea:73:99:ad:80:d5:2c:c8:e5:4f:
ac:14:8e:a6:60:73:3b:bd:ea:51:ba:72:9c:3e:86:
04:14:11:83:da:8c:44:b5:1e:06:38:1d:31:ed:70:
69:3e:ab:52:f2:3d:be:ca:cc:80:13:ac:61:f7:07:
db:41:d3:d9:c7:3b:34:ec:df:b6:27:cf:3a:ae:95:
25:50:c6:4f:2b:fc:1f:ff:0e:db:96:bf:30:ef:93:
4c:c2:49:9f:72:7f:e1:a4:07:c3:99:7a:84:51:78:
8f:e0:05:58:e9:70:7a:86:e8:7d:ff:cd:20:f1:7b:
79:07:21:9e:0e:bb:77:f7:f3:e7:c5:62:d2:a9:b1:
94:e0:1b:bb:ad:f0:e7:1d:aa:46:48:e2:48:3c:16:
d9:3b:d2:f1:d9:d7:8f:8a:c8:5c:12:64:27:26:28:
e7:96:36:e6:03:38:99:c2:05:31:51:c8:61:34:1c:
86:d9:e5:f1:5b:46:44:32:bf:c9:e2:1a:a4:b6:51:
4d:5d:dd:a4:a8:2b:83:16:d2:a4:24:35:31:cb:06:
b6:ab:3d:1c:45:39:df:ba:dd:96:96:89:dc:df:7a:
73:2e:4e:5b:9f:0a:ef:32:23:19:5c:56:20:40:09:
bc:2e:61:1d:a0:04:c2:7c:9c:99:9b:1d:72:e9:5b:
6f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:03:EB:E6:FC:ED:DF:EC:92:26:8E:4C:23:E2:D0:17:21:2A:AC:3D
X509v3 Authority Key Identifier:
keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/kwPr5vzt3-ySJo5MI-LQFyEqrD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.14.0/24
45.89.236.0/22
61.14.229.0/24
103.130.146.0/24
212.18.108.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:cd:41:7c:fd:0f:9f:54:3e:58:67:58:c4:35:5a:e1:e6:15:
2f:3e:e6:67:e2:07:10:87:6f:16:f8:65:60:91:2d:64:dd:b4:
a7:96:fb:83:83:b0:2e:52:a5:81:83:b1:a6:83:7e:d8:c4:e4:
18:7b:b0:ea:c6:f3:51:6a:ea:d9:3b:35:90:4b:51:02:35:82:
81:20:00:2c:ab:9a:87:9a:84:8a:af:5f:63:9c:d9:88:1c:6e:
46:a4:b6:86:fb:1f:de:2a:4d:61:7b:40:60:14:32:18:0d:f9:
b0:96:d8:2b:db:1f:c3:42:5e:85:39:86:83:88:47:a7:61:58:
ac:b8:d1:df:98:e4:36:18:f4:47:6d:8f:b5:60:1c:93:56:b0:
cb:b5:c4:f6:af:89:1d:95:33:1e:39:d6:4f:16:e8:f7:2c:d8:
80:8f:f6:3e:b2:be:4c:63:32:61:6e:ac:c5:bc:da:a7:ac:18:
75:ca:20:7f:ec:8e:43:67:f8:1b:62:f9:11:52:dc:28:d7:94:
b7:9b:3d:25:bd:11:1b:5f:cb:76:35:c7:04:72:e0:0c:3d:e3:
cd:dc:64:b4:a6:df:ba:8c:31:7a:e7:1a:bd:e2:fa:d3:a5:bf:
96:fd:48:77:a5:88:af:cb:2d:7b:9b:a4:b6:35:03:db:09:7e:
99:bf:ca:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 06:44:39 2025 by rpki-client