Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/kvtNOhaPDDcYSNhoNOrRM4T-fmM.roa
File: kvtNOhaPDDcYSNhoNOrRM4T-fmM.roa (raw, json)
Hash identifier: Z6M9k5kPeExTY6hgAM3xRd+EQBgJ9P/v9dQD7xXO8UM=
Subject key identifier: 92:FB:4D:3A:16:8F:0C:37:18:48:D8:68:34:EA:D1:33:84:FE:7E:63
Certificate issuer: /CN=68a6d2ed46f9d89b1dd621775bd9fb5536bf44cd
Certificate serial: 0198F68A9F5CA3F9A7153C7C1BD6410521FE
Authority key identifier: 68:A6:D2:ED:46:F9:D8:9B:1D:D6:21:77:5B:D9:FB:55:36:BF:44:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/kvtNOhaPDDcYSNhoNOrRM4T-fmM.roa
Signing time: Fri 29 Aug 2025 15:55:36 +0000
ROA not before: Fri 29 Aug 2025 15:55:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213196
IP address blocks: 145.250.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 00:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f6:8a:9f:5c:a3:f9:a7:15:3c:7c:1b:d6:41:05:21:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a6d2ed46f9d89b1dd621775bd9fb5536bf44cd
Validity
Not Before: Aug 29 15:55:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92fb4d3a168f0c371848d86834ead13384fe7e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6d:84:48:bd:c9:9f:96:fa:e9:ae:e6:f2:c1:
e9:58:b5:1a:23:90:05:f2:f2:07:56:13:90:97:6f:
5c:6a:c5:f6:c1:5a:bf:3d:17:ff:87:f0:db:bc:77:
48:20:f7:de:ce:1f:1a:35:a3:8b:cb:6f:c9:41:e5:
c5:3c:fa:77:5a:b2:03:0d:10:4e:ef:24:16:fc:0c:
13:a5:9f:30:54:82:37:fb:75:d9:44:1f:91:9e:16:
a9:53:13:ab:a5:1f:a8:7b:a9:3a:95:07:ab:2c:e0:
b1:13:8e:08:19:f6:cb:70:8b:66:d7:3f:e3:ae:cc:
bc:27:a4:ee:36:22:2b:6d:98:b7:35:96:cd:17:7e:
e2:41:62:30:8f:6a:3a:8b:98:a4:0d:d1:be:6f:f8:
6a:df:1f:8a:2a:1f:3f:87:87:0f:79:9b:57:a6:51:
e9:bd:7c:6b:13:5c:64:09:f8:ef:fd:5c:06:2f:59:
51:c7:1d:f1:62:83:e7:59:ed:5d:e9:8e:ff:a2:ba:
43:64:c8:30:f1:30:eb:90:a7:29:b6:44:34:c1:ca:
6c:94:9a:1c:8f:e4:d3:f1:e1:d8:25:9e:24:4b:8a:
4f:7a:9a:94:44:65:83:b5:6f:24:c8:34:25:af:a8:
ad:21:05:3e:61:dd:fc:a3:84:7a:0a:da:4f:7d:d8:
f5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FB:4D:3A:16:8F:0C:37:18:48:D8:68:34:EA:D1:33:84:FE:7E:63
X509v3 Authority Key Identifier:
keyid:68:A6:D2:ED:46:F9:D8:9B:1D:D6:21:77:5B:D9:FB:55:36:BF:44:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/kvtNOhaPDDcYSNhoNOrRM4T-fmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.250.128.0/17
Signature Algorithm: sha256WithRSAEncryption
4c:ef:65:1b:2f:11:66:ce:b5:41:7c:3f:f5:f1:f7:a7:1b:20:
99:c5:dc:af:29:c8:c7:80:16:25:26:ba:f6:76:a1:0b:2a:9a:
91:7d:46:bf:75:8d:44:94:65:c6:f3:a9:29:48:67:b6:24:b3:
c2:b9:07:2a:d0:39:ee:b8:c9:78:7a:e7:a7:da:05:74:6a:99:
ff:c5:f0:6e:30:25:7a:a6:9a:44:92:e8:b1:b0:28:3c:90:ea:
57:ef:fe:47:88:a4:47:8b:cc:84:4c:aa:70:bd:9d:76:db:2b:
b2:50:de:e3:8f:10:3e:ed:9d:69:73:c9:53:bc:09:c5:38:32:
00:11:32:33:09:69:3a:36:64:05:7a:e3:8b:e0:0e:19:61:44:
69:5e:9d:df:21:78:ad:f1:7d:73:ae:d5:75:f3:ae:91:2f:2e:
55:5b:56:33:88:db:f1:c0:63:1c:d4:cd:e4:e2:bb:2e:b4:d1:
77:d2:36:7e:db:fa:f4:e1:4e:d7:6c:8a:20:e2:bd:d1:7a:17:
c9:7c:45:23:68:54:4b:5d:f6:3e:42:45:20:25:37:91:8f:fc:
2b:62:fa:a1:c4:d9:a5:f5:10:1b:fe:b2:a8:8b:3a:1d:18:a9:
d2:68:b6:ba:22:de:dd:96:03:c0:6f:e5:e2:d1:0a:7a:0e:97:
16:fc:95:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:41:55 2025 by rpki-client