Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/kBxlerfqmlvk3X4zZgFx9usOqdA.roa
File: kBxlerfqmlvk3X4zZgFx9usOqdA.roa (raw, json)
Hash identifier: U+IbZnqTjdFaNNszql71/zmjDrvswXcPpnTPggosDeM=
Subject key identifier: 90:1C:65:7A:B7:EA:9A:5B:E4:DD:7E:33:66:01:71:F6:EB:0E:A9:D0
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0198D7EC512782E29C5B29542A3D452308BF
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/kBxlerfqmlvk3X4zZgFx9usOqdA.roa
Signing time: Sat 23 Aug 2025 17:14:05 +0000
ROA not before: Sat 23 Aug 2025 17:14:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214432
IP address blocks: 81.168.32.0/24 maxlen: 24
82.152.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 22:02:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:ec:51:27:82:e2:9c:5b:29:54:2a:3d:45:23:08:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 23 17:14:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=901c657ab7ea9a5be4dd7e33660171f6eb0ea9d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b9:fd:51:77:ce:04:85:59:d1:fb:d9:db:17:
72:c3:06:31:ad:60:42:cb:7b:45:21:36:04:00:41:
e3:27:5d:18:b9:e2:20:7a:33:3e:32:2f:f1:c4:5b:
82:67:9d:f5:8e:a5:4a:a0:12:55:2c:f3:8a:39:81:
0c:8f:ed:3d:ef:e2:1e:38:c7:f2:a4:78:8d:dc:19:
07:87:59:e6:8d:13:7f:e6:13:18:38:6f:2f:04:5a:
a8:8e:12:85:d4:3d:a2:f1:9e:bf:72:ad:f6:49:03:
fc:e9:6b:ed:f3:a1:d7:cf:3c:9e:30:35:a3:28:d9:
d9:c6:07:fa:46:d7:68:05:d8:60:e3:9e:ab:1f:09:
c0:1e:a6:bf:40:cd:50:b8:e8:bb:59:04:c7:28:8f:
be:a5:65:85:2e:91:78:10:0a:76:68:21:ca:2a:2f:
72:de:db:6b:8b:6e:47:8d:29:11:79:fc:f0:1e:54:
7f:7e:bc:0f:c9:a7:3b:bd:93:31:9a:c5:80:b2:1b:
42:c4:dd:5d:c4:a1:e0:0b:e3:16:09:46:a2:0b:de:
61:6b:98:91:7e:69:02:96:3f:22:3a:ef:80:57:b5:
f9:2e:04:37:31:6f:b7:88:a5:f2:af:4a:8f:dd:86:
5d:6b:c3:73:3f:a9:57:4f:55:44:d6:6e:29:dd:7b:
6e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1C:65:7A:B7:EA:9A:5B:E4:DD:7E:33:66:01:71:F6:EB:0E:A9:D0
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/kBxlerfqmlvk3X4zZgFx9usOqdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.32.0/24
82.152.127.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:0e:2f:fd:71:d9:8a:ed:5f:8f:fc:8d:b6:30:94:29:26:dc:
04:ff:9f:90:1f:eb:91:16:d1:0d:7e:89:bf:87:fc:b6:be:6d:
f7:e8:31:9e:e3:9f:d2:ea:80:d5:8a:a4:63:b9:2d:e9:ca:e6:
44:f7:86:9e:08:59:14:3d:6b:0f:1a:f9:b4:d2:e0:60:a9:46:
68:ce:94:5d:a4:6f:1a:3d:9d:4b:fe:cf:0c:d7:89:1d:25:1d:
be:9f:66:dc:eb:fe:b3:cf:7c:6b:72:de:a1:8c:a8:8a:6d:ce:
88:a4:75:f2:b7:f8:88:4f:55:fc:a1:99:89:cb:d3:29:27:ff:
0c:b2:5a:21:fe:9e:d8:ae:78:00:ba:6e:d8:08:30:8b:d4:04:
fc:5a:de:ef:4f:93:7c:08:d8:1a:5c:0e:f7:45:43:08:c6:41:
d5:2c:97:49:30:57:3f:86:9d:c3:15:ec:ae:78:9a:3e:64:28:
07:bf:73:b1:94:68:20:20:e0:58:d1:42:b4:fd:51:35:78:e4:
43:30:97:40:00:b7:5b:ac:3b:b2:33:8b:50:e8:80:ae:6d:bd:
bb:35:af:ae:50:cc:72:fe:a2:df:41:43:c0:e5:9f:bc:cb:3b:
5c:f3:56:0d:68:ff:c8:6e:9d:b4:9e:61:0a:f8:b0:f9:9a:d5:
63:4c:5f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 02:24:11 2025 by rpki-client