Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/KNBjCM7O7CtpyAC7oAyJVQiXWvw.roa
File: KNBjCM7O7CtpyAC7oAyJVQiXWvw.roa (raw, json)
Hash identifier: oazgGiB/ZNKrLVmb4ghoQo5JRdAHa8vVGTxxOx4ALiA=
Subject key identifier: 28:D0:63:08:CE:CE:EC:2B:69:C8:00:BB:A0:0C:89:55:08:97:5A:FC
Certificate issuer: /CN=7031374eb9679109e91a38e28b17bf260ab9d3ab
Certificate serial: 019A006C132A881D911C908AF1A1AE848314
Authority key identifier: 70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/KNBjCM7O7CtpyAC7oAyJVQiXWvw.roa
Signing time: Mon 20 Oct 2025 07:01:13 +0000
ROA not before: Mon 20 Oct 2025 07:01:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51681
IP address blocks: 185.223.137.0/24 maxlen: 24
185.223.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:13:2a:88:1d:91:1c:90:8a:f1:a1:ae:84:83:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7031374eb9679109e91a38e28b17bf260ab9d3ab
Validity
Not Before: Oct 20 07:01:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28d06308ceceec2b69c800bba00c895508975afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d5:35:c0:3e:06:dd:a2:cf:53:43:c5:33:1c:
4a:3a:f3:5e:ac:13:02:fd:0d:ed:25:2d:22:41:27:
59:c8:18:f5:c9:f8:90:3f:9b:e8:7e:42:2d:1a:98:
66:c3:8e:59:a9:3e:3b:2a:45:56:c6:1c:48:20:3d:
aa:7e:f7:99:07:c8:1c:25:bb:e3:8a:f0:a3:df:0c:
45:34:ad:e6:9c:46:3d:c2:4c:4d:07:a0:ac:8d:07:
a0:0e:c2:46:92:db:9e:23:2f:96:3f:0a:c2:3e:c9:
1a:b0:e4:87:1c:4a:c9:fc:f6:c0:98:9e:ef:4e:f9:
69:88:7e:60:1b:cb:f6:09:fe:b0:f8:b3:13:b3:a5:
af:f3:c6:3c:22:5f:67:20:3d:42:ac:da:81:1b:48:
58:ab:72:ff:88:3e:b6:75:44:e1:8f:22:14:ba:0c:
14:e9:0b:af:b9:44:b9:c8:4a:3e:04:16:ea:d4:3e:
4d:4d:61:7f:9d:95:52:ea:c3:88:aa:5b:4f:9a:0d:
b2:c9:8b:7c:04:23:13:8b:26:2a:3e:ce:f9:ee:de:
53:77:f7:a7:38:b6:be:11:6d:e2:13:a6:f7:f2:96:
0c:7a:eb:09:2f:2b:e9:69:8b:d9:ed:23:3b:80:a0:
0c:27:8b:28:15:6d:ae:ae:ff:e0:d8:1b:f1:ee:e5:
26:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D0:63:08:CE:CE:EC:2B:69:C8:00:BB:A0:0C:89:55:08:97:5A:FC
X509v3 Authority Key Identifier:
keyid:70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/KNBjCM7O7CtpyAC7oAyJVQiXWvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.137.0-185.223.138.255
Signature Algorithm: sha256WithRSAEncryption
3e:a9:bb:01:0e:81:a6:b3:85:6b:c1:a8:98:6a:c0:a6:d5:01:
53:48:72:e4:16:f2:ae:2e:cd:3a:19:b9:06:95:48:5f:79:2c:
5e:38:99:af:cb:05:0a:a5:70:2e:03:f0:7d:ca:49:cc:81:7a:
1e:5d:86:f2:6e:c1:f2:b0:0d:8b:f1:96:a1:6a:55:11:24:cc:
4a:53:5b:30:c6:fc:e3:e6:cd:a1:83:0f:6a:b8:c0:a4:b1:1c:
ea:3f:e2:9c:21:ef:15:75:b9:31:81:27:50:91:02:1e:0e:46:
e0:cf:5b:cf:e1:aa:31:7e:16:75:c2:bd:6e:33:85:be:f6:7f:
2f:64:a0:4d:3d:2e:81:63:1e:a1:d5:13:06:3a:8d:5d:ab:db:
a1:b2:0a:aa:28:49:91:80:0c:32:92:59:9a:30:17:99:18:b0:
4d:c4:42:36:de:8f:9e:e5:01:bd:ed:6a:3c:29:e5:5f:36:f8:
9d:a5:b4:b7:45:b9:9c:97:a0:77:24:01:9c:04:97:ae:69:eb:
b9:c9:65:6a:05:15:df:85:1c:3d:a0:5e:b9:a1:a5:0a:ff:3a:
43:86:2f:9d:c9:fd:0d:3f:bd:9e:04:93:4b:8b:e7:bd:f8:a4:
7c:03:a8:29:6f:a6:6b:b5:54:05:b4:e7:d8:af:c3:3d:e3:71:
d5:68:67:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 18:26:31 2025 by rpki-client