Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/Kw5HSHb5y8lWLrdxXRDZQa9-doM.roa
File: Kw5HSHb5y8lWLrdxXRDZQa9-doM.roa (raw, json)
Hash identifier: KGg4/gqPV/ne3wg0zULCF4s1xrAWKujVJHk6MhaPZgo=
Subject key identifier: 2B:0E:47:48:76:F9:CB:C9:56:2E:B7:71:5D:10:D9:41:AF:7E:76:83
Certificate issuer: /CN=c15f0608297e9f94371a72d93ad7b11f79c1f83f
Certificate serial: 0198F013042CD5CECD8C97224C028791AF72
Authority key identifier: C1:5F:06:08:29:7E:9F:94:37:1A:72:D9:3A:D7:B1:1F:79:C1:F8:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wV8GCCl-n5Q3GnLZOtexH3nB-D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/Kw5HSHb5y8lWLrdxXRDZQa9-doM.roa
Signing time: Thu 28 Aug 2025 09:47:14 +0000
ROA not before: Thu 28 Aug 2025 09:47:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47536
IP address blocks: 185.93.174.0/24 maxlen: 24
193.105.29.0/24 maxlen: 24
2a12:79c0:100::/48 maxlen: 48
2a12:79c0:300::/48 maxlen: 48
2a12:79c0:400::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wV8GCCl-n5Q3GnLZOtexH3nB-D8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f0:13:04:2c:d5:ce:cd:8c:97:22:4c:02:87:91:af:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c15f0608297e9f94371a72d93ad7b11f79c1f83f
Validity
Not Before: Aug 28 09:47:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b0e474876f9cbc9562eb7715d10d941af7e7683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4b:0c:9b:3d:fb:91:c7:33:08:11:08:04:29:
aa:34:05:af:1c:7b:b9:d6:0c:ed:81:cd:e5:f1:e3:
41:bd:c2:ef:28:87:32:73:b8:f5:f2:12:6d:43:8a:
f5:34:4c:2b:59:a4:cb:a8:2b:0f:87:78:63:c9:6d:
e9:53:42:38:d9:22:eb:9e:15:9d:b7:2a:61:1e:77:
7f:05:45:9f:1e:f8:e2:f4:df:9f:2c:fa:22:37:34:
0c:37:7f:a5:d1:49:82:40:4b:52:f8:12:1c:95:72:
37:36:9f:1f:07:ed:ac:1d:43:df:40:87:a2:f1:b1:
00:25:ae:0a:69:dc:b0:08:16:1b:cd:a7:90:97:97:
d3:35:c6:2e:ba:90:38:48:c9:01:35:91:54:8f:82:
de:74:66:ad:cc:9f:6f:5e:1e:5f:49:56:90:d6:ee:
5f:bb:67:65:79:a1:35:01:66:cb:33:5f:fa:af:e6:
c8:aa:4d:9a:c0:8a:5b:46:53:a0:ce:e4:85:3d:2d:
d4:fd:d6:8d:8f:b5:ba:b1:85:e1:7f:73:69:15:9b:
68:f3:63:0e:f5:12:d7:e2:df:98:b4:15:9f:07:2e:
51:7e:88:09:9e:a0:1f:04:6f:6d:68:57:e9:11:d4:
89:d1:8d:d3:ce:08:16:c5:cf:6b:8e:73:e8:75:d3:
09:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:0E:47:48:76:F9:CB:C9:56:2E:B7:71:5D:10:D9:41:AF:7E:76:83
X509v3 Authority Key Identifier:
keyid:C1:5F:06:08:29:7E:9F:94:37:1A:72:D9:3A:D7:B1:1F:79:C1:F8:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV8GCCl-n5Q3GnLZOtexH3nB-D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/Kw5HSHb5y8lWLrdxXRDZQa9-doM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.174.0/24
193.105.29.0/24
IPv6:
2a12:79c0:100::/48
2a12:79c0:300::/48
2a12:79c0:400::/48
Signature Algorithm: sha256WithRSAEncryption
85:8e:9b:3b:57:3c:47:7a:b3:f7:df:10:89:c1:20:99:f2:c8:
25:a1:9c:b1:93:21:25:59:df:d8:06:e5:55:45:a2:a4:e8:f5:
55:2a:34:5f:ac:70:a4:6b:1e:45:36:77:46:ac:83:77:58:67:
07:ed:6e:fb:cc:44:7e:7e:e2:2a:5f:bf:3b:0c:09:15:27:5b:
6f:0a:ba:29:ea:98:98:98:c7:13:49:16:47:25:40:92:13:a6:
03:a1:db:d6:f9:38:70:17:fb:de:0a:ab:c3:04:fe:39:a5:1e:
47:25:02:87:02:84:1f:64:d1:17:de:92:e3:92:38:a7:80:6d:
b4:19:fb:a7:07:d4:12:28:93:de:fd:2d:63:40:2e:41:84:d4:
d5:80:3f:db:d1:ab:89:c1:12:e1:7c:b8:fa:86:0b:90:e9:e8:
26:45:d6:df:8e:cd:01:dc:d9:7d:aa:7e:06:b0:c9:10:02:50:
e2:d6:d4:7f:9c:c4:2f:1c:69:08:20:58:56:08:76:00:03:60:
29:b2:7a:9c:02:ae:5f:cc:bb:a5:35:ac:fd:29:7c:36:b8:d0:
ae:97:0d:50:29:d9:56:c5:c4:f5:c9:bd:73:ea:f6:7e:38:67:
83:c0:1c:cc:95:17:01:0d:c7:eb:93:7a:f1:0b:f3:c7:38:bf:
ef:ca:c3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 09:52:49 2025 by rpki-client