Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/K92C_yNDKzsTCHDwtvUzf5BEgm4.roa
File: K92C_yNDKzsTCHDwtvUzf5BEgm4.roa (raw, json)
Hash identifier: uHvP6kjYrxhAN/UryJAYdy0y/8R5E+pHtm61oXkhge8=
Subject key identifier: 2B:DD:82:FF:23:43:2B:3B:13:08:70:F0:B6:F5:33:7F:90:44:82:6E
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019A8B43F3673D8B48A5F55FDEF6DB975737
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/K92C_yNDKzsTCHDwtvUzf5BEgm4.roa
Signing time: Sun 16 Nov 2025 06:04:37 +0000
ROA not before: Sun 16 Nov 2025 06:04:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205899
IP address blocks: 185.113.10.0/24 maxlen: 24
195.254.165.0/24 maxlen: 24
2a05:9080:5::/48 maxlen: 48
2a05:9080:14::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Nov 2025 09:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:8b:43:f3:67:3d:8b:48:a5:f5:5f:de:f6:db:97:57:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Nov 16 06:04:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2bdd82ff23432b3b130870f0b6f5337f9044826e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1e:b3:2a:b5:3f:a9:30:22:10:4a:42:a3:93:
65:33:2b:c3:b3:11:32:92:9c:13:5e:b4:cf:f5:09:
a6:d0:38:1e:92:ef:99:0b:dc:29:6e:42:4b:e8:7b:
f5:c9:42:25:01:6e:48:ee:0e:64:ce:3c:0e:bb:d5:
df:9e:da:6e:c5:26:6b:a2:24:47:e8:19:9d:cc:23:
99:0c:92:1d:70:24:e2:b2:e8:5d:02:a6:35:dd:5e:
6b:e2:a3:6a:44:53:eb:b8:ec:b4:c2:7f:e4:79:09:
3b:c0:2e:10:5c:ce:09:96:51:1e:57:4f:63:eb:c8:
cf:07:6c:bd:ba:5e:42:5b:f1:78:23:4b:4e:61:d3:
32:f3:f5:53:78:40:c3:ca:9e:26:ed:d1:d0:07:c4:
b4:6b:d5:68:a0:a4:c7:e7:d2:e6:ff:5e:84:e7:db:
ab:3d:e7:91:89:ea:76:7a:22:f4:52:f3:26:e6:85:
2f:35:ab:0e:17:20:ee:6b:d0:28:36:2a:53:d1:2a:
fe:0e:cb:37:e5:a4:e2:cf:02:9d:69:cf:2c:c3:4c:
54:df:cc:85:0f:54:4a:da:cf:9f:fd:58:93:97:8e:
5c:7e:b8:0f:7e:ac:ed:38:62:87:52:1e:af:36:9b:
b1:c9:3b:7d:d0:01:d2:e2:f7:86:01:28:f7:75:4b:
9c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DD:82:FF:23:43:2B:3B:13:08:70:F0:B6:F5:33:7F:90:44:82:6E
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/K92C_yNDKzsTCHDwtvUzf5BEgm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.10.0/24
195.254.165.0/24
IPv6:
2a05:9080:5::/48
2a05:9080:14::/48
Signature Algorithm: sha256WithRSAEncryption
86:10:5a:cc:50:33:63:d3:57:56:23:d8:94:b3:c5:11:61:2a:
34:6a:f0:3f:ff:48:d7:96:23:7b:6b:ab:2a:5c:2a:ea:d1:fd:
2e:f0:55:79:5e:5d:bd:9b:5e:d7:65:30:3d:5f:9e:2c:aa:7a:
74:2b:2e:cc:c5:78:4a:94:03:dd:69:dc:1e:8a:58:ee:21:8d:
e3:cc:ac:ff:aa:c5:c3:c5:64:a7:46:94:19:c7:f9:84:06:67:
b9:b4:f1:a6:8c:a7:08:ac:fd:ba:25:b8:5a:c0:23:80:87:7b:
a0:98:bd:fa:71:98:47:58:eb:14:a1:ff:2d:40:b9:9f:9d:96:
34:8b:7c:4b:13:bb:e1:62:9a:1c:ad:cf:9b:63:4a:9f:36:ab:
09:97:37:ff:47:ed:8b:1b:77:27:e6:7d:b0:80:ba:3e:13:78:
80:5d:5c:f4:d5:b5:36:01:af:a2:aa:67:43:bd:08:79:b0:1e:
d8:46:78:70:10:4c:d8:31:51:58:c7:4d:4d:69:f5:30:69:f7:
ef:c8:37:80:33:35:39:53:17:1f:6f:94:f4:25:80:ad:e1:58:
ee:b4:98:8b:af:cf:e8:a3:c8:7f:96:c2:14:f9:aa:32:15:d6:
00:08:2e:e4:e7:2e:34:79:aa:42:88:e0:ea:d0:b0:ec:62:f1:
51:f0:15:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 17 16:37:01 2025 by rpki-client