Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/KtCO6Rcf2p9oyV007JWByw7pa-A.roa
File: KtCO6Rcf2p9oyV007JWByw7pa-A.roa (raw, json)
Hash identifier: idaKKV5G2dwH61vtyGf+cSZaVZNfVIUWhq1Urv3Yap0=
Subject key identifier: 2A:D0:8E:E9:17:1F:DA:9F:68:C9:5D:34:EC:95:81:CB:0E:E9:6B:E0
Certificate issuer: /CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Certificate serial: 01992C446625F3366F200908275EA3CD0C82
Authority key identifier: C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/KtCO6Rcf2p9oyV007JWByw7pa-A.roa
Signing time: Tue 09 Sep 2025 02:18:23 +0000
ROA not before: Tue 09 Sep 2025 02:18:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8410
IP address blocks: 194.0.120.0/22 maxlen: 22
194.55.161.0/24 maxlen: 24
194.55.163.0/24 maxlen: 24
194.55.168.0/24 maxlen: 24
194.55.171.0/24 maxlen: 24
195.140.180.0/22 maxlen: 22
195.140.180.0/24 maxlen: 24
195.140.181.0/24 maxlen: 24
195.140.182.0/24 maxlen: 24
195.140.183.0/24 maxlen: 24
212.15.32.0/21 maxlen: 21
212.15.40.0/24 maxlen: 24
212.15.41.0/24 maxlen: 24
212.15.43.0/24 maxlen: 24
212.15.44.0/24 maxlen: 24
212.15.45.0/24 maxlen: 24
212.15.46.0/24 maxlen: 24
212.15.48.0/24 maxlen: 24
212.15.52.0/24 maxlen: 24
212.15.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:44:66:25:f3:36:6f:20:09:08:27:5e:a3:cd:0c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Validity
Not Before: Sep 9 02:18:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ad08ee9171fda9f68c95d34ec9581cb0ee96be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:80:56:54:99:28:fa:18:5a:01:68:75:58:43:
82:13:24:0c:8c:2a:ff:70:e8:41:65:fd:45:29:e4:
75:4f:86:e3:4a:ec:b8:18:d3:cb:e0:0f:58:c1:c0:
c0:0b:30:49:a6:06:72:05:9e:9a:b6:a8:96:5c:ba:
83:6a:2c:9e:27:d8:0c:f7:07:3d:29:c8:76:08:f0:
a9:f5:be:73:a9:24:41:11:f8:a5:bf:a7:ee:ea:4d:
7b:4a:a4:ab:db:a4:7f:68:34:4a:69:c3:88:b9:16:
1c:6b:f7:9c:75:3b:1a:f8:cd:60:e2:5d:67:73:d5:
d3:71:96:cf:3d:6a:36:38:21:89:fe:09:13:09:12:
23:5a:56:18:aa:45:19:1f:57:18:85:10:80:f7:4d:
50:6e:4f:cf:dd:fc:53:a8:3f:a3:61:37:40:14:96:
84:d8:35:78:d2:10:a0:3c:00:8c:b0:89:37:cd:18:
48:61:88:43:9f:4c:35:db:71:04:66:99:1a:3f:c9:
63:d2:88:9d:fa:53:44:5e:b9:ab:73:a2:46:1e:07:
47:2d:db:e9:fb:8f:1e:46:b6:8b:6e:7d:2d:08:96:
f0:cf:5a:d8:5a:ed:bd:0d:32:bb:dd:44:2b:87:86:
b8:2f:b0:32:83:6d:27:c0:57:6c:78:d2:60:57:11:
80:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D0:8E:E9:17:1F:DA:9F:68:C9:5D:34:EC:95:81:CB:0E:E9:6B:E0
X509v3 Authority Key Identifier:
keyid:C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/KtCO6Rcf2p9oyV007JWByw7pa-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.120.0/22
194.55.161.0/24
194.55.163.0/24
194.55.168.0/24
194.55.171.0/24
195.140.180.0/22
212.15.32.0-212.15.41.255
212.15.43.0-212.15.46.255
212.15.48.0/24
212.15.52.0/23
Signature Algorithm: sha256WithRSAEncryption
35:bb:9c:60:36:a6:2e:92:23:2c:82:67:c4:ac:3c:47:d1:b2:
1f:53:0b:d0:90:fe:2f:9c:22:f7:74:a9:ff:3a:22:e3:3a:37:
7f:7a:72:11:d1:00:e5:ac:0c:8d:6e:1a:f2:0e:b1:17:ad:c9:
35:36:0d:42:a3:88:7e:68:09:f9:34:0b:d7:db:f2:7f:ac:e3:
89:93:d0:cd:4d:07:d0:62:29:ed:1e:a2:81:c3:59:de:9c:02:
d5:2b:24:58:7c:17:f3:98:5b:53:29:65:e5:2a:e9:55:f1:58:
c8:2c:0f:6a:e6:f9:c4:f6:c4:ce:46:18:35:f6:c1:97:37:d7:
36:de:04:59:9d:35:7c:fe:ef:90:ba:48:0a:fd:25:26:b2:3d:
8c:8f:ad:ae:46:bf:94:41:65:aa:ce:2e:5b:ee:a9:8a:af:d9:
54:ad:9c:43:4b:d7:09:42:11:e0:f9:04:f4:81:db:76:15:fc:
8e:20:71:eb:34:e3:14:43:f0:22:46:c2:e9:4d:6a:07:53:25:
a7:6c:2d:8c:fc:e2:b2:2b:05:57:2c:0e:d9:f4:69:72:66:38:
72:2b:9b:1b:58:8e:a5:39:42:a9:c5:bc:cc:25:42:87:7f:21:
e8:93:86:2d:cb:b4:7b:39:3d:b6:d2:39:37:10:e2:64:9a:06:
6c:73:eb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 16:21:43 2025 by rpki-client