Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/KyDgqIMulR7944PpanWWpHrnRHk.roa
File: KyDgqIMulR7944PpanWWpHrnRHk.roa (raw, json)
Hash identifier: eQ4aUhfvlejKrX9HEEbdwYHf/PT3WzEuG9X7W73FjIM=
Subject key identifier: 2B:20:E0:A8:83:2E:95:1E:FD:E3:83:E9:6A:75:96:A4:7A:E7:44:79
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01988505C554A64FED8958FA34C1E8CB02CE
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/KyDgqIMulR7944PpanWWpHrnRHk.roa
Signing time: Thu 07 Aug 2025 14:53:24 +0000
ROA not before: Thu 07 Aug 2025 14:53:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152868
IP address blocks: 83.137.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 13:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:05:c5:54:a6:4f:ed:89:58:fa:34:c1:e8:cb:02:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Aug 7 14:53:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b20e0a8832e951efde383e96a7596a47ae74479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:88:f0:98:5e:a7:eb:74:65:5c:dd:6f:b4:a3:
25:c5:af:ef:47:ca:5c:e5:47:f8:f3:8e:8e:be:20:
e5:66:9a:cb:8f:59:00:c6:57:f9:47:43:0f:ea:ea:
10:af:87:81:6a:ac:6a:21:88:81:2e:89:69:a6:35:
cd:ca:22:46:36:7e:a4:7e:70:64:97:7e:ba:aa:e0:
a7:8b:30:70:fd:85:ad:72:6a:0f:78:19:76:72:02:
4b:1e:9c:da:3a:10:b3:10:ef:0b:38:6b:5c:4f:e5:
57:a2:76:05:21:0d:66:c8:97:04:2d:91:f0:69:e3:
8d:cb:81:9c:29:98:82:df:b0:f2:62:c0:22:37:3d:
43:e9:05:b7:d0:27:d6:54:67:eb:4c:b8:9e:21:91:
9f:9c:57:03:c6:01:0a:e6:ae:a6:f4:fa:6a:66:21:
1b:17:08:31:6e:34:50:c5:8a:b4:39:e1:07:d8:30:
c7:d2:09:c0:1c:03:11:6a:e4:70:3f:61:fd:d7:a3:
b9:05:1f:60:c8:1d:0c:bc:e1:6f:92:85:12:a3:24:
de:37:fd:9a:78:d1:92:2b:51:17:ee:15:b7:d1:2b:
51:22:eb:a4:30:3d:a0:6f:a2:23:bc:b4:9d:29:04:
d6:65:03:dc:85:6b:25:78:a9:ac:aa:ea:81:56:0b:
5e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:20:E0:A8:83:2E:95:1E:FD:E3:83:E9:6A:75:96:A4:7A:E7:44:79
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/KyDgqIMulR7944PpanWWpHrnRHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.158.0/24
Signature Algorithm: sha256WithRSAEncryption
13:b8:51:cf:ad:52:0a:78:b9:84:cc:3a:e2:be:a7:db:0c:f3:
63:fc:b9:d3:bd:78:e9:ef:30:88:87:06:5c:7a:c9:eb:d7:b0:
e5:ef:39:f0:2f:b3:6d:e7:af:13:00:ac:af:56:71:9e:56:48:
95:1f:e9:2b:f4:27:33:df:3c:70:1f:7a:8c:4b:82:c6:3d:fd:
95:ea:8d:12:a6:77:7e:08:a7:4b:fb:6b:75:ed:8d:8c:c6:60:
f5:3c:4b:65:60:dd:d7:69:f6:c8:6f:8d:89:55:37:2c:6e:17:
dc:a2:b2:af:64:93:bb:ab:a8:5e:c1:3e:70:80:38:f9:e7:51:
1a:4b:21:8b:0c:d0:be:3a:b2:73:ed:2a:38:31:1d:65:22:37:
3c:87:29:08:94:9d:2c:d4:15:6b:13:5b:dc:c2:00:e2:65:17:
20:83:30:a5:91:db:17:3e:6f:c9:bd:db:c4:c8:59:fc:08:7d:
8a:86:c4:bc:e8:c9:67:d8:ee:b2:53:e2:94:3e:d2:b7:fc:dd:
06:29:47:ea:6e:1a:78:8e:35:cb:86:0d:15:d4:26:73:11:39:
e8:40:87:6e:23:c6:f6:8a:cf:32:ab:06:9e:2f:68:85:a3:05:
8d:3b:6b:68:c9:63:81:e3:4d:31:13:53:3d:bf:fe:7e:d8:42:
97:e5:f3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 22:19:02 2025 by rpki-client