Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/KjfFyOLmI5Y-Fq3IJGJb1nMkWrw.roa
File: KjfFyOLmI5Y-Fq3IJGJb1nMkWrw.roa (raw, json)
Hash identifier: dsyIJdjGGjYMZZypRKzK4uCSH1nfwhGbxjgBMyCf/gs=
Subject key identifier: 2A:37:C5:C8:E2:E6:23:96:3E:16:AD:C8:24:62:5B:D6:73:24:5A:BC
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 0199239AFD895BC79D17CC4C1D5C8A70CDC4
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/KjfFyOLmI5Y-Fq3IJGJb1nMkWrw.roa
Signing time: Sun 07 Sep 2025 09:56:24 +0000
ROA not before: Sun 07 Sep 2025 09:56:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 37.148.132.0/22 maxlen: 24
93.88.158.0/24 maxlen: 24
95.155.129.0/24 maxlen: 24
95.155.130.0/24 maxlen: 24
95.155.131.0/24 maxlen: 24
95.155.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9a:fd:89:5b:c7:9d:17:cc:4c:1d:5c:8a:70:cd:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Sep 7 09:56:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a37c5c8e2e623963e16adc824625bd673245abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:42:de:78:1b:66:d3:17:aa:40:c4:2d:df:85:
5f:ab:15:8e:50:cd:a0:4e:45:9c:03:18:93:a5:e8:
4f:39:76:33:57:64:c2:c9:8d:41:01:ef:4f:26:c7:
5d:40:02:be:4e:fb:96:92:8a:6b:41:e2:4a:f4:71:
3b:44:a3:8d:2f:f6:79:d9:00:ff:80:3d:1c:32:9c:
8d:3b:e5:7c:43:16:85:78:ac:5f:99:ec:29:f3:f1:
5b:e2:a7:49:b5:7f:3c:30:8a:5f:9a:f8:74:fb:f1:
e7:f0:b0:47:fa:21:dd:ac:89:7e:fc:8a:10:ba:15:
fd:f9:b7:e0:f7:87:18:6c:01:bf:4d:fe:da:86:26:
16:67:d6:a9:26:e3:ef:2f:b1:11:57:8b:fd:20:c4:
b2:d3:f3:52:90:c7:26:48:38:dc:c1:75:c8:f7:25:
96:09:3d:9f:92:e0:54:fb:fe:3f:01:7c:22:be:fc:
4e:75:16:2f:09:57:6d:53:5e:bb:81:c0:63:21:5e:
f8:13:bc:0e:41:bc:3b:0a:37:22:7d:c5:eb:8d:c1:
09:7c:bc:80:3a:08:f5:64:65:f0:11:7a:b3:20:12:
e7:be:d9:0a:e8:bb:5c:56:e1:b6:08:30:05:65:6c:
44:e0:b3:b6:4c:d6:74:10:43:4a:41:90:ed:61:df:
05:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:37:C5:C8:E2:E6:23:96:3E:16:AD:C8:24:62:5B:D6:73:24:5A:BC
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/KjfFyOLmI5Y-Fq3IJGJb1nMkWrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.132.0/22
93.88.158.0/24
95.155.129.0-95.155.131.255
95.155.157.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:d9:08:37:c3:ba:96:8b:e2:e9:78:ce:8d:71:76:ee:51:9e:
91:61:ea:f4:74:92:86:6a:94:58:45:a9:96:18:50:52:d1:47:
10:bf:0a:b3:65:7a:0a:75:dc:3c:d4:80:55:3c:12:38:92:f2:
e5:c4:19:c3:18:b3:83:0c:e7:21:e3:7a:e2:72:64:d8:32:27:
19:89:8e:fd:71:9d:8b:13:02:57:09:82:ff:9c:34:62:d7:4b:
ff:6f:19:e7:d4:cf:32:b2:ce:61:c7:8f:8f:5a:86:4e:20:e8:
84:d2:a6:df:2c:60:69:31:1c:25:fd:4f:31:01:78:38:7f:cc:
24:a9:f0:4a:dc:6f:3e:69:a2:5e:c8:f9:b2:1b:a0:0c:2b:78:
56:4f:ad:e9:3d:ea:41:95:7a:45:68:64:27:5b:fa:cb:19:0c:
1c:82:7f:6f:84:1b:f7:0e:27:55:11:57:c5:57:06:16:d3:9d:
0e:a7:af:60:00:c1:0c:57:af:95:29:ad:fc:79:76:29:e8:b6:
62:c8:67:7c:b3:11:7a:b8:2d:99:d7:f9:83:00:50:95:cf:ce:
1a:ff:42:4f:84:54:52:6f:8d:93:62:74:c8:99:fd:f5:61:08:
e3:70:05:a3:d3:92:f3:9c:fb:36:2e:8d:8a:65:f5:7b:e5:48:
ad:88:97:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:27:54 2025 by rpki-client