Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/KPSPKR5CERt24RgHkaAIVOQ-_3Y.roa
File: KPSPKR5CERt24RgHkaAIVOQ-_3Y.roa (raw, json)
Hash identifier: /B2g+d8SvUFH1wq4gYFhblNg4apBCw0hfFmzBcRbekw=
Subject key identifier: 28:F4:8F:29:1E:42:11:1B:76:E1:18:07:91:A0:08:54:E4:3E:FF:76
Certificate issuer: /CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Certificate serial: 0196E7B7E37FC4FBCC5306513A7B5B962363
Authority key identifier: 86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/KPSPKR5CERt24RgHkaAIVOQ-_3Y.roa
Signing time: Mon 19 May 2025 08:45:10 +0000
ROA not before: Mon 19 May 2025 08:45:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50867
IP address blocks: 80.85.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e7:b7:e3:7f:c4:fb:cc:53:06:51:3a:7b:5b:96:23:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Validity
Not Before: May 19 08:45:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28f48f291e42111b76e1180791a00854e43eff76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a6:a0:10:ed:6d:4d:af:cb:26:ea:e5:04:d5:
4c:fa:d2:c6:be:ed:81:41:60:b4:75:5d:35:fe:8a:
a8:5e:b3:69:61:08:66:11:a4:ab:f2:9c:aa:66:c3:
73:31:ff:a8:31:32:71:28:41:f8:68:3c:36:8e:b9:
7d:9f:ca:1a:8c:a2:89:63:e8:10:5d:f6:ab:70:34:
e6:5a:f0:f8:4b:2e:d7:f2:f5:ce:96:54:5c:98:61:
fc:ce:be:53:75:63:5e:89:14:16:39:58:49:f9:c2:
19:93:1c:9d:66:47:ba:3e:50:09:fe:7c:b3:af:05:
3c:f2:43:b6:d2:40:3e:13:07:79:84:b0:85:c4:82:
36:8b:b6:5d:e6:7a:55:01:4f:9a:5c:cd:a4:e3:04:
8e:8f:1b:81:d2:ab:ae:7a:22:67:44:c0:8d:8f:63:
51:6c:12:8c:49:47:eb:9a:aa:1b:5a:5b:e4:55:e9:
e8:30:7a:7b:60:a6:0d:02:97:d7:30:72:b3:f4:2b:
a7:0e:38:a6:5e:d8:6e:f2:58:cd:78:5d:d2:b3:6d:
df:05:7f:e4:c6:ed:95:5c:39:60:e3:8c:1b:b9:7c:
ef:3a:ce:cd:1f:69:b7:39:48:be:5a:d5:96:c6:2d:
ed:e1:65:1f:68:ee:da:08:27:ca:29:7b:d4:be:b0:
3c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F4:8F:29:1E:42:11:1B:76:E1:18:07:91:A0:08:54:E4:3E:FF:76
X509v3 Authority Key Identifier:
keyid:86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/KPSPKR5CERt24RgHkaAIVOQ-_3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.85.155.0/24
Signature Algorithm: sha256WithRSAEncryption
54:66:76:18:e6:27:64:66:a1:c4:c5:06:62:a8:40:75:b2:34:
0a:33:e9:dc:ac:c4:a7:26:8b:70:0b:9f:c5:6b:8d:d2:b4:64:
65:ac:6a:6f:db:56:02:35:1e:62:5f:32:d6:4e:d2:62:78:f6:
4c:bf:88:ee:87:63:0d:9a:a6:4f:a9:d7:ff:87:c1:e3:2f:de:
a2:0c:7b:c1:11:a6:00:ca:44:be:d4:24:63:52:3c:dc:f1:d1:
b2:15:c2:e3:9b:b3:c5:1f:c3:5c:fc:d2:db:b7:3d:5b:d3:6d:
e0:08:fa:bf:7c:c5:0e:16:da:c7:5a:37:99:92:40:53:66:ce:
c6:be:aa:1f:38:79:77:d7:0b:d3:00:34:9f:1b:ef:1d:bb:fc:
02:23:83:66:3f:3e:f9:f3:77:0a:16:77:ab:ef:2a:27:e8:c2:
d4:63:a8:73:de:78:96:64:0f:10:96:e8:e3:2c:af:6c:18:41:
55:da:9d:bd:f7:55:bb:c7:73:8f:d7:0e:6a:9b:69:d2:cd:bd:
4d:95:1f:5f:9d:2e:f0:5d:24:f8:86:ca:b2:81:d0:63:b6:3e:
86:0e:95:d2:dc:fe:b8:2a:cf:19:a3:49:3f:34:ab:30:5c:b4:
90:69:aa:9f:2e:99:29:ab:e3:f1:bb:a9:18:66:ce:3d:88:57:
51:cf:9e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:00:52 2025 by rpki-client