Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/kkgbITx0NnDqrc6NrPVjFVrJ5sk.roa
File: kkgbITx0NnDqrc6NrPVjFVrJ5sk.roa (raw, json)
Hash identifier: 8TkKYybnSajtPi7S+EAIdOJJM4TQV3tglJHQvRJJM1E=
Subject key identifier: 92:48:1B:21:3C:74:36:70:EA:AD:CE:8D:AC:F5:63:15:5A:C9:E6:C9
Certificate issuer: /CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Certificate serial: 01982DD191A20A3053CC900CC0E9C6604BE5
Authority key identifier: CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/kkgbITx0NnDqrc6NrPVjFVrJ5sk.roa
Signing time: Mon 21 Jul 2025 16:29:25 +0000
ROA not before: Mon 21 Jul 2025 16:29:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 217.149.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2d:d1:91:a2:0a:30:53:cc:90:0c:c0:e9:c6:60:4b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Validity
Not Before: Jul 21 16:29:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92481b213c743670eaadce8dacf563155ac9e6c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:61:e3:cf:1f:a5:3a:1b:52:83:fd:73:f3:d1:
68:54:9d:26:46:6b:f6:f9:97:bb:a5:9c:e1:9e:e8:
d4:28:7d:05:40:4f:19:13:32:07:84:69:9f:05:8e:
79:a5:6c:ec:35:49:04:8d:bb:81:d1:d9:61:07:e1:
51:f0:55:0a:1b:5e:9e:92:f6:02:55:a7:c9:28:03:
25:e4:85:82:0a:aa:a0:b6:87:c1:b1:e0:4f:a6:e9:
10:e8:f0:95:3a:8b:f2:fc:c7:5b:b1:8d:fc:2b:23:
26:a4:0e:78:d8:69:9d:5b:30:38:3f:1e:a1:ca:91:
2f:f5:13:27:fb:04:70:b8:e1:60:92:ed:12:64:7f:
e7:4c:5a:d8:e4:b4:55:09:9b:83:a0:c4:f0:b8:59:
e8:99:69:3b:d1:86:14:b9:b5:61:16:28:38:b5:e5:
32:91:c8:f9:37:25:47:da:f4:31:8d:8a:bd:67:30:
b3:77:29:73:4a:eb:bb:a2:0b:77:39:10:d0:8b:8e:
b7:80:90:da:05:0e:03:54:00:26:f9:2c:dd:25:e4:
2d:2c:de:5d:80:5c:70:9b:8c:07:b2:62:58:64:8d:
ca:06:5c:5c:58:7c:1c:e5:fb:25:aa:34:a6:04:21:
57:a7:56:7a:6d:e0:ea:02:16:6a:2d:18:e2:63:a2:
7b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:48:1B:21:3C:74:36:70:EA:AD:CE:8D:AC:F5:63:15:5A:C9:E6:C9
X509v3 Authority Key Identifier:
keyid:CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/kkgbITx0NnDqrc6NrPVjFVrJ5sk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.149.108.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:c9:e7:9a:2b:91:83:1c:55:20:4b:02:a8:6a:34:ed:55:18:
df:ea:86:b4:b1:d4:c7:7d:a8:47:39:53:65:c6:e5:a9:3f:31:
ab:e4:5b:88:4e:1a:99:1e:73:d5:c4:36:2b:1e:85:bf:25:78:
ff:8b:30:70:9c:5e:b3:8f:0f:63:b9:00:14:cc:47:8d:a9:70:
c9:41:d1:39:03:34:e1:55:23:12:cf:b1:b2:13:c7:a2:8c:90:
3b:b2:90:8e:d5:92:08:2a:c3:1e:44:60:e9:9a:73:91:26:e1:
0c:ec:a7:b4:a0:78:80:2c:a7:40:33:23:aa:27:a3:92:c1:63:
20:04:e0:32:54:30:54:5f:67:e8:77:50:76:4e:c0:24:c1:5d:
83:73:e9:6c:35:82:90:59:0e:64:5f:dc:42:eb:4e:f7:63:9b:
ac:7f:a9:a2:fa:72:9c:89:84:27:ce:4d:a1:6b:7c:aa:58:d7:
d3:83:c8:02:87:e3:eb:d4:fa:66:ea:b4:40:df:61:8a:86:c9:
a8:5f:d0:e2:3c:3b:a1:1f:1a:da:53:71:22:52:0c:db:57:f8:
a3:55:cc:9a:ea:b8:7e:0c:df:cf:09:42:03:74:ca:11:60:e0:
ac:79:8b:f8:96:8c:48:33:f0:cb:24:d9:a3:3e:f0:9e:56:76:
e3:ce:5c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:14:38 2025 by rpki-client