Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/KjwVt_YLNzCoRq-JnMel_rAEvjU.roa
File: KjwVt_YLNzCoRq-JnMel_rAEvjU.roa (raw, json)
Hash identifier: 98qGXLltQ5MTeDKv8jflvZAYDmG8m32VfqwtUkcatVU=
Subject key identifier: 2A:3C:15:B7:F6:0B:37:30:A8:46:AF:89:9C:C7:A5:FE:B0:04:BE:35
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 019A309ACF064B8719297D956BC9AFCEF6DC
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/KjwVt_YLNzCoRq-JnMel_rAEvjU.roa
Signing time: Wed 29 Oct 2025 15:34:03 +0000
ROA not before: Wed 29 Oct 2025 15:34:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211750
IP address blocks: 45.128.157.0/24 maxlen: 24
45.128.158.0/24 maxlen: 24
185.228.81.0/24 maxlen: 24
185.228.82.0/24 maxlen: 24
195.88.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 12:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:9a:cf:06:4b:87:19:29:7d:95:6b:c9:af:ce:f6:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Oct 29 15:34:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a3c15b7f60b3730a846af899cc7a5feb004be35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:9d:9a:f6:58:7d:ac:e9:0b:80:0e:06:d6:96:
4d:7e:b7:c3:14:9a:5f:58:fb:82:9d:55:74:38:95:
87:68:e5:06:9a:60:62:b9:52:16:8d:cf:cf:11:73:
2b:b7:04:d9:23:1e:43:0e:87:18:e0:6c:8c:0f:ef:
08:c8:bb:c5:9d:8a:2b:2c:f0:02:19:5c:20:eb:e5:
40:93:3c:c8:99:5d:e2:74:49:6f:73:95:21:bb:35:
ae:27:55:64:ad:35:e3:95:a3:c5:54:e7:94:99:08:
b6:1e:44:42:3a:5a:d2:44:de:e0:f8:db:16:31:e3:
00:aa:3f:69:88:a4:1e:70:4b:98:07:f9:f3:43:6f:
90:8b:e2:18:27:58:6d:d3:4f:2b:71:ed:e2:91:c8:
d8:25:f2:61:83:1f:b1:da:70:5f:26:7b:5f:0f:63:
13:14:e8:be:8a:8c:4d:81:6a:29:23:e0:cb:a7:1a:
37:c1:44:f2:4f:da:c7:cb:e0:ad:34:d8:6d:fc:39:
19:0e:c5:53:5f:78:de:ce:26:87:59:1c:16:a9:ef:
94:6b:22:a5:81:93:bb:91:6c:3f:04:0c:29:9e:08:
81:f9:75:9c:df:e9:f0:ba:14:4b:28:cf:c1:fc:ac:
19:86:4d:0f:b5:c5:fc:d9:77:ef:f3:e2:90:9e:74:
7a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:3C:15:B7:F6:0B:37:30:A8:46:AF:89:9C:C7:A5:FE:B0:04:BE:35
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/KjwVt_YLNzCoRq-JnMel_rAEvjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.157.0-45.128.158.255
185.228.81.0-185.228.82.255
195.88.190.0/24
Signature Algorithm: sha256WithRSAEncryption
22:23:55:11:0c:cc:f6:fd:3b:9c:57:f8:18:c9:47:f3:c5:30:
22:2a:29:62:c1:bc:05:0b:3e:51:46:e3:ca:00:b2:7b:9b:8f:
f3:31:c6:c7:35:64:bd:b5:06:e0:c1:4d:44:bb:ba:31:ef:95:
c8:57:05:a0:20:23:80:c0:b1:ef:28:65:d4:ab:b2:b5:b7:8d:
fd:61:78:9b:7f:06:8a:b9:4b:c6:35:df:dc:00:d6:0e:a8:25:
53:a8:5c:e8:18:39:6f:90:b2:db:9a:b9:5f:4c:dd:53:52:5d:
0d:ef:0b:d6:41:5a:e3:7c:48:e5:cb:2b:71:01:f5:ea:dc:5b:
1f:26:30:42:fc:96:d4:cb:3b:d0:3c:1d:58:a0:fb:7f:66:ef:
7c:a1:6b:cf:6d:4a:be:c4:55:8e:21:7b:f5:00:ad:7e:cf:c0:
20:b9:0d:b8:4a:e7:c8:2b:6d:2e:de:fd:9f:f0:15:19:1c:44:
19:87:79:f7:fe:40:c0:db:c9:1d:a3:ed:50:ec:a8:3d:22:88:
6f:e4:4d:ba:20:18:fa:be:5d:4f:b9:9e:e8:1d:b7:4a:43:0c:
aa:c3:41:d0:3c:93:6c:4c:d1:be:a2:86:4a:f5:07:3e:68:d5:
26:3d:13:cf:da:84:d8:f2:8d:84:c9:1b:a3:b8:17:bf:af:7b:
68:01:a4:52
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZowms8GS4cZKX2Va8mvzvbcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw
MTRiOGQwHhcNMjUxMDI5MTUzNDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTNjMTViN2Y2MGIzNzMwYTg0NmFmODk5Y2M3YTVmZWIwMDRiZTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8p2a9lh9rOkLgA4G1pZNfrfDFJpf
WPuCnVV0OJWHaOUGmmBiuVIWjc/PEXMrtwTZIx5DDocY4GyMD+8IyLvFnYorLPAC
GVwg6+VAkzzImV3idElvc5UhuzWuJ1VkrTXjlaPFVOeUmQi2HkRCOlrSRN7g+NsW
MeMAqj9piKQecEuYB/nzQ2+Qi+IYJ1ht008rce3ikcjYJfJhgx+x2nBfJntfD2MT
FOi+ioxNgWopI+DLpxo3wUTyT9rHy+CtNNht/DkZDsVTX3jeziaHWRwWqe+UayKl
gZO7kWw/BAwpngiB+XWc3+nwuhRLKM/B/KwZhk0PtcX82Xfv8+KQnnR6awIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFCo8Fbf2CzcwqEaviZzHpf6wBL41MB8GA1UdIwQY
MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt
NmJjNzU1NzhiNGMzLzEvS2p3VnRfWUxOekNvUnEtSm5NZWxfckFFdmpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz
LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAAtgJ0D
BAAtgJ4wDAMEALnkUQMEALnkUgMEAMNYvjANBgkqhkiG9w0BAQsFAAOCAQEAIiNV
EQzM9v07nFf4GMlH88UwIiopYsG8BQs+UUbjygCye5uP8zHGxzVkvbUG4MFNRLu6
Me+VyFcFoCAjgMCx7yhl1KuytbeN/WF4m38GirlLxjXf3ADWDqglU6hc6Bg5b5Cy
25q5X0zdU1JdDe8L1kFa43xI5csrcQH16txbHyYwQvyW1Ms70DwdWKD7f2bvfKFr
z21KvsRVjiF79QCtfs/AILkNuErnyCttLt79n/AVGRxEGYd59/5AwNvJHaPtUOyo
PSKIb+RNuiAY+r5dT7me6B23SkMMqsNB0DyTbEzRvqKGSvUHPmjVJj0Tz9qE2PKN
hMkbo7gXv697aAGkUg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:37:12 2025 by rpki-client