Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/KGU-l7kcycOZMGWpPm4u2qDPsmc.roa
File: KGU-l7kcycOZMGWpPm4u2qDPsmc.roa (raw, json)
Hash identifier: 5UFS/DHeQgQFabiB9PXJudiIya8fHhA7kwleEPr5dYg=
Subject key identifier: 28:65:3E:97:B9:1C:C9:C3:99:30:65:A9:3E:6E:2E:DA:A0:CF:B2:67
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 019A31BB335979B08A21C8AE0716CBBE18E1
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/KGU-l7kcycOZMGWpPm4u2qDPsmc.roa
Signing time: Wed 29 Oct 2025 20:49:03 +0000
ROA not before: Wed 29 Oct 2025 20:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204269
IP address blocks: 2a0e:8f02:2220::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:31:bb:33:59:79:b0:8a:21:c8:ae:07:16:cb:be:18:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Oct 29 20:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28653e97b91cc9c3993065a93e6e2edaa0cfb267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fd:e8:91:91:f4:84:14:c0:37:76:c8:cc:6f:
15:a0:c3:c6:0a:f0:48:88:5b:bf:f1:1c:1b:de:96:
30:53:d8:fd:56:a1:d6:08:4d:a2:c2:69:99:21:1e:
9b:ec:29:26:34:79:24:3c:e3:ab:21:b4:e4:65:53:
61:ba:1a:63:63:bc:33:26:b4:39:a2:30:66:e5:c3:
77:a0:cd:43:31:1b:ad:60:7a:ca:43:8b:7e:53:fe:
67:c9:bb:18:d2:44:43:91:f4:7d:d1:e5:fd:a9:89:
91:eb:1b:8b:86:da:78:f4:66:81:f0:91:70:d8:a4:
65:af:45:34:9d:b6:55:39:a1:3a:6a:2e:86:ed:a2:
72:26:bc:16:0c:cd:3f:d2:f6:72:ed:9e:eb:7f:26:
51:5b:4f:b6:3f:99:8b:fb:b5:cf:63:9e:a9:d4:a2:
46:e4:ca:6e:0b:13:0b:cd:d5:03:4e:f4:bb:a5:fc:
e7:97:48:6a:70:43:e4:18:ca:78:03:f1:03:63:7f:
5d:cc:27:3f:05:ef:52:bd:5f:31:f2:5f:0e:46:35:
9e:d1:16:c0:a2:da:6d:00:63:85:27:33:ce:f5:46:
87:8d:e7:8c:7e:3d:8c:2c:28:84:12:6b:92:dd:40:
c7:0d:3a:93:ca:d8:e3:41:fa:df:48:4b:d8:05:29:
42:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:65:3E:97:B9:1C:C9:C3:99:30:65:A9:3E:6E:2E:DA:A0:CF:B2:67
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/KGU-l7kcycOZMGWpPm4u2qDPsmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2220::/44
Signature Algorithm: sha256WithRSAEncryption
54:e5:42:54:32:9b:01:a2:f6:7e:fc:d2:bb:1a:b6:c4:61:9a:
e0:3b:dd:5c:9a:7a:98:0e:e4:89:af:b0:dc:65:66:f2:0a:28:
ae:14:1e:6e:61:39:30:e2:f8:db:d3:c3:f1:4c:df:fc:cb:e6:
8b:d0:fb:9c:20:eb:e5:ae:53:b5:aa:e1:05:cb:be:ea:2b:21:
56:0e:fa:22:b7:a1:fc:56:78:4d:b5:22:f9:77:c7:36:d5:c0:
e9:a3:79:6c:8e:41:e1:11:23:49:29:e1:51:c0:b3:71:4b:84:
af:2c:69:4f:db:d2:01:9e:42:fe:4a:9f:1a:3e:a8:24:0b:6e:
fd:af:75:e1:6f:b6:7e:16:33:ef:a6:dc:a1:43:1f:cf:0e:d2:
e9:2d:e2:15:c5:25:40:2f:62:a5:0b:7d:3f:ba:e9:5c:d2:ac:
38:be:08:1d:39:3e:f4:ee:57:3f:da:5b:16:e2:11:75:3c:18:
fa:d1:7c:06:73:2d:f4:ef:23:69:42:75:2a:22:50:ec:9d:d8:
8e:80:7b:b9:94:f6:7f:cf:46:62:15:01:6d:f1:e5:84:88:91:
31:47:d8:9d:59:d5:80:f6:01:95:1b:d4:4f:13:7b:4c:4a:c5:
10:f4:3f:64:1c:30:ac:a8:df:bd:c3:bc:50:36:08:7c:78:ca:
c9:8f:9c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:23:32 2025 by rpki-client