Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/krPfKn-NjNjAy0u2Ta2SG0T8IYI.roa
File: krPfKn-NjNjAy0u2Ta2SG0T8IYI.roa (raw, json)
Hash identifier: PwpNiDEaLhogjcVUrfT2nhjld8L1XOnWViSxcZDbO8s=
Subject key identifier: 92:B3:DF:2A:7F:8D:8C:D8:C0:CB:4B:B6:4D:AD:92:1B:44:FC:21:82
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 019A488F02850AD2E2B851FF6CB75DBE7FA5
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/krPfKn-NjNjAy0u2Ta2SG0T8IYI.roa
Signing time: Mon 03 Nov 2025 07:12:03 +0000
ROA not before: Mon 03 Nov 2025 07:12:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 5.172.33.0/24 maxlen: 24
89.23.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:48:8f:02:85:0a:d2:e2:b8:51:ff:6c:b7:5d:be:7f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Nov 3 07:12:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92b3df2a7f8d8cd8c0cb4bb64dad921b44fc2182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3b:a1:12:7e:fe:b0:3c:68:32:2d:32:08:bb:
ec:9e:25:ae:57:f6:a7:a5:1f:e4:0b:e9:8d:46:c1:
3a:32:5f:e9:cf:c1:57:79:e9:d1:a2:c6:0d:b1:7b:
0e:48:c9:e6:b6:e1:1c:c5:2f:3a:24:24:4f:26:2d:
38:4a:97:e7:ef:d3:54:e3:a8:73:6b:bc:a5:0f:86:
23:ed:fe:d6:75:0f:26:b3:9b:89:3b:01:9f:cc:fd:
08:1e:9b:f4:7b:53:04:e3:cf:27:bb:9b:fb:b2:2c:
1f:6d:bb:f0:11:8b:3d:f5:b0:35:67:98:b5:ad:19:
b4:89:f4:24:5d:aa:52:4e:fd:5d:1a:55:70:ce:c9:
f5:08:1f:5b:4f:e4:c9:d5:e9:39:21:1b:2d:68:e1:
46:53:ed:c2:6c:42:2c:a5:9f:aa:02:a8:c2:1b:d5:
37:dc:d7:f9:b8:25:13:c9:f3:c1:ac:35:67:fa:b3:
4a:08:d5:94:88:66:35:0f:79:a7:a7:ad:fa:63:27:
cc:92:46:98:76:78:1a:dc:58:4f:93:f3:f8:32:cd:
2e:d9:d2:99:e0:51:b9:87:75:24:86:26:b4:19:06:
7b:d7:be:ae:85:83:1a:17:f7:d4:48:32:6d:cc:be:
25:4c:b6:0c:3c:0d:35:34:9d:92:e5:5b:6c:03:a5:
88:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B3:DF:2A:7F:8D:8C:D8:C0:CB:4B:B6:4D:AD:92:1B:44:FC:21:82
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/krPfKn-NjNjAy0u2Ta2SG0T8IYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.33.0/24
89.23.93.0/24
Signature Algorithm: sha256WithRSAEncryption
71:95:b7:3d:17:05:f4:ba:7d:27:a7:8b:f0:ab:f9:dc:d8:a6:
25:36:5e:ca:6e:3c:45:6a:32:ab:c1:2f:b2:18:a0:b6:1d:b8:
93:4d:d1:de:bc:5d:b4:fa:0b:d8:f0:a8:56:91:ca:5d:d4:7b:
08:44:6a:54:1a:b3:f7:9b:cf:2a:c0:80:86:36:33:7a:dd:4f:
82:05:f6:7f:37:4a:d2:8f:0f:04:b1:83:f1:eb:5e:09:e0:d8:
7d:9b:31:c8:50:b2:a6:cd:d6:c7:ad:af:2a:3e:7e:b4:75:75:
19:31:62:f4:a2:70:dc:3a:fb:23:19:b5:a0:31:e9:2f:81:17:
6b:c3:f7:65:30:7a:93:3e:59:21:1c:1d:e5:13:71:05:a4:72:
6d:b5:79:bd:fc:0c:3b:e2:39:4f:e0:94:0a:3c:b0:55:e6:5e:
90:1c:63:aa:4e:30:f8:8b:ab:e0:cf:e7:ab:81:af:07:10:51:
83:6a:2b:02:81:45:c4:6a:da:be:f7:b3:b9:61:ef:57:27:ab:
89:4b:a6:8d:b3:42:01:38:f7:84:ec:69:a5:bd:7a:91:f1:c8:
de:f0:1d:77:6f:14:43:3d:e9:7b:95:bf:c4:dd:7c:3d:2d:17:
f9:13:18:2d:6d:21:b9:d6:f9:a7:9e:90:e1:e4:bf:fc:fb:cb:
75:58:64:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:36:33 2025 by rpki-client