Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/kNkPE8aNuek8wymZUqtUgcHYAVc.roa
File: kNkPE8aNuek8wymZUqtUgcHYAVc.roa (raw, json)
Hash identifier: 3KwBKfq5odzxVG6owr9VzlZuLHouxhsFOtf+HcjBAXw=
Subject key identifier: 90:D9:0F:13:C6:8D:B9:E9:3C:C3:29:99:52:AB:54:81:C1:D8:01:57
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019745111A2EA813222F708D27DF89F61AC9
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/kNkPE8aNuek8wymZUqtUgcHYAVc.roa
Signing time: Fri 06 Jun 2025 11:47:18 +0000
ROA not before: Fri 06 Jun 2025 11:47:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203553
IP address blocks: 31.148.175.0/24 maxlen: 24
93.170.164.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:11:1a:2e:a8:13:22:2f:70:8d:27:df:89:f6:1a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jun 6 11:47:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90d90f13c68db9e93cc3299952ab5481c1d80157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5f:ce:f5:86:02:77:5c:9c:e4:11:a5:f9:30:
71:de:31:5e:50:c6:93:e7:0d:00:3f:57:d2:d0:b3:
63:55:82:0a:3c:c0:c3:6e:e1:ed:9e:05:58:28:be:
1e:0d:8a:b3:24:4d:26:6b:de:fa:ea:64:67:5c:01:
5e:5b:c5:ef:79:3e:b1:5f:a3:6d:d9:70:e3:7e:0d:
7b:3f:4e:dc:7f:f9:81:81:78:99:6f:f9:2f:4c:61:
9c:54:52:3c:1a:9b:59:9f:15:25:b9:f2:00:ff:6a:
a5:65:d1:d3:82:4e:92:29:bc:1a:4d:29:d5:26:fc:
d9:91:07:88:fd:22:f4:8c:55:96:c0:0e:6a:7d:a1:
72:76:c5:a0:ea:9d:ee:83:7a:e6:e7:38:78:fa:50:
ed:03:e6:4b:01:55:b3:78:87:45:af:e5:16:1f:8c:
14:93:1d:fd:44:14:56:2a:06:5f:e0:81:81:ce:84:
b4:2f:fa:c5:82:f8:79:72:30:de:88:6e:38:92:bd:
7f:f1:f3:52:27:cc:5d:f0:f6:79:81:b4:54:36:c0:
c8:44:18:55:b5:87:c4:b5:b9:55:a9:7b:02:9e:77:
ae:9b:25:b2:c3:01:bf:a2:0a:e9:bd:d3:02:0a:32:
78:16:b2:3b:34:18:d0:65:5b:4c:07:24:fe:50:1e:
f0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D9:0F:13:C6:8D:B9:E9:3C:C3:29:99:52:AB:54:81:C1:D8:01:57
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/kNkPE8aNuek8wymZUqtUgcHYAVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.175.0/24
93.170.164.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:a5:e7:7a:26:de:ed:67:17:13:8f:61:b3:ed:05:ae:3f:48:
fc:9a:11:27:f1:60:19:22:f2:09:0a:81:14:4a:7c:e9:90:05:
dd:e6:06:dd:dd:6a:47:99:b8:98:77:53:47:f2:86:fd:f6:02:
98:86:7d:15:1c:b2:f8:2d:df:39:0f:5d:86:e7:72:c8:08:9e:
33:ea:44:e8:8d:94:24:03:d2:44:f9:2b:1a:32:74:21:79:a1:
30:27:68:d9:5a:da:09:aa:27:fa:22:74:90:15:69:e3:39:b5:
fe:ad:be:a9:95:66:8c:ac:d0:73:31:c5:d2:ea:3a:15:7e:f7:
db:8a:c0:14:23:4d:b4:fb:7d:fa:51:1f:38:5a:ef:39:b2:f3:
59:9f:cc:0f:b0:32:5d:69:2c:fc:3d:bd:b5:7a:ef:9b:75:4a:
82:72:5e:e0:0a:1e:7b:06:ba:54:4e:a6:e2:92:71:92:f5:6c:
80:a4:9c:cd:2d:c4:20:e8:f3:d3:5e:e7:0e:2a:5e:46:9a:cf:
de:3e:e8:af:6c:49:99:52:8e:9b:9a:a4:06:ac:d3:7b:48:ee:
a7:f6:2a:81:ff:dc:12:3f:ec:38:48:21:a4:85:11:44:c0:a9:
20:93:fb:ee:00:42:22:2f:d5:16:a6:ce:0a:80:95:15:2c:4b:
06:2a:c7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:18:51 2025 by rpki-client