Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/kvE4ohrHXkTjJf5UTVvUlvahRSI.roa
File: kvE4ohrHXkTjJf5UTVvUlvahRSI.roa (raw, json)
Hash identifier: LPrVLl2hUcRErAL0eFU8iTvUIR+PhBU3jQcOTXqHzWY=
Subject key identifier: 92:F1:38:A2:1A:C7:5E:44:E3:25:FE:54:4D:5B:D4:96:F6:A1:45:22
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01987921B6B7433EB650E768D6E7651BD847
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/kvE4ohrHXkTjJf5UTVvUlvahRSI.roa
Signing time: Tue 05 Aug 2025 07:28:29 +0000
ROA not before: Tue 05 Aug 2025 07:28:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 266757
IP address blocks: 92.118.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 Aug 2025 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:21:b6:b7:43:3e:b6:50:e7:68:d6:e7:65:1b:d8:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Aug 5 07:28:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92f138a21ac75e44e325fe544d5bd496f6a14522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d3:db:86:90:49:9c:86:5e:3a:09:d0:c6:b9:
70:09:c9:3d:76:e4:e3:78:62:ad:6b:71:f8:df:3c:
fb:db:2f:5f:9f:78:67:6b:41:08:cd:e3:15:67:11:
10:fb:9a:3f:c8:e2:1b:92:44:1a:71:8a:97:e2:4c:
0b:97:b5:29:bd:6d:3a:f3:ed:17:2b:fe:24:4d:50:
88:c5:81:84:dd:e3:39:8a:4d:01:0b:a2:29:cb:8b:
64:fe:7c:c9:a1:40:b8:d0:6a:db:c2:be:89:b2:27:
d4:66:ff:9f:19:07:16:80:0e:9b:0d:e8:f3:70:ab:
ea:26:77:99:d1:22:4d:fa:2c:59:d9:66:bf:31:c3:
53:c2:7f:60:5a:30:5f:e0:10:30:26:a2:1d:8d:56:
de:8e:8f:c4:28:89:67:4a:92:14:1a:b7:4b:2d:f5:
7b:55:08:54:80:49:f0:80:a9:0a:d5:b8:7a:7a:3a:
10:cc:74:8b:a0:30:e6:a0:9c:b4:ae:f1:da:93:7b:
10:73:86:1a:6e:7d:63:ac:d1:97:6a:3d:d6:7c:3c:
a4:88:f8:a5:96:26:72:06:56:6c:ba:61:07:ff:c3:
8d:38:d9:0c:25:6d:0a:8f:6e:04:7f:96:39:03:5b:
30:f3:9a:86:78:65:f4:69:1f:3e:4a:92:93:dc:f3:
20:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F1:38:A2:1A:C7:5E:44:E3:25:FE:54:4D:5B:D4:96:F6:A1:45:22
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/kvE4ohrHXkTjJf5UTVvUlvahRSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.181.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:88:ac:ca:6e:34:6e:36:82:31:04:2f:45:bd:cf:58:65:2f:
09:3c:59:9f:16:74:c4:08:34:4d:e2:1e:af:96:c7:47:37:0b:
c6:56:4b:92:3f:0d:60:5b:25:19:6b:b2:c7:f1:f0:dd:52:2f:
1b:26:bd:9f:52:51:74:14:e6:c9:7c:fc:b5:c3:1e:d8:89:51:
5c:c1:73:f9:f0:f3:23:33:af:65:9b:7e:a1:9f:99:6c:4c:e3:
48:25:73:6e:3c:05:dd:c7:87:ea:71:af:97:fc:cb:3a:7f:e2:
11:64:98:89:ae:74:32:d2:70:1f:ef:49:06:1a:07:a7:ea:71:
52:02:10:da:7b:77:ea:7c:e7:c7:dc:57:49:0e:f5:60:c4:5c:
fd:19:6e:72:e1:d0:ca:0f:54:99:1b:a8:1c:b1:ed:c7:57:fc:
81:07:93:58:91:f0:0a:14:bb:16:16:4b:18:50:1f:29:cd:94:
35:fb:f7:4c:28:66:db:da:22:97:22:ed:48:4c:82:11:ce:7d:
90:b6:f1:29:fb:82:7b:46:44:a4:19:21:49:12:87:f4:9b:e9:
bc:5b:8d:96:50:75:b7:23:96:aa:fc:1a:6d:59:f2:1f:61:38:
c3:25:30:6d:f2:a9:b7:8a:b2:36:3b:c7:c8:d5:ef:bb:b2:3b:
42:99:4c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 15 17:49:56 2025 by rpki-client