Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/KY68jLeDujJbynrOgN-K9-lu_Eo.roa
File: KY68jLeDujJbynrOgN-K9-lu_Eo.roa (raw, json)
Hash identifier: ile+eHNeTiPprnxFVEw1DNOI8w4SlEdrRqsqP3bCU9I=
Subject key identifier: 29:8E:BC:8C:B7:83:BA:32:5B:CA:7A:CE:80:DF:8A:F7:E9:6E:FC:4A
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 01987F3D97B3F315319C0342E370E5185ECB
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/KY68jLeDujJbynrOgN-K9-lu_Eo.roa
Signing time: Wed 06 Aug 2025 11:56:39 +0000
ROA not before: Wed 06 Aug 2025 11:56:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 144.56.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:3d:97:b3:f3:15:31:9c:03:42:e3:70:e5:18:5e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Aug 6 11:56:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=298ebc8cb783ba325bca7ace80df8af7e96efc4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:89:bc:2c:a9:5f:11:da:3e:8e:ec:b6:4c:80:
56:02:d1:b3:f4:4e:69:e7:17:7a:db:ac:c0:b1:ce:
6e:e8:94:86:51:aa:81:5b:78:cb:32:9e:1e:60:6c:
9e:27:3c:58:77:34:21:97:03:71:45:62:59:ff:fb:
20:db:de:20:b5:b6:67:1e:5a:33:0d:7e:80:b8:02:
a5:82:13:25:d2:87:db:ae:71:8d:5d:5c:d8:29:17:
b9:7b:7f:56:28:6c:33:e1:45:4e:e7:d3:e6:98:b2:
2d:ca:ae:b6:02:3d:ae:09:3c:ed:5a:0c:76:3e:05:
85:23:94:ae:2c:db:c7:f6:a0:08:00:9a:5a:7b:25:
f7:3d:5a:21:86:dc:9b:7e:1d:2f:c3:b7:7d:5e:d8:
80:c3:d3:eb:c0:7f:90:68:5c:be:a3:9f:77:f8:a9:
68:02:fb:b2:4a:7f:7f:31:16:43:a8:46:46:f1:35:
82:11:fe:f5:fd:fd:17:5e:7e:cf:91:50:27:b3:52:
5c:15:e7:97:91:a1:34:8b:d2:3c:ca:41:be:55:9c:
28:79:56:5f:7b:64:0e:a4:8f:91:d0:fd:9f:1a:bd:
65:c4:b5:fc:60:9e:8c:79:81:7b:5e:4d:e2:36:ec:
43:1c:3a:ae:54:a7:65:e0:4f:5d:2c:ab:8d:27:b2:
e7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8E:BC:8C:B7:83:BA:32:5B:CA:7A:CE:80:DF:8A:F7:E9:6E:FC:4A
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/KY68jLeDujJbynrOgN-K9-lu_Eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.9.0/24
Signature Algorithm: sha256WithRSAEncryption
92:b5:bf:bf:e2:4d:8f:3e:c5:b2:af:53:61:e3:63:c8:ee:29:
8a:9c:33:8d:90:42:f1:21:dd:50:15:fb:ca:63:54:05:2e:ba:
80:4c:d4:1d:89:b8:c9:d6:bb:37:6f:a6:c5:65:86:bf:9d:aa:
51:db:87:6d:a4:1f:50:a0:f8:b1:1f:df:4d:d6:88:0b:57:d5:
32:a8:0b:62:6f:b1:b8:0f:80:08:74:0e:22:be:22:cb:62:16:
fb:eb:c6:ee:70:e7:32:5c:18:45:1e:23:d9:94:50:1d:ac:23:
f5:4a:57:45:78:20:6c:f4:34:41:27:5d:20:8f:c7:26:63:8c:
f8:10:cb:21:5f:f6:6e:0a:f1:f7:84:e2:ab:20:75:0c:58:02:
27:74:c6:5f:32:15:2a:c0:89:30:df:0e:5d:a9:b6:62:10:f5:
72:27:15:93:c4:73:b3:9e:43:b2:2d:b7:3e:0a:01:4c:72:28:
18:18:3a:3c:4c:81:d9:df:22:66:3b:34:a5:43:c1:20:ca:e0:
5d:8d:b3:f6:5d:51:dc:1d:7c:80:b5:e1:36:d3:f4:50:7e:c0:
88:93:d0:3d:7b:d2:df:7b:94:85:20:e2:45:e1:d6:af:ba:e5:
ae:94:89:1a:99:d0:f1:45:3a:1b:c9:08:4f:6e:84:06:f1:75:
ea:bd:d7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:18:23 2025 by rpki-client