Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/KpRFnijx4HYqUIUICY-ZUp7rRPk.roa
File: KpRFnijx4HYqUIUICY-ZUp7rRPk.roa (raw, json)
Hash identifier: tZGVcmUikk1vZ7sDIA+p4HCO8PzQlQBBtwwble5ZLjw=
Subject key identifier: 2A:94:45:9E:28:F1:E0:76:2A:50:85:08:09:8F:99:52:9E:EB:44:F9
Certificate issuer: /CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
Certificate serial: 019A2F2545FC685F116E03728588B684E4E6
Authority key identifier: 02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/KpRFnijx4HYqUIUICY-ZUp7rRPk.roa
Signing time: Wed 29 Oct 2025 08:46:03 +0000
ROA not before: Wed 29 Oct 2025 08:46:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8697
IP address blocks: 185.98.224.0/22 maxlen: 24
212.34.0.0/19 maxlen: 24
213.139.32.0/19 maxlen: 24
2a00:18d8::/29 maxlen: 48
2a00:18d8::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2f:25:45:fc:68:5f:11:6e:03:72:85:88:b6:84:e4:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
Validity
Not Before: Oct 29 08:46:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a94459e28f1e0762a508508098f99529eeb44f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c9:8a:fe:20:46:b9:e6:cc:22:93:08:a0:e3:
d8:91:b0:75:c3:e2:d1:f7:34:41:3d:e5:bf:13:e8:
e8:20:6f:eb:78:3b:0b:39:41:ac:c1:a8:a6:3d:2d:
8e:67:27:9e:bb:f1:11:6b:4d:0f:a4:51:62:21:45:
ad:48:83:a2:af:48:ab:e9:4d:6f:ea:a7:57:c1:b4:
69:d6:30:f1:1c:0e:58:d7:27:e8:91:2a:fa:16:dc:
9d:83:70:8f:07:63:04:84:03:66:da:b2:79:28:b6:
b2:14:8d:3f:31:b8:7b:49:ce:da:42:c1:e0:b3:f3:
46:e0:1a:18:ac:7a:5a:e7:9f:e9:d0:9a:b8:b5:53:
03:34:72:63:83:d2:fb:61:35:f2:ca:da:ba:ae:89:
c3:f9:69:be:28:26:8f:22:c1:d3:09:1f:c5:48:37:
69:fa:36:f4:2d:97:d3:a0:f5:f3:42:ad:36:a8:66:
ac:5c:34:41:95:f8:85:31:0c:86:a8:4d:8b:72:57:
93:7c:94:ab:61:20:2e:57:5b:71:0f:29:e0:e3:0b:
56:04:fe:6e:01:13:0d:fa:c9:a0:02:7c:19:aa:92:
36:64:2d:0d:b9:7d:fd:fa:dd:d9:08:78:f9:c1:aa:
94:1c:ca:28:b4:b8:62:2b:4d:af:9d:ec:20:5e:f5:
7f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:94:45:9E:28:F1:E0:76:2A:50:85:08:09:8F:99:52:9E:EB:44:F9
X509v3 Authority Key Identifier:
keyid:02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/KpRFnijx4HYqUIUICY-ZUp7rRPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.224.0/22
212.34.0.0/19
213.139.32.0/19
IPv6:
2a00:18d8::/29
Signature Algorithm: sha256WithRSAEncryption
23:69:a3:84:34:dc:02:ce:9a:26:cb:41:88:7c:da:a4:fc:17:
67:ee:b9:80:8f:75:f7:bd:9a:fc:52:a3:db:a6:ca:77:55:d4:
36:ff:42:b9:10:2d:4d:0d:31:e0:8d:02:8d:8f:c6:42:6e:c5:
13:75:b3:a4:d7:70:7f:9f:39:4e:49:1b:71:13:8e:7d:4d:85:
80:3d:3f:d3:e7:1d:21:f4:32:38:77:2c:ad:19:9f:37:ab:26:
56:a2:72:30:8d:e7:63:20:9d:9f:93:b2:c8:ec:bf:d8:6e:b8:
00:d4:4e:59:e7:90:e4:be:53:71:2d:d2:82:cb:73:bb:e8:e2:
a6:d0:df:d2:42:4e:38:e6:81:d7:b1:da:26:c1:63:8b:10:b3:
fc:57:55:7a:09:23:5b:c8:f2:fb:1e:de:f0:1d:ee:48:b1:f4:
3a:12:19:74:e6:9c:af:7a:c2:12:70:b9:cc:be:94:4d:9b:37:
43:59:52:ed:90:34:da:d5:7f:85:f7:29:19:8a:8c:99:25:40:
14:57:32:be:30:0b:4b:14:2a:9a:a6:34:6b:a6:42:ae:d9:aa:
d3:51:58:38:7b:16:fe:ae:e0:3a:12:98:c2:26:eb:8a:a8:f3:
28:d9:ba:6b:17:23:ea:f8:8c:bc:f7:ad:da:4c:4b:32:c3:00:
62:20:0a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:21:30 2025 by rpki-client