Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/krk3x_RMgFsn-Bj4WHmyRriKFB8.roa
File: krk3x_RMgFsn-Bj4WHmyRriKFB8.roa (raw, json)
Hash identifier: AQAwZ6Ub5e2gDWYpqbc7W1r9UBvH8RPPvnioV3qSvn4=
Subject key identifier: 92:B9:37:C7:F4:4C:80:5B:27:F8:18:F8:58:79:B2:46:B8:8A:14:1F
Certificate issuer: /CN=560190bdfb0a3f23b4411e7d748eddbbd09f8546
Certificate serial: 019A3452F50F717B3815D4538F5A5835C00A
Authority key identifier: 56:01:90:BD:FB:0A:3F:23:B4:41:1E:7D:74:8E:DD:BB:D0:9F:85:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VgGQvfsKPyO0QR59dI7du9CfhUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/krk3x_RMgFsn-Bj4WHmyRriKFB8.roa
Signing time: Thu 30 Oct 2025 08:54:03 +0000
ROA not before: Thu 30 Oct 2025 08:54:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13237
IP address blocks: 212.108.184.0/21 maxlen: 24
2a02:358:1000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VgGQvfsKPyO0QR59dI7du9CfhUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:34:52:f5:0f:71:7b:38:15:d4:53:8f:5a:58:35:c0:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560190bdfb0a3f23b4411e7d748eddbbd09f8546
Validity
Not Before: Oct 30 08:54:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92b937c7f44c805b27f818f85879b246b88a141f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fb:7f:8e:ee:33:b8:53:81:97:b5:a1:f3:a3:
f3:be:3a:a2:ed:ba:55:a9:f7:0d:b6:cb:ca:ba:19:
44:aa:bb:18:0d:bf:87:76:ed:f9:81:e1:4b:d2:f5:
14:e9:4d:36:14:e5:7f:c0:9b:2e:50:13:82:bb:ea:
bb:42:b6:eb:7f:aa:3e:66:32:7d:6b:bc:80:27:6e:
7a:2f:95:94:c6:b7:48:cc:76:7a:1d:df:91:79:27:
3b:dc:a8:3c:2a:81:bc:af:e0:e7:70:a4:0a:67:24:
b6:a5:98:ee:b4:a9:01:02:75:b4:cc:08:49:f1:1f:
2d:94:59:db:10:8f:26:96:26:43:57:19:71:40:9a:
cd:a4:fe:a3:68:e7:66:05:dd:42:2e:bf:9a:8b:07:
f8:1a:2d:6f:8e:c4:a9:f6:17:ee:34:10:46:20:5a:
d2:30:b7:50:e6:4a:30:98:45:1c:0d:32:0f:c5:c5:
ba:cc:cd:63:7e:2e:2c:25:f3:10:94:75:2a:5c:1a:
39:cb:ee:c1:72:c1:5f:56:64:b0:97:b3:74:70:00:
ca:b3:79:13:23:0b:1e:e7:99:97:d2:d4:d9:92:57:
58:3e:15:9a:ab:91:e0:03:7d:6d:14:02:2a:ad:85:
f9:f8:ee:51:83:8e:1d:e8:b5:a1:61:57:dc:59:4c:
db:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B9:37:C7:F4:4C:80:5B:27:F8:18:F8:58:79:B2:46:B8:8A:14:1F
X509v3 Authority Key Identifier:
keyid:56:01:90:BD:FB:0A:3F:23:B4:41:1E:7D:74:8E:DD:BB:D0:9F:85:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VgGQvfsKPyO0QR59dI7du9CfhUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/krk3x_RMgFsn-Bj4WHmyRriKFB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.108.184.0/21
IPv6:
2a02:358:1000::/36
Signature Algorithm: sha256WithRSAEncryption
87:92:b3:c9:02:be:5c:99:49:cb:b7:d9:6c:8e:89:6b:b8:c9:
f5:84:70:f9:15:ac:3a:8a:98:e7:95:f1:c9:00:d0:2b:22:94:
fd:3c:9a:91:0c:f4:3e:e9:c4:88:51:84:ea:0c:54:cb:cf:12:
56:d5:4e:ef:de:7d:cb:f1:d6:b7:fc:cc:4d:cc:47:eb:fe:0f:
fb:bd:a6:0d:a8:d4:54:6a:5b:17:98:95:3f:21:2b:40:cf:48:
7c:9b:05:6e:db:51:b4:38:c2:11:f7:1a:de:97:6f:96:87:8f:
4d:fc:2e:ec:6c:82:e9:da:10:5f:47:ea:99:ad:c8:42:50:66:
8f:85:c8:e6:4a:32:ca:7a:1a:0b:e2:4a:76:2c:fb:04:c0:a9:
b4:21:96:db:b7:d1:1c:35:7c:a1:dd:bb:cb:32:9a:0b:a1:c8:
14:4b:11:d1:b7:e2:8c:86:74:21:ec:84:47:8c:ee:2a:10:96:
11:76:77:bf:3b:57:3f:a5:5c:1b:8e:b3:66:24:39:bc:56:e9:
bf:86:83:b1:dc:12:49:b7:01:1a:e7:1e:47:dd:16:c6:2e:77:
bc:16:70:11:a8:d4:d9:f9:9b:3f:b6:f3:60:e6:4d:09:15:dc:
8e:96:a7:a5:bb:e9:ab:e5:f8:a0:69:ee:6b:06:3a:54:c3:82:
8d:8d:b6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:22:40 2025 by rpki-client