Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/K1YVJlHcPkrvyly_yWAdk3Dvnxo.roa
File: K1YVJlHcPkrvyly_yWAdk3Dvnxo.roa (raw, json)
Hash identifier: MPnb9N7UkomJ9P+V+pIw5n5BQ/plMrrPkuECb2IegXo=
Subject key identifier: 2B:56:15:26:51:DC:3E:4A:EF:CA:5C:BF:C9:60:1D:93:70:EF:9F:1A
Certificate issuer: /CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
Certificate serial: 01986B1843DAA4F5C66F8CC6A345049872DD
Authority key identifier: 4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/K1YVJlHcPkrvyly_yWAdk3Dvnxo.roa
Signing time: Sat 02 Aug 2025 14:03:28 +0000
ROA not before: Sat 02 Aug 2025 14:03:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 85.234.101.0/24 maxlen: 24
85.234.110.0/24 maxlen: 24
185.154.192.0/24 maxlen: 24
185.154.193.0/24 maxlen: 24
185.154.194.0/24 maxlen: 24
185.154.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:6b:18:43:da:a4:f5:c6:6f:8c:c6:a3:45:04:98:72:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
Validity
Not Before: Aug 2 14:03:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b56152651dc3e4aefca5cbfc9601d9370ef9f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c0:92:08:8b:3a:94:e7:55:67:5d:a1:ab:93:
ab:c3:c3:95:fc:0f:77:7b:4a:a3:e6:06:c0:e4:78:
b4:d6:b8:6c:a8:9d:a1:8d:95:01:c3:e0:d9:cb:bc:
9b:24:ed:bf:ca:91:37:7f:ed:f2:4f:dd:48:45:08:
19:7e:cb:20:33:d1:3a:30:89:b7:c0:47:ce:d7:d7:
8d:d5:5f:c6:6c:78:ca:74:43:ed:b7:d4:79:35:77:
20:dc:b3:11:f1:46:54:0e:84:c5:9e:60:93:4b:98:
d0:8e:70:d6:15:5c:f8:c2:f9:28:f6:4d:64:15:9b:
81:d1:0c:ce:df:b4:b2:88:6c:b5:35:db:73:16:dd:
f3:ab:16:64:f7:8e:44:28:89:b3:0d:0f:69:0d:2d:
7d:6d:5c:29:a4:1b:de:2f:00:c0:d1:69:fa:ea:c1:
b6:43:8c:1f:9e:8f:46:05:53:89:d1:90:c7:8a:a3:
c8:ff:6a:d7:3f:6b:3e:06:46:0a:b7:fe:b8:53:d4:
2a:cd:ef:ac:28:bf:66:57:a7:0b:54:09:20:5e:10:
f9:20:5e:2c:1b:9e:b3:e8:3d:00:b0:7b:a1:02:6e:
5e:1c:99:cb:66:29:8c:bb:a8:51:44:26:06:c0:94:
65:02:6b:62:e4:d9:de:cf:74:0d:64:4b:2b:60:5e:
ea:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:56:15:26:51:DC:3E:4A:EF:CA:5C:BF:C9:60:1D:93:70:EF:9F:1A
X509v3 Authority Key Identifier:
keyid:4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/K1YVJlHcPkrvyly_yWAdk3Dvnxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.234.101.0/24
85.234.110.0/24
185.154.192.0/22
Signature Algorithm: sha256WithRSAEncryption
37:cc:51:59:ee:37:1d:1c:db:15:13:3f:c5:f6:e4:be:a0:55:
06:02:44:7d:35:90:8c:0e:50:53:b5:14:53:ef:15:b0:5c:ad:
03:78:a6:4c:56:25:37:4b:71:4b:61:19:0d:b0:8a:b9:76:3f:
53:94:9c:4a:6f:25:c6:be:53:9e:df:7d:76:54:6a:f5:92:7c:
72:c9:31:a4:4f:47:77:51:8f:65:3a:82:2c:a8:28:0f:c3:c0:
78:2d:45:82:41:fb:a9:d2:d3:2c:ec:34:31:5e:33:b3:db:49:
6d:fb:89:da:2b:2b:a3:91:48:95:ed:91:e8:12:fc:dc:f8:eb:
87:8f:49:73:02:a7:b6:2c:e7:cf:af:67:94:60:5f:e7:43:f2:
e1:83:c8:08:17:82:46:cb:e5:50:6a:d7:4c:c8:d8:be:b2:69:
74:3f:cc:2d:19:f6:96:80:a5:6a:dc:31:72:e4:d3:75:fd:44:
60:5b:1c:9c:9e:d4:7f:58:69:e5:ab:9e:09:64:e0:bc:30:fb:
15:b5:10:58:b4:09:67:9f:9f:6b:79:58:8b:e4:93:26:3e:fc:
9c:92:7c:4c:fa:fa:07:83:1a:4a:1c:70:3c:51:96:28:09:83:
6a:5a:a2:b7:46:ea:67:50:bc:b1:92:ac:3b:b4:a6:21:9c:36:
10:4e:3f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:16:57 2025 by rpki-client