Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/kp_t2mUnLryJw11YmKwxOm7IQHE.roa
File: kp_t2mUnLryJw11YmKwxOm7IQHE.roa (raw, json)
Hash identifier: F49sITp2KcbZEPrkZeZT9bvZdPtOyIAvyIRPwaqO1J8=
Subject key identifier: 92:9F:ED:DA:65:27:2E:BC:89:C3:5D:58:98:AC:31:3A:6E:C8:40:71
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01985534E11C165DB87B96B2864B0F357573
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/kp_t2mUnLryJw11YmKwxOm7IQHE.roa
Signing time: Tue 29 Jul 2025 08:03:05 +0000
ROA not before: Tue 29 Jul 2025 08:03:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137517
IP address blocks: 82.152.12.0/24 maxlen: 24
213.130.138.0/24 maxlen: 24
213.218.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:34:e1:1c:16:5d:b8:7b:96:b2:86:4b:0f:35:75:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 29 08:03:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=929fedda65272ebc89c35d5898ac313a6ec84071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1a:e9:85:70:33:76:22:ff:eb:54:e3:44:f3:
4d:2a:b9:3a:2c:bf:53:e0:95:0e:19:32:7c:e8:6e:
73:2d:2a:4f:c6:67:0e:12:33:59:20:f2:22:07:8e:
bd:23:79:32:64:ec:5c:a3:53:40:d3:9b:25:3a:7f:
24:0c:e1:fa:23:19:dc:59:16:25:6e:a0:22:69:26:
e0:84:29:44:2b:15:3c:44:36:fb:cb:66:d3:b7:cb:
9c:a0:f7:59:46:a8:61:ef:41:52:53:26:56:d3:a4:
3b:d6:94:fa:26:07:80:b8:4f:48:08:ca:e6:1b:f7:
7c:da:e1:15:0b:41:3f:55:55:7c:7f:71:f6:df:e7:
a2:4f:a5:e8:65:83:d0:f4:07:46:e5:ed:7e:b4:75:
bf:2f:b3:33:75:9e:69:3e:70:31:38:9c:df:2a:be:
27:3b:f5:be:95:d5:fd:bc:91:5d:92:4a:f2:72:cb:
34:18:e2:58:7f:50:0c:34:57:8e:bc:af:20:22:ac:
22:70:ab:e2:80:b4:06:cf:31:2c:69:ed:3b:c6:36:
8b:12:ee:30:70:fe:d4:c2:23:77:d0:64:00:6b:4b:
50:87:97:20:47:d0:81:66:e6:50:f9:e0:ac:57:31:
f2:13:15:67:08:c7:bc:d7:fc:03:7e:49:4a:c3:c0:
d6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9F:ED:DA:65:27:2E:BC:89:C3:5D:58:98:AC:31:3A:6E:C8:40:71
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/kp_t2mUnLryJw11YmKwxOm7IQHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.12.0/24
213.130.138.0/24
213.218.224.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:0e:33:6b:5d:a0:d4:6a:ef:67:1a:4a:e8:c3:91:17:d4:64:
18:c6:82:12:77:d2:98:6e:1c:27:bd:94:ed:e6:13:78:eb:b6:
16:0d:42:38:0f:d2:c6:57:09:da:78:58:bd:bc:51:6a:97:fa:
73:bc:1c:9b:c3:8f:99:86:8e:7e:d8:13:1c:6b:89:dd:c5:46:
00:d6:16:5f:78:21:dc:af:87:ae:ad:7a:2f:02:c4:65:b5:7d:
61:91:71:5f:02:a3:fe:2d:da:07:ee:07:9b:ea:b9:46:5b:e0:
b1:6e:e2:e1:7a:f3:01:14:0e:a9:2b:fa:b5:8e:a8:b7:a8:6f:
34:e1:9e:99:d7:27:49:6c:4c:aa:e2:cc:1e:2f:0e:55:08:27:
eb:32:da:8e:72:25:db:55:09:bd:e0:03:8b:4d:7a:50:ac:96:
87:98:2d:5e:11:be:ea:72:61:d2:fe:58:63:40:76:55:f6:e3:
fb:e3:ec:45:12:92:2d:80:2b:00:cd:4e:db:ee:8e:73:0e:4c:
59:13:70:a9:50:11:c4:83:52:55:11:be:c1:d8:04:8b:4f:e2:
51:84:2e:8b:1a:cc:59:e9:41:23:cb:0c:a2:8e:fb:f9:9b:79:
99:9a:ea:5e:77:5e:16:7c:53:68:24:c5:d6:5b:ee:91:8c:28:
de:b5:96:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:26 2025 by rpki-client