Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/KFM6Xxb4yGnXw8_bU_5u9NFp1Jw.roa
File: KFM6Xxb4yGnXw8_bU_5u9NFp1Jw.roa (raw, json)
Hash identifier: FzqITUktotdSEgzJPKi/MbN0jwrtNR+ishuw7Jc2ADw=
Subject key identifier: 28:53:3A:5F:16:F8:C8:69:D7:C3:CF:DB:53:FE:6E:F4:D1:69:D4:9C
Certificate issuer: /CN=17acdf6b370cf104c872cc4dbaeb7371b2f7c68a
Certificate serial: 019759623568CBB7ECCCF5956965CD09953C
Authority key identifier: 17:AC:DF:6B:37:0C:F1:04:C8:72:CC:4D:BA:EB:73:71:B2:F7:C6:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F6zfazcM8QTIcsxNuutzcbL3xoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/KFM6Xxb4yGnXw8_bU_5u9NFp1Jw.roa
Signing time: Tue 10 Jun 2025 10:28:17 +0000
ROA not before: Tue 10 Jun 2025 10:28:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205289
IP address blocks: 2.57.192.0/22 maxlen: 22
185.222.244.0/22 maxlen: 22
2a14:d400::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/F6zfazcM8QTIcsxNuutzcbL3xoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:62:35:68:cb:b7:ec:cc:f5:95:69:65:cd:09:95:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17acdf6b370cf104c872cc4dbaeb7371b2f7c68a
Validity
Not Before: Jun 10 10:28:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28533a5f16f8c869d7c3cfdb53fe6ef4d169d49c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:81:be:4f:c9:48:2b:80:eb:16:78:09:5c:d0:
9d:e4:2a:88:6a:5c:10:b4:c7:26:5d:b8:b4:88:11:
2f:bb:ee:b7:95:e6:f0:d8:b9:48:f2:b8:4d:75:49:
80:54:d7:ee:c3:ca:86:a0:28:67:e8:61:94:ed:15:
ac:88:27:6f:5d:bd:a9:5f:27:92:eb:aa:02:e7:c6:
03:12:92:c0:96:35:65:fd:df:38:e2:50:1d:8c:46:
e2:b4:c9:14:7d:20:4f:4d:32:28:fd:ea:99:ae:31:
95:f8:c2:95:25:91:be:31:69:f9:64:b3:17:e7:e3:
0c:d1:71:d6:bc:7c:b4:4e:10:6a:f8:45:ae:11:83:
46:88:48:de:13:86:22:36:ba:cd:bc:5b:b9:4a:d1:
d6:b3:1d:a3:32:72:20:c6:16:fa:8b:3d:41:72:8a:
99:e6:52:72:a2:9a:c1:41:e9:c8:32:5e:21:12:9d:
c1:5a:28:60:d0:d5:d3:b7:b2:ba:21:07:b4:97:2d:
1b:dd:6e:4d:57:9a:e4:37:96:ee:17:e2:62:85:d5:
d8:ce:05:af:2c:d5:73:94:0c:20:b3:7b:63:74:0f:
0f:6b:02:d8:ac:11:44:6d:e9:03:60:b3:9c:4f:82:
b7:2c:ab:c2:4a:d6:15:21:ff:21:a8:0a:f4:af:ac:
35:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:53:3A:5F:16:F8:C8:69:D7:C3:CF:DB:53:FE:6E:F4:D1:69:D4:9C
X509v3 Authority Key Identifier:
keyid:17:AC:DF:6B:37:0C:F1:04:C8:72:CC:4D:BA:EB:73:71:B2:F7:C6:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6zfazcM8QTIcsxNuutzcbL3xoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/KFM6Xxb4yGnXw8_bU_5u9NFp1Jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.192.0/22
185.222.244.0/22
IPv6:
2a14:d400::/29
Signature Algorithm: sha256WithRSAEncryption
91:46:bc:8c:f2:e1:b3:d6:cf:27:99:39:f1:c9:ea:8b:20:f3:
1a:ba:90:6d:30:a8:b0:89:af:9d:07:7e:3f:b1:b4:fd:8f:40:
f7:14:0f:41:dc:cb:d8:7d:b7:63:45:0e:ae:d7:56:6b:62:29:
8a:07:15:a7:92:46:fa:51:50:e5:c8:97:e1:9b:00:45:04:ad:
8f:bf:ed:f7:18:84:d8:2d:c3:6a:db:01:41:ff:9f:74:51:70:
f0:da:f3:85:df:9b:d8:7d:ed:73:3b:9d:86:fc:a5:2c:c8:e6:
7e:63:49:31:b2:39:49:a6:6e:4d:f2:15:b9:6f:ea:fb:b5:10:
db:11:60:e3:ae:e7:0e:81:a3:a7:0b:0f:dd:9e:d3:5e:0f:92:
e5:98:e8:58:e0:9f:a2:47:92:38:0c:57:94:f1:a3:2b:ff:9b:
a2:fe:b1:e0:73:93:d8:32:7d:d0:b6:88:cc:d5:f0:25:06:94:
cc:76:b2:c1:e1:59:98:d2:82:27:34:8f:ac:4b:a6:4b:51:e5:
c9:2e:1d:6e:08:24:07:3c:b6:9d:74:2e:28:75:6b:f3:54:8a:
9f:68:ef:44:d2:ee:de:86:9f:89:d8:ab:72:6d:b3:b2:ef:50:
dd:02:e6:d0:bd:13:3b:5f:28:84:44:e4:de:04:62:ed:5f:c7:
61:00:4c:4c
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZdZYjVoy7fszPWVaWXNCZU8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3YWNkZjZiMzcwY2YxMDRjODcyY2M0ZGJhZWI3MzcxYjJm
N2M2OGEwHhcNMjUwNjEwMTAyODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODUzM2E1ZjE2ZjhjODY5ZDdjM2NmZGI1M2ZlNmVmNGQxNjlkNDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oG+T8lIK4DrFngJXNCd5CqIalwQ
tMcmXbi0iBEvu+63lebw2LlI8rhNdUmAVNfuw8qGoChn6GGU7RWsiCdvXb2pXyeS
66oC58YDEpLAljVl/d844lAdjEbitMkUfSBPTTIo/eqZrjGV+MKVJZG+MWn5ZLMX
5+MM0XHWvHy0ThBq+EWuEYNGiEjeE4YiNrrNvFu5StHWsx2jMnIgxhb6iz1BcoqZ
5lJyoprBQenIMl4hEp3BWihg0NXTt7K6IQe0ly0b3W5NV5rkN5buF+JihdXYzgWv
LNVzlAwgs3tjdA8PawLYrBFEbekDYLOcT4K3LKvCStYVIf8hqAr0r6w16wIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFChTOl8W+Mhp18PP21P+bvTRadScMB8GA1UdIwQY
MBaAFBes32s3DPEEyHLMTbrrc3Gy98aKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjZ6ZmF6Y004UVRJY3N4TnV1dHpjYkwzeG9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8wZjI1Y2EtNzM0YS00MzJhLThkNDYt
ZGZjODVhZTM3OWQ0LzEvS0ZNNlh4YjR5R25YdzhfYlVfNXU5TkZwMUp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8wZjI1Y2EtNzM0YS00MzJhLThkNDYtZGZjODVhZTM3OWQ0
LzEvRjZ6ZmF6Y004UVRJY3N4TnV1dHpjYkwzeG9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCAjnAAwQC
ud70MA0EAgACMAcDBQMqFNQAMA0GCSqGSIb3DQEBCwUAA4IBAQCRRryM8uGz1s8n
mTnxyeqLIPMaupBtMKiwia+dB34/sbT9j0D3FA9B3MvYfbdjRQ6u11ZrYimKBxWn
kkb6UVDlyJfhmwBFBK2Pv+33GITYLcNq2wFB/590UXDw2vOF35vYfe1zO52G/KUs
yOZ+Y0kxsjlJpm5N8hW5b+r7tRDbEWDjrucOgaOnCw/dntNeD5LlmOhY4J+iR5I4
DFeU8aMr/5ui/rHgc5PYMn3QtojM1fAlBpTMdrLB4VmY0oInNI+sS6ZLUeXJLh1u
CCQHPLaddC4odWvzVIqfaO9E0u7ehp+J2KtybbOy71DdAubQvRM7XyiEROTeBGLt
X8dhAExM
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:53:57 2025 by rpki-client