Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/0KNJIwezZb-3FaFJUpqxhGPSa2k.roa
File: 0KNJIwezZb-3FaFJUpqxhGPSa2k.roa (raw, json)
Hash identifier: A4j/zF7WMM+1P8qhcyYitAkcAPo5hxRepqaqzU+Jk9c=
Subject key identifier: D0:A3:49:23:07:B3:65:BF:B7:15:A1:49:52:9A:B1:84:63:D2:6B:69
Certificate issuer: /CN=4982b1719b4fec708ba66b297abe0db08fad0e1e
Certificate serial: 01975EBC896A3A7EEACD4DF7D71A5A918BD6
Authority key identifier: 49:82:B1:71:9B:4F:EC:70:8B:A6:6B:29:7A:BE:0D:B0:8F:AD:0E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/0KNJIwezZb-3FaFJUpqxhGPSa2k.roa
Signing time: Wed 11 Jun 2025 11:25:03 +0000
ROA not before: Wed 11 Jun 2025 11:25:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201026
IP address blocks: 91.240.34.0/24 maxlen: 24
185.85.220.0/22 maxlen: 24
185.85.220.0/23 maxlen: 23
185.85.220.0/24 maxlen: 24
185.85.221.0/24 maxlen: 24
185.85.222.0/24 maxlen: 24
185.85.223.0/24 maxlen: 24
2a05:aec0::/29 maxlen: 29
2a05:aec0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:bc:89:6a:3a:7e:ea:cd:4d:f7:d7:1a:5a:91:8b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4982b1719b4fec708ba66b297abe0db08fad0e1e
Validity
Not Before: Jun 11 11:25:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0a3492307b365bfb715a149529ab18463d26b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d9:d0:75:2e:42:46:c1:73:60:af:3d:d9:f3:
79:6a:c6:70:b2:57:1c:e1:79:ab:56:1d:4d:44:ce:
8f:6c:b5:a2:98:17:75:f6:47:b8:60:6e:46:c4:b0:
17:dc:dd:cf:dc:87:3c:77:fc:84:c9:4c:0c:e6:b7:
80:d9:22:d6:13:a5:32:cb:50:e3:e0:a8:79:18:c5:
cc:e0:6f:73:6b:c4:89:f9:9b:9f:dd:be:cf:d6:ff:
4a:7f:43:bf:ce:de:6d:72:a4:90:1a:f4:fd:c9:d0:
83:8f:f7:cb:9e:62:b4:f5:5c:4c:20:7b:41:91:8e:
f1:0a:aa:42:8d:c2:99:98:31:cd:24:37:13:a7:ca:
c8:2f:ab:8b:55:34:3d:16:1d:16:ff:cb:bd:5a:2b:
73:a9:14:2d:cc:37:8d:86:14:25:d5:77:22:19:46:
90:c4:9c:94:5a:ef:4a:2d:cf:42:56:09:86:be:86:
20:d3:22:97:2a:00:a9:09:d8:25:08:63:4f:94:38:
13:64:9f:a5:56:e1:0b:84:81:60:ec:3a:49:66:46:
aa:b3:62:66:98:d7:2c:60:05:27:17:c0:a1:f5:72:
45:2d:69:8e:a1:7b:fa:f5:95:f8:34:94:7f:c7:7c:
96:c1:f0:fb:9f:ce:4a:ef:59:da:4a:83:bf:a3:6c:
54:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A3:49:23:07:B3:65:BF:B7:15:A1:49:52:9A:B1:84:63:D2:6B:69
X509v3 Authority Key Identifier:
keyid:49:82:B1:71:9B:4F:EC:70:8B:A6:6B:29:7A:BE:0D:B0:8F:AD:0E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/0KNJIwezZb-3FaFJUpqxhGPSa2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.34.0/24
185.85.220.0/22
IPv6:
2a05:aec0::/29
Signature Algorithm: sha256WithRSAEncryption
42:7f:1c:83:31:60:e4:fd:2f:c9:75:23:de:bf:02:1c:c6:b8:
9e:fa:d3:dc:04:ae:c9:cd:d3:e7:d4:ea:9b:c4:32:52:fc:e9:
bd:d1:fb:ef:3e:98:d5:90:ac:92:11:02:f2:c1:62:12:5a:35:
79:69:6f:03:9d:c9:6d:94:4c:ba:8e:f5:f9:1b:95:e7:d3:a4:
88:36:bb:2f:61:b3:86:96:ce:f9:1b:44:e2:5c:f4:ec:70:be:
5a:58:5d:bf:3e:22:61:f6:7f:f5:f0:2a:7a:f5:13:1c:74:d3:
0e:4c:26:cb:5a:07:da:17:14:df:c0:48:dc:26:08:0b:bc:bb:
4a:c8:60:54:6a:b1:6c:20:71:48:11:2b:1e:24:8a:de:30:64:
d2:83:c3:a8:e9:c0:48:11:16:06:cb:d5:22:d4:25:09:29:b0:
d3:d2:8e:bf:c1:86:96:48:db:36:c8:d9:ab:3e:50:4d:26:f0:
03:40:eb:99:1e:07:78:8c:00:ae:8e:74:07:9a:f9:62:74:24:
2d:93:8e:3e:9e:4a:6f:d6:bb:b6:4f:91:bf:db:9b:ec:4a:d8:
68:53:04:15:38:33:75:ab:5a:05:bc:72:c9:5a:89:ad:9d:17:
2d:5c:81:25:fc:cd:31:4c:07:35:8b:d6:81:4b:29:18:93:ee:
38:25:f2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:27:02 2025 by rpki-client