Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/KPseffVdCWeygtmk-dG_AUjlM4A.roa
File: KPseffVdCWeygtmk-dG_AUjlM4A.roa (raw, json)
Hash identifier: PglISf8xG9mSmvlQ5yeQQD6r2gzqm9SFL3qZh316uoM=
Subject key identifier: 28:FB:1E:7D:F5:5D:09:67:B2:82:D9:A4:F9:D1:BF:01:48:E5:33:80
Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Certificate serial: 019A54BC8AA11C70C7F733FC74582880578D
Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/KPseffVdCWeygtmk-dG_AUjlM4A.roa
Signing time: Wed 05 Nov 2025 15:57:13 +0000
ROA not before: Wed 05 Nov 2025 15:57:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 87.248.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bc:8a:a1:1c:70:c7:f7:33:fc:74:58:28:80:57:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Validity
Not Before: Nov 5 15:57:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28fb1e7df55d0967b282d9a4f9d1bf0148e53380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b8:bc:13:7c:b4:5b:9a:19:a7:6e:4e:ac:df:
02:aa:83:d3:28:36:82:23:56:91:c9:f6:5f:60:fc:
df:f8:30:b0:0d:73:6e:32:55:20:5e:da:1f:71:d5:
d4:1e:5b:8e:15:23:f8:07:63:ae:59:d8:27:07:6e:
e5:6b:55:63:4f:1a:63:42:55:50:94:e5:31:41:61:
0a:c4:32:7c:64:77:c7:c6:25:c6:72:56:53:02:f7:
74:4b:a6:e8:31:06:69:a0:72:2e:74:05:29:f5:9a:
12:ea:1f:64:22:4e:5f:8e:3d:7f:c1:33:fe:a2:95:
e9:49:3a:b1:8a:1c:73:21:d2:61:0e:18:c3:99:04:
b2:46:62:5e:54:bd:01:01:87:a3:87:34:ab:bd:ac:
f2:af:e0:20:0e:c5:20:03:67:8a:4a:34:ca:69:6a:
08:57:6b:bd:65:43:f2:6d:5f:33:a4:24:aa:0d:b4:
15:97:b9:c5:13:5c:41:d6:da:fc:35:ef:80:b3:10:
c3:4d:50:03:ac:b0:9d:8c:12:46:1a:89:00:06:7a:
9a:59:b0:0c:95:03:96:cf:ad:71:a7:ab:60:8d:40:
c4:fe:0b:7a:06:49:65:d6:92:44:05:1b:b2:b0:bc:
0e:04:d9:35:0f:9b:7e:5f:cd:6b:ce:ea:ee:71:3c:
94:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FB:1E:7D:F5:5D:09:67:B2:82:D9:A4:F9:D1:BF:01:48:E5:33:80
X509v3 Authority Key Identifier:
keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/KPseffVdCWeygtmk-dG_AUjlM4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.134.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:cd:45:ae:b1:2a:d6:e1:5e:22:bc:eb:ab:30:9c:b4:37:35:
9d:86:24:bf:e1:05:27:88:e2:94:1e:7a:8c:24:71:57:84:ea:
42:30:ef:57:66:48:b6:de:20:73:ae:5e:d0:f2:79:02:e5:c2:
98:9f:46:33:61:42:61:7a:7b:ba:58:a0:63:c0:5a:3f:1e:c2:
c9:2d:d9:b6:a9:42:e1:09:79:29:d5:f1:67:f5:97:b2:6c:e6:
03:74:50:16:e1:b3:f4:b9:ab:f5:4a:e0:9f:be:5f:a8:b9:c2:
ca:2e:39:8f:d7:c0:0b:e7:fc:cf:3b:b9:28:4e:f0:27:8f:e9:
ca:1e:93:90:b1:1d:1a:2c:0c:b0:bf:e6:51:07:64:b4:64:3d:
bc:db:d6:25:94:18:22:1c:6f:b4:e5:df:87:ce:e7:26:44:db:
95:81:cf:88:ab:07:d1:4b:3b:ea:39:ed:3d:bf:6c:a3:fb:6c:
f4:ee:e0:9e:66:36:1a:ea:f3:ac:c0:14:16:7c:95:a6:0a:af:
74:41:49:95:fb:7d:88:3a:ab:5a:c3:9c:b1:f7:8c:d5:c9:ed:
31:59:b9:94:bd:59:b6:95:aa:6d:18:75:6d:d7:7f:b0:4c:1d:
78:23:c5:2c:99:47:4b:21:77:e3:a7:8c:cc:2a:19:f3:50:24:
76:c2:24:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 11:42:42 2025 by rpki-client