Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/_KyJrgx1hGK_hXMTclXxlPIPZn8.roa
File: _KyJrgx1hGK_hXMTclXxlPIPZn8.roa (raw, json)
Hash identifier: I4QZAN/FDUNiksKSSMZ5KyrS7bRdtRCczdlGK9iHX0c=
Subject key identifier: FC:AC:89:AE:0C:75:84:62:BF:85:73:13:72:55:F1:94:F2:0F:66:7F
Certificate issuer: /CN=20820f796481ac0e9637c962414597b1fe227c24
Certificate serial: 01980EB6F7BB7D8DA3FA6C4A41743764BFC5
Authority key identifier: 20:82:0F:79:64:81:AC:0E:96:37:C9:62:41:45:97:B1:FE:22:7C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/_KyJrgx1hGK_hXMTclXxlPIPZn8.roa
Signing time: Tue 15 Jul 2025 15:32:08 +0000
ROA not before: Tue 15 Jul 2025 15:32:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203483
IP address blocks: 185.11.94.0/24 maxlen: 24
185.11.95.0/24 maxlen: 24
2a0c:9680:2::/48 maxlen: 48
2a0c:9680:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0e:b6:f7:bb:7d:8d:a3:fa:6c:4a:41:74:37:64:bf:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20820f796481ac0e9637c962414597b1fe227c24
Validity
Not Before: Jul 15 15:32:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fcac89ae0c758462bf8573137255f194f20f667f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4b:f4:40:71:1f:0e:6c:9e:cf:22:c7:4e:b7:
34:62:7b:c0:41:03:bc:bd:a6:73:1b:16:07:49:a6:
8c:3d:ea:da:9d:e6:77:cd:2d:af:81:c6:9a:b9:c6:
6f:aa:e3:e3:d1:b4:17:37:f8:de:5f:63:4d:1a:b2:
c1:16:bd:41:0a:c0:3f:da:1e:68:cd:a8:e4:17:0c:
0a:a0:6e:73:15:7f:48:9a:03:3c:1b:fb:cc:45:a7:
01:ba:98:81:e9:d8:b3:fa:bb:76:98:2b:6c:2d:91:
87:90:6f:ae:c4:5d:4d:fb:08:1f:14:a7:cd:02:4a:
01:1c:a4:3f:5e:eb:dc:a8:c7:97:a3:3d:fb:72:b1:
a9:19:6f:bd:9e:6f:71:64:35:48:48:1d:1f:0e:db:
90:e9:10:fa:fd:32:44:34:95:b0:54:2e:90:8a:39:
f3:1e:39:23:c6:b7:09:6a:86:2e:5e:fc:de:86:1e:
a8:b0:4e:cb:f3:d1:50:6a:bd:b7:b8:64:7a:11:fb:
41:a1:ca:00:33:a4:ab:34:11:5a:1d:76:19:2e:89:
8c:88:65:3b:81:a1:a3:dc:5c:72:56:09:3a:15:83:
e5:db:64:e6:13:bd:c9:31:ef:c3:1b:30:21:21:f9:
05:0f:3e:73:54:d6:04:97:5a:61:13:24:df:27:4d:
16:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AC:89:AE:0C:75:84:62:BF:85:73:13:72:55:F1:94:F2:0F:66:7F
X509v3 Authority Key Identifier:
keyid:20:82:0F:79:64:81:AC:0E:96:37:C9:62:41:45:97:B1:FE:22:7C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/_KyJrgx1hGK_hXMTclXxlPIPZn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.94.0/23
IPv6:
2a0c:9680:2::/47
Signature Algorithm: sha256WithRSAEncryption
91:89:2a:ef:e2:db:b8:1c:58:6b:b5:1c:53:1b:0a:89:a9:50:
0a:e1:bb:b3:63:36:9e:c9:34:12:82:a5:9f:81:05:1d:ad:fd:
c5:5a:44:58:7a:a0:b1:08:1a:25:a7:ad:2f:f9:db:1d:e4:e8:
fa:b0:a2:f8:97:f7:b5:9b:ab:8a:6e:09:24:d1:54:70:ad:ff:
00:87:69:ed:d6:90:00:41:c5:7e:b6:49:cc:20:24:f8:b8:a5:
a7:dd:c4:78:1c:a6:31:06:ac:be:21:88:d4:ed:0c:3b:e7:9f:
13:5e:ad:a7:58:79:f8:bb:c2:eb:a8:63:0d:01:9f:2d:02:38:
34:24:9b:8d:2c:24:00:6f:f6:35:ea:81:41:1f:98:13:77:42:
11:2c:50:d6:0b:13:1e:45:ba:84:c4:46:8f:85:d3:d5:02:a6:
63:61:cd:bb:86:a2:5f:24:d0:8b:7f:92:d3:86:c7:93:a5:16:
62:cb:f3:5b:12:89:c8:83:47:7f:d4:f3:5c:32:c6:f8:26:00:
6e:25:db:d3:9e:b6:03:e2:e4:70:fe:32:06:95:98:71:74:d4:
cc:e2:97:1c:e0:5d:ee:be:c3:6c:2c:cc:6d:80:5e:a6:f8:fe:
b0:04:9a:3d:4b:ac:3d:26:b0:0d:02:f2:b2:e1:80:05:5a:ad:
c8:09:9b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:35:39 2025 by rpki-client