Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/KWVhi7fgtJ1IxHgG78p9PD3RdJ0.roa
File: KWVhi7fgtJ1IxHgG78p9PD3RdJ0.roa (raw, json)
Hash identifier: KDb4m2ieiCCUnfzXPEKnNf6EnbdlGwtT0gW5l38r8FU=
Subject key identifier: 29:65:61:8B:B7:E0:B4:9D:48:C4:78:06:EF:CA:7D:3C:3D:D1:74:9D
Certificate issuer: /CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Certificate serial: 019A268E2D12D84EFB60E85690D8730C71F9
Authority key identifier: CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/KWVhi7fgtJ1IxHgG78p9PD3RdJ0.roa
Signing time: Mon 27 Oct 2025 16:44:03 +0000
ROA not before: Mon 27 Oct 2025 16:44:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136787
IP address blocks: 185.168.158.0/24 maxlen: 24
185.168.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:8e:2d:12:d8:4e:fb:60:e8:56:90:d8:73:0c:71:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Validity
Not Before: Oct 27 16:44:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2965618bb7e0b49d48c47806efca7d3c3dd1749d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0a:aa:20:d5:e7:41:b3:f0:85:4f:77:38:48:
46:3a:ed:59:49:ca:76:5d:f8:a0:8f:ba:43:2f:b2:
92:25:ff:e6:b1:53:2c:18:87:3b:53:87:f5:0a:bf:
c2:bb:0d:b2:10:70:5f:a5:9a:85:94:ac:64:02:dd:
94:33:f2:93:07:5e:ad:b6:62:d5:4e:56:2f:7c:9d:
55:06:43:c1:32:4e:a5:3b:ff:4d:17:c2:26:e1:6a:
ac:9c:9d:17:0f:41:e8:69:5f:70:f8:e6:79:df:46:
ef:29:39:76:32:38:57:7c:8a:50:f6:32:41:2e:a9:
05:0b:f3:67:2d:ed:74:d6:81:c1:f2:95:69:31:c8:
03:58:d8:9a:cb:6a:d1:27:97:c3:4d:cb:90:04:5e:
67:2b:06:51:24:74:a8:c1:c0:74:9f:81:4a:6f:75:
a9:0b:c2:1d:63:c7:8f:f1:07:55:d5:4f:2f:9a:16:
18:4e:33:15:a7:9f:e5:77:b9:a9:42:e5:88:1a:98:
8a:de:9e:55:55:c3:d3:bb:65:3e:e7:d6:ac:86:11:
32:c2:76:72:22:3c:b2:98:d2:03:27:2b:60:9e:af:
e9:b3:16:c3:21:a0:89:80:99:9e:78:33:b5:28:d2:
ec:a3:8c:a0:ca:fd:c0:5c:69:b8:70:d2:3e:7b:d3:
71:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:65:61:8B:B7:E0:B4:9D:48:C4:78:06:EF:CA:7D:3C:3D:D1:74:9D
X509v3 Authority Key Identifier:
keyid:CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/KWVhi7fgtJ1IxHgG78p9PD3RdJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.158.0/23
Signature Algorithm: sha256WithRSAEncryption
24:0f:2b:78:3a:d6:f4:4e:c7:95:4a:62:d5:de:3a:0d:6b:de:
b3:a4:7f:b1:d3:19:1b:ee:77:ea:49:be:62:de:88:18:ec:98:
42:e4:23:d7:08:dd:13:a0:98:95:08:3f:c4:e5:ae:89:ce:f2:
bd:a7:e3:29:e2:88:bd:05:8f:33:df:23:05:5e:34:64:c6:19:
ed:48:25:b7:61:63:c7:cb:78:d6:f1:d7:12:5e:05:54:73:d0:
53:7b:6d:40:f3:72:b6:06:b0:e6:a6:92:41:53:18:af:68:da:
ff:64:5f:09:08:84:fc:28:c5:92:90:82:4a:7e:f2:16:fe:41:
c7:89:5a:7f:42:e6:e9:3d:b8:0c:31:c9:48:fd:3b:5a:da:93:
52:8b:ca:5f:7e:a9:a8:e4:a0:5f:0d:7f:20:14:fa:7f:10:f7:
c9:05:65:ad:fd:8f:fd:b3:af:e2:49:f3:d9:cc:5e:fb:de:b9:
7e:73:15:f1:fe:b0:72:d4:14:b9:1f:49:85:15:17:1f:79:05:
d6:22:ca:3e:7a:78:d4:d1:31:9b:2e:23:af:81:6a:45:eb:67:
cc:0c:d4:06:0b:40:d6:33:14:12:bc:e5:e1:40:5b:b3:54:d9:
e9:af:f8:a2:9e:fc:20:06:d8:5d:90:50:e6:f0:02:24:18:14:
f5:28:96:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:03:16 2025 by rpki-client