Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/wHbZyzXG2oTwKSsrj1pETQ_DcTU.roa
File: wHbZyzXG2oTwKSsrj1pETQ_DcTU.roa (raw, json)
Hash identifier: 49IYyocP4YGAaKauaepHwxpuEkb9L27DPoNPiAyWcVI=
Subject key identifier: C0:76:D9:CB:35:C6:DA:84:F0:29:2B:2B:8F:5A:44:4D:0F:C3:71:35
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01980A4F67B97D95B47AD77153F940A1A0D4
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/wHbZyzXG2oTwKSsrj1pETQ_DcTU.roa
Signing time: Mon 14 Jul 2025 19:00:32 +0000
ROA not before: Mon 14 Jul 2025 19:00:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214208
IP address blocks: 194.61.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0a:4f:67:b9:7d:95:b4:7a:d7:71:53:f9:40:a1:a0:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jul 14 19:00:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c076d9cb35c6da84f0292b2b8f5a444d0fc37135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:99:fb:e6:24:72:4c:73:84:db:a0:0d:95:f2:
df:25:6b:c0:1d:7b:0c:91:4c:b6:7b:a3:d1:0a:11:
3b:96:1e:7e:ed:65:47:84:13:89:a0:7b:84:e0:53:
08:48:e7:2d:98:72:d7:18:cb:16:0f:f1:1f:d0:13:
47:c3:29:0f:dc:74:28:93:75:dd:2e:fe:82:13:c3:
58:02:f0:fb:7a:b6:8b:29:07:d4:ab:de:a7:12:95:
1b:0c:2f:a3:fa:0e:47:4e:af:b9:29:df:d8:e5:54:
d2:3c:3f:9b:7b:37:b3:f8:3d:a1:b8:c9:59:10:41:
63:23:93:64:bd:26:40:3c:a5:3d:b8:88:62:9d:bd:
bb:37:c2:40:84:74:b7:6e:77:ce:e2:1a:f6:6f:09:
66:ef:b6:7c:fb:6b:da:64:7c:ae:da:fd:9f:77:2b:
0a:ea:e1:8e:7e:da:bf:be:fa:6c:f3:ab:a2:3d:2b:
24:d6:a7:82:48:a6:47:b3:93:5b:27:2c:fd:c2:ac:
8d:87:56:9d:d5:85:d5:95:44:88:22:b8:32:0c:d6:
1e:dc:ad:e2:77:49:6e:57:df:f4:80:1e:00:a8:90:
db:05:53:ec:76:ed:a5:75:30:33:77:38:e1:e9:2f:
2f:7e:0e:1a:1f:ba:de:a9:dc:c0:b8:2b:b6:d2:b8:
2a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:76:D9:CB:35:C6:DA:84:F0:29:2B:2B:8F:5A:44:4D:0F:C3:71:35
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/wHbZyzXG2oTwKSsrj1pETQ_DcTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.72.0/24
Signature Algorithm: sha256WithRSAEncryption
42:82:46:b8:ae:8c:41:7b:f6:71:e0:33:e3:a4:64:d1:fc:8e:
a7:3e:8e:63:e6:cc:3c:16:a1:78:94:22:78:72:be:dc:eb:d1:
60:f0:b7:d9:e5:2a:90:65:4e:a5:a9:6e:de:f1:04:ec:9c:f8:
0e:db:39:a1:c1:e6:dc:d6:c2:b1:54:bb:9f:f6:a8:2a:d5:c5:
39:a5:e0:2e:8f:c8:1d:9d:2a:d5:81:b5:2d:55:df:71:72:8d:
b4:f4:50:75:5a:fa:3b:34:1a:55:99:6a:6d:b6:46:b7:98:10:
f2:35:68:90:16:2d:fd:df:c5:2d:57:da:79:77:25:35:4f:72:
36:32:d3:ec:20:14:06:2b:b7:22:49:a7:cc:52:02:ae:ef:2c:
fc:a3:25:f1:20:96:14:75:70:8c:b4:90:4a:40:8c:a0:18:2f:
12:1c:fa:e9:86:c6:26:69:74:5c:c4:0a:1f:8b:76:be:ba:2b:
d9:80:0e:61:2c:ca:30:56:4a:2c:59:4d:cc:c6:03:0b:3f:ef:
d2:31:7c:13:fb:38:17:3c:43:92:84:55:bd:03:8f:66:42:36:
da:60:f3:ba:5b:0c:6c:9c:de:62:4f:c8:49:2c:04:86:ce:6f:
3c:18:8c:cc:39:20:0e:2a:8a:5e:4f:fd:c6:58:cf:15:19:a4:
54:10:4d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:44:24 2025 by rpki-client