Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/WCC9rTSbJ_Cq0gmrQEQG46tRbpQ.roa
File: WCC9rTSbJ_Cq0gmrQEQG46tRbpQ.roa (raw, json)
Hash identifier: VkHV+4ebPs26e57T+NHLP6p9bqcsmEKUplaKOzXFS/4=
Subject key identifier: 58:20:BD:AD:34:9B:27:F0:AA:D2:09:AB:40:44:06:E3:AB:51:6E:94
Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial: 0197E516BF64104D18B692695782158E7EF8
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/WCC9rTSbJ_Cq0gmrQEQG46tRbpQ.roa
Signing time: Mon 07 Jul 2025 13:32:42 +0000
ROA not before: Mon 07 Jul 2025 13:32:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214208
IP address blocks: 188.95.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e5:16:bf:64:10:4d:18:b6:92:69:57:82:15:8e:7e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
Validity
Not Before: Jul 7 13:32:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5820bdad349b27f0aad209ab404406e3ab516e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6e:21:9b:f4:66:ff:55:1c:db:e2:7f:7f:97:
bc:be:3a:3b:ed:f0:09:72:76:d9:69:01:e9:a4:aa:
96:3e:56:9b:83:aa:3c:c8:58:39:f0:08:94:1b:47:
65:30:1d:15:1d:df:23:1c:56:57:f3:e3:cb:4f:5d:
22:f8:b1:eb:4c:f5:3a:23:21:76:e7:97:45:41:10:
c6:7a:1f:cf:5a:4c:68:6c:e4:e3:51:95:c0:1b:e7:
1e:b6:4c:53:37:fe:59:3e:d9:59:8b:50:a5:0f:4f:
4b:d8:ec:5d:1d:30:05:55:52:65:cb:80:b0:6d:21:
c5:b0:88:ac:ec:a1:46:21:27:73:46:f6:35:0a:8d:
11:35:75:0e:b9:8d:b9:51:f6:35:e5:d6:b2:40:76:
9d:0f:bf:95:21:27:be:00:94:fe:c1:f3:98:97:50:
fd:d2:e9:bd:57:cb:95:87:80:67:40:b9:87:da:b6:
55:7c:b7:e6:bb:7c:9c:44:d8:a9:d8:74:1a:f5:41:
ef:51:10:7e:a4:5f:49:c9:88:17:13:7d:5c:32:83:
d1:a3:72:f7:fb:63:95:40:4a:03:2d:09:cf:c4:47:
d8:64:bc:4a:ff:91:c0:b9:60:c7:62:26:93:b3:d4:
ff:c4:50:eb:bd:7a:6e:74:0f:38:b1:1a:61:dc:4a:
1f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:20:BD:AD:34:9B:27:F0:AA:D2:09:AB:40:44:06:E3:AB:51:6E:94
X509v3 Authority Key Identifier:
keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/WCC9rTSbJ_Cq0gmrQEQG46tRbpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.69.0/24
Signature Algorithm: sha256WithRSAEncryption
52:32:18:31:e7:1b:5b:e7:45:15:b0:b6:65:7e:94:56:f8:1a:
fe:53:49:5b:cb:3e:4a:f7:d0:a0:eb:e0:f7:23:0d:ce:d1:03:
a0:31:bf:ad:a8:df:21:43:9f:17:64:51:83:e5:63:93:85:0d:
ee:e6:66:53:44:fb:c2:ba:be:6e:94:4a:a2:8e:02:e6:20:e0:
2e:a8:1f:09:61:5a:c6:7b:9e:5f:18:2c:62:96:ca:fd:79:ec:
9f:09:05:91:a3:76:35:f0:bd:e1:a0:dc:85:9c:9e:04:2f:25:
ff:a2:e6:9f:04:bd:3a:e2:1e:b3:56:cb:51:a8:cb:91:13:b1:
68:bd:2b:8f:15:3c:04:09:ea:22:94:61:b0:22:09:89:8a:fc:
9b:ff:75:d0:76:95:1d:a0:ca:4f:38:92:5c:06:fb:0e:5a:ce:
ae:f9:f2:cc:13:e9:bf:53:ca:cd:d8:63:13:01:5e:3c:e5:03:
b4:3d:50:0f:2e:b1:49:9e:b0:48:9a:83:1d:dd:9f:f0:e9:8e:
ce:98:66:46:9b:fe:25:db:ff:7e:24:0e:7b:7a:b0:68:1f:9b:
eb:a7:13:0e:51:a0:51:d5:9a:7a:dd:66:7a:e1:97:16:ad:27:
25:29:b6:43:f3:94:11:49:2f:79:23:4a:06:95:84:9c:d6:81:
8a:41:14:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:18:47 2025 by rpki-client