Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/VWcNwc3eXiIO-NWFBhke_NsoKuw.roa
File: VWcNwc3eXiIO-NWFBhke_NsoKuw.roa (raw, json)
Hash identifier: f3pDRtjEvKBR2tWq+x+PitOC7Ipx15tKzM82SQ3147w=
Subject key identifier: 55:67:0D:C1:CD:DE:5E:22:0E:F8:D5:85:06:19:1E:FC:DB:28:2A:EC
Certificate issuer: /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial: 019803D8AE1795A339B09D0108D3D51500EF
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/VWcNwc3eXiIO-NWFBhke_NsoKuw.roa
Signing time: Sun 13 Jul 2025 12:53:08 +0000
ROA not before: Sun 13 Jul 2025 12:53:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42337
IP address blocks: 46.148.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:03:d8:ae:17:95:a3:39:b0:9d:01:08:d3:d5:15:00:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Validity
Not Before: Jul 13 12:53:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55670dc1cdde5e220ef8d58506191efcdb282aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e2:6e:5c:c3:ee:3b:bd:21:83:06:12:4f:a0:
fe:78:8a:28:f6:71:76:91:d1:ef:ac:36:23:ff:67:
c8:67:2a:c4:c6:1d:23:06:98:5e:92:7c:17:f0:1b:
98:02:ff:fc:74:b3:89:1c:c4:7b:66:b6:69:09:51:
d5:a5:cc:e3:b3:e3:db:1b:58:f1:0b:c6:53:5c:a8:
07:fc:a8:26:46:69:76:c5:f5:c5:03:40:34:9a:1a:
a8:5e:c0:bc:48:4a:47:67:d2:59:da:03:78:59:ee:
dd:aa:1a:e1:48:9e:ae:20:04:e3:c7:4c:16:cb:c4:
91:ef:15:d2:8f:ab:55:f1:e8:fe:96:6d:10:70:dd:
6c:dd:81:64:22:9d:2b:d1:7b:17:36:fc:87:46:85:
dc:bd:af:0a:e0:cf:ce:35:6b:f3:6e:c1:b1:a9:b3:
33:ff:f2:90:3f:5e:91:db:ae:ee:67:3d:48:2c:97:
77:ca:20:2b:62:4c:6f:7e:86:26:cf:2a:fd:4c:7b:
ce:47:76:f4:aa:9b:74:f0:f3:0d:64:73:a6:c4:e0:
0e:7c:6e:b9:fd:8b:a4:7d:d2:cf:b9:f2:26:7b:39:
e6:a8:33:db:7f:08:8c:7d:e2:20:8f:ae:52:ea:63:
cd:0e:9a:a3:c3:9c:e1:13:a1:89:db:b6:2a:89:05:
3f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:67:0D:C1:CD:DE:5E:22:0E:F8:D5:85:06:19:1E:FC:DB:28:2A:EC
X509v3 Authority Key Identifier:
keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/VWcNwc3eXiIO-NWFBhke_NsoKuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.41.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:ea:ba:51:dd:fd:7c:a5:83:c3:18:37:7a:07:fd:9b:2d:43:
e8:55:9b:e9:77:1d:3f:c9:8e:7d:c3:f1:b9:f8:24:4e:8d:93:
f7:0b:63:17:f1:af:64:66:f8:1f:13:af:3f:92:95:9d:45:c8:
49:58:f1:5f:3e:d0:4e:f4:f3:5a:f3:09:3e:be:4a:df:b5:04:
83:8f:9e:e0:f9:d2:0e:9e:ef:5a:d3:f4:fe:be:3a:a6:ab:c7:
70:97:77:3c:f9:31:c9:e4:16:6f:f4:87:6f:94:c5:cf:c1:3e:
1d:21:b2:c0:30:8d:8b:e4:ad:e7:41:92:2b:35:a6:cf:5e:f1:
23:b6:c7:89:10:7a:79:5b:d6:66:49:a3:f4:c7:e5:0d:af:a8:
26:6a:83:68:be:aa:0e:80:b4:fd:17:69:85:f2:fe:b5:c3:ad:
b3:a1:03:5a:9b:00:e9:01:c9:c5:79:c9:6d:f5:eb:6d:fa:bd:
c3:1e:1d:51:49:8e:51:fc:f0:0b:ee:4f:b1:58:d6:0d:28:59:
92:ab:16:e5:1d:a4:35:54:d6:10:32:4e:da:db:ea:d9:26:65:
81:c8:4e:5b:8d:bb:4c:49:ec:c3:1a:c1:b8:13:e0:f1:17:88:
f9:74:1b:e6:64:2d:7b:fe:46:32:bf:25:6a:ba:d0:c4:85:a0:
0f:8a:91:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:24:21 2025 by rpki-client