Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/wIsKAJrVffRqz6laEWhWTAS6tTY.roa
File: wIsKAJrVffRqz6laEWhWTAS6tTY.roa (raw, json)
Hash identifier: V1Qapun8icHJI/Zpv+MiEjbXSsE72DuavneqFQZT08I=
Subject key identifier: C0:8B:0A:00:9A:D5:7D:F4:6A:CF:A9:5A:11:68:56:4C:04:BA:B5:36
Certificate issuer: /CN=5847f1f4f6bcb2a4758ac8a997bc108000e418d1
Certificate serial: 0198307E61CD0B737429D426AF0505ED5462
Authority key identifier: 58:47:F1:F4:F6:BC:B2:A4:75:8A:C8:A9:97:BC:10:80:00:E4:18:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WEfx9Pa8sqR1isipl7wQgADkGNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/wIsKAJrVffRqz6laEWhWTAS6tTY.roa
Signing time: Tue 22 Jul 2025 04:57:25 +0000
ROA not before: Tue 22 Jul 2025 04:57:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198346
IP address blocks: 91.222.52.0/24 maxlen: 24
91.222.53.0/24 maxlen: 24
91.222.54.0/24 maxlen: 24
91.222.55.0/24 maxlen: 24
2a13:e900::/32 maxlen: 32
2a13:e901::/32 maxlen: 32
2a13:e902::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WEfx9Pa8sqR1isipl7wQgADkGNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:30:7e:61:cd:0b:73:74:29:d4:26:af:05:05:ed:54:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5847f1f4f6bcb2a4758ac8a997bc108000e418d1
Validity
Not Before: Jul 22 04:57:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c08b0a009ad57df46acfa95a1168564c04bab536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:67:da:ac:ef:ef:7e:54:e0:e1:a1:31:13:75:
9d:99:a8:b3:be:6c:5a:0d:de:e3:80:24:ec:d4:ab:
68:35:69:ff:ea:3d:00:3f:94:32:c2:e6:0d:7d:f4:
54:12:d7:5a:fb:d7:5f:b7:27:1c:ca:b3:f9:14:e4:
91:3f:38:35:61:ad:7a:c2:6b:51:26:b4:4a:82:dc:
fd:a7:1d:6b:0c:d9:78:af:b5:f4:3d:14:9f:07:55:
7e:4c:69:4b:e2:c5:32:38:a5:9e:ec:05:bd:b2:d3:
41:c7:c0:83:9b:35:e4:6d:5a:99:33:8b:7c:7a:69:
3e:ac:9c:30:02:54:6b:7f:65:dc:02:73:17:f1:a6:
91:2d:b7:2b:ba:02:fa:f8:14:6d:da:e4:4b:97:80:
1f:1c:de:62:8d:e2:13:d5:5d:d6:04:6a:78:94:25:
b8:f2:53:43:12:7b:ea:52:2b:c1:2d:6a:5e:53:5e:
25:8e:0a:34:38:64:52:ed:49:ac:dc:2e:a7:ea:e1:
14:94:da:c9:0f:de:af:91:a2:04:aa:6e:3f:93:3e:
39:2c:5a:a7:c9:b1:e0:83:d9:42:a6:d7:6b:63:ff:
fc:66:27:55:4a:58:1d:b1:0c:76:c2:92:3c:cb:29:
e6:66:2b:51:c7:6c:5e:4c:be:45:ca:1c:7a:85:80:
be:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8B:0A:00:9A:D5:7D:F4:6A:CF:A9:5A:11:68:56:4C:04:BA:B5:36
X509v3 Authority Key Identifier:
keyid:58:47:F1:F4:F6:BC:B2:A4:75:8A:C8:A9:97:BC:10:80:00:E4:18:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WEfx9Pa8sqR1isipl7wQgADkGNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/wIsKAJrVffRqz6laEWhWTAS6tTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.52.0/22
IPv6:
2a13:e900::-2a13:e902:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8a:bb:e4:61:a2:f2:af:9e:61:11:44:14:2b:7f:79:6c:f5:6a:
77:75:bb:79:46:a2:22:9c:22:98:19:e5:3d:f1:fe:88:53:98:
d3:59:3f:e8:ec:84:63:45:88:24:98:0b:70:3f:e1:e9:bd:27:
25:d6:55:ea:89:fa:53:43:6f:cb:c1:13:42:78:fc:f7:07:93:
db:22:d3:2c:4a:f3:39:60:bf:55:1e:8f:51:3f:29:a7:b9:6a:
70:df:17:9f:b4:ce:04:24:16:c7:fe:95:de:e5:da:97:be:05:
af:47:fb:cc:80:51:b2:a4:70:a3:fb:8e:01:39:ea:a4:a7:c9:
e5:24:e7:33:90:25:44:ef:1f:11:93:a2:82:d3:d8:a7:28:d9:
a6:11:79:a8:ba:88:3f:9d:aa:76:9e:89:27:d8:f7:d9:97:73:
50:3c:bf:cd:71:ac:60:7f:03:f9:45:e7:10:31:17:b8:17:30:
c7:73:c9:71:3f:21:bc:12:27:7e:ed:c9:d6:73:de:a4:85:bf:
3d:1e:f1:5a:77:23:41:8b:91:1c:6b:76:b7:51:55:1f:0d:49:
7f:a6:0f:83:64:09:f0:b1:20:08:4c:12:9c:e4:19:73:cc:6c:
5f:9d:40:a9:65:90:89:87:ac:1e:33:ad:53:02:64:35:3a:e2:
84:dc:16:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:27:50 2025 by rpki-client