Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/Wsal890lGBfSVCv5KTPQ4Iwb9Z8.roa
File: Wsal890lGBfSVCv5KTPQ4Iwb9Z8.roa (raw, json)
Hash identifier: 4sf4D+shg4PxizfTIk0m7V8aFTYIPfkSV1v67RUvT4w=
Subject key identifier: 5A:C6:A5:F3:DD:25:18:17:D2:54:2B:F9:29:33:D0:E0:8C:1B:F5:9F
Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Certificate serial: 01982C050EB65FF340BE44380718D4C6D7FD
Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/Wsal890lGBfSVCv5KTPQ4Iwb9Z8.roa
Signing time: Mon 21 Jul 2025 08:06:25 +0000
ROA not before: Mon 21 Jul 2025 08:06:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214943
IP address blocks: 94.26.88.0/24 maxlen: 24
94.26.105.0/24 maxlen: 24
192.109.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2c:05:0e:b6:5f:f3:40:be:44:38:07:18:d4:c6:d7:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Validity
Not Before: Jul 21 08:06:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ac6a5f3dd251817d2542bf92933d0e08c1bf59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d9:0d:34:d8:53:4f:a6:d7:f2:a8:64:52:03:
47:bd:eb:46:5b:c7:b2:65:eb:7a:bf:9c:d3:14:5c:
49:90:9a:8a:4d:74:34:2c:ef:e1:ae:cf:fd:77:65:
10:a0:b2:39:50:6b:d3:5b:4a:77:4e:45:50:6a:a4:
d6:30:26:04:8b:6c:a3:b8:3c:16:2b:7e:7a:f9:11:
21:ed:be:f5:45:72:88:54:68:e7:c8:a7:e7:84:c9:
51:7d:9c:b2:72:7b:38:d8:96:d7:11:47:64:2d:1a:
3e:8c:ff:d0:6d:9b:18:9f:ea:a0:db:60:7e:3e:db:
d3:20:5c:80:2e:50:7a:2a:c1:f4:8f:3a:52:92:01:
15:41:47:36:ab:47:a9:5f:3b:86:46:4b:30:e1:95:
c5:19:48:56:03:f6:6d:4b:76:c6:55:15:17:1b:e9:
d5:58:03:95:08:0d:6f:95:7f:f2:49:a4:22:9c:63:
77:93:7a:29:99:16:b5:85:a5:2f:38:20:d8:e0:41:
64:f8:a9:88:47:59:88:72:96:55:ab:35:8f:84:63:
b9:df:de:61:d6:f0:64:46:a4:1f:3b:b9:cc:e0:4e:
f7:40:62:65:91:70:0b:08:0a:d4:be:77:ec:00:1b:
af:74:f0:ef:29:25:7e:55:ec:0e:ff:77:c9:49:de:
20:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C6:A5:F3:DD:25:18:17:D2:54:2B:F9:29:33:D0:E0:8C:1B:F5:9F
X509v3 Authority Key Identifier:
keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/Wsal890lGBfSVCv5KTPQ4Iwb9Z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.26.88.0/24
94.26.105.0/24
192.109.138.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:cd:df:ce:79:f0:d3:55:f5:71:e0:0d:9a:4c:97:1c:03:78:
6d:88:d5:df:ba:02:db:03:fe:05:69:03:0c:fb:8c:4e:37:e9:
e4:e6:a4:54:fc:56:77:ec:40:1c:32:28:7d:0a:ec:ee:84:8e:
98:2e:92:10:db:0b:df:55:48:ac:ee:15:c6:e0:02:01:7e:85:
f5:d5:44:67:ed:5c:25:39:e1:fe:0c:9b:eb:98:cd:76:bd:7c:
5e:8c:f6:c5:62:ae:aa:34:37:65:00:66:3f:1a:74:5c:e9:36:
fc:4a:2e:54:1a:64:ed:fa:d6:32:3d:69:22:6d:d0:42:ac:66:
aa:d3:84:2b:7d:95:a9:e1:d4:17:61:10:0e:61:f0:30:2c:97:
ba:46:30:a6:1d:f1:f5:9c:b1:45:72:78:ac:1a:e8:15:bf:ab:
2c:fe:2b:1c:42:35:84:e8:fe:f9:23:77:6a:92:36:04:02:d2:
18:a9:ad:31:28:a3:bd:e2:a9:45:1c:30:b7:5e:1d:51:7b:74:
20:f1:51:8a:fd:8b:c8:cc:69:a4:59:2c:5a:f7:e5:e7:17:56:
80:26:89:40:09:b5:0b:c4:29:73:0b:d4:8f:14:bf:39:0f:6c:
67:8e:24:a5:6f:ce:86:0e:72:4f:85:e6:5d:ce:99:52:b0:5a:
b2:28:c0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:29:24 2025 by rpki-client