Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/W0I5WxQMrOu6TANHFOGcvsplCew.roa
File: W0I5WxQMrOu6TANHFOGcvsplCew.roa (raw, json)
Hash identifier: as8TMPog4cNQstxcdryoIwh9zVe/CWxue8zaTtgppZI=
Subject key identifier: 5B:42:39:5B:14:0C:AC:EB:BA:4C:03:47:14:E1:9C:BE:CA:65:09:EC
Certificate issuer: /CN=380099a81b346f9abcaf26056f5b77094d1cf113
Certificate serial: 0197D66C2C9FBE876C5F439C14B09C214723
Authority key identifier: 38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/W0I5WxQMrOu6TANHFOGcvsplCew.roa
Signing time: Fri 04 Jul 2025 17:11:42 +0000
ROA not before: Fri 04 Jul 2025 17:11:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196726
IP address blocks: 79.173.68.0/22 maxlen: 22
94.243.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d6:6c:2c:9f:be:87:6c:5f:43:9c:14:b0:9c:21:47:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380099a81b346f9abcaf26056f5b77094d1cf113
Validity
Not Before: Jul 4 17:11:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b42395b140cacebba4c034714e19cbeca6509ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:50:a9:f5:cf:8b:f2:b5:e4:2d:e8:8f:60:c8:
23:a3:d5:71:e2:b0:3e:ad:5e:7b:4b:92:29:fe:d9:
a4:82:aa:1b:0a:bb:94:84:54:a4:23:79:b4:f3:c6:
53:df:07:a4:3e:4b:46:3c:88:02:a6:93:55:6e:a1:
81:b8:76:8c:9c:fd:27:ea:b8:da:69:f2:6f:76:b8:
e2:56:f9:24:20:1f:79:dd:ab:ee:ec:3e:3f:45:6b:
1c:81:a7:c6:b2:8c:9e:54:9b:1e:f4:ac:c3:d1:b1:
e0:87:8f:46:d1:9a:df:75:02:d6:dd:bb:3e:93:b6:
22:46:30:43:88:ea:1a:f9:c5:fe:8e:44:1c:f4:71:
da:6a:3c:f8:83:10:ab:69:e9:97:6c:be:83:cc:9e:
50:46:19:78:0f:f4:8e:96:b0:35:20:1c:47:40:b3:
47:0e:c8:ae:03:08:ad:60:84:33:5b:19:61:ca:75:
36:11:d3:0c:9d:be:ea:24:57:f7:58:13:1e:e7:2d:
49:09:0c:ff:86:37:17:1c:22:45:96:32:b8:28:1e:
20:84:3a:ef:b7:7c:79:3d:d9:80:26:65:54:9a:a4:
94:b3:03:85:2c:2c:bf:f3:22:a1:27:fa:e0:97:20:
9a:b8:36:80:c0:2c:13:38:5b:0a:b8:5d:aa:5a:4e:
a8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:42:39:5B:14:0C:AC:EB:BA:4C:03:47:14:E1:9C:BE:CA:65:09:EC
X509v3 Authority Key Identifier:
keyid:38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/W0I5WxQMrOu6TANHFOGcvsplCew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.173.68.0/22
94.243.216.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:f5:74:15:95:f3:eb:47:99:cc:96:87:31:84:9e:cb:5d:25:
ce:63:ac:77:4d:f2:fb:5e:10:25:da:9f:b0:f2:94:b8:a0:21:
32:e0:d0:34:9a:a2:e5:cd:da:c2:71:a8:a5:9c:13:dd:39:8f:
17:e6:9f:be:cd:c3:27:3c:c6:3e:51:31:b5:a5:54:5d:f1:58:
bd:f0:8e:a6:d6:84:83:76:c1:d8:68:a2:c1:8e:bd:4c:0a:c5:
f9:85:15:8c:66:85:b0:dd:1f:5b:58:5e:4d:03:6d:25:07:96:
b2:b4:0c:3b:b9:be:22:ad:c4:bc:25:0e:9a:2c:55:9b:89:37:
83:df:c9:34:f2:8c:ed:02:99:57:23:f7:fc:65:da:16:9b:a9:
97:1c:05:0d:25:9e:0d:20:aa:89:e6:41:e4:fe:f6:0d:21:76:
ff:74:f4:15:ab:73:f9:1f:d7:30:90:cb:b8:bb:fd:cd:cc:16:
c1:fc:1d:c8:c9:76:0e:cf:c9:a1:0c:c4:28:58:67:7b:c0:b6:
9b:9b:b9:eb:b2:91:24:93:66:ea:e4:be:ca:2e:67:54:9b:76:
d6:ee:7b:54:17:44:cd:c9:aa:1d:a3:7f:9f:21:eb:cb:f1:71:
e0:ad:2f:7f:fd:cb:71:dd:55:7d:f8:a1:65:72:00:6f:e5:9d:
8b:b9:5d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 20:43:42 2025 by rpki-client