Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wtGzwY3yM95fg1nzEo2lrnKkxOU.roa
File: wtGzwY3yM95fg1nzEo2lrnKkxOU.roa (raw, json)
Hash identifier: CdEVeFljI9+YdwUzz46C+6QGro587Dbe2T7ygARyVlU=
Subject key identifier: C2:D1:B3:C1:8D:F2:33:DE:5F:83:59:F3:12:8D:A5:AE:72:A4:C4:E5
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0199B8B03A869FF9E43855AE742DAD1BA619
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wtGzwY3yM95fg1nzEo2lrnKkxOU.roa
Signing time: Mon 06 Oct 2025 08:43:01 +0000
ROA not before: Mon 06 Oct 2025 08:43:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25198
IP address blocks: 77.93.133.0/24 maxlen: 24
80.240.86.0/24 maxlen: 24
81.168.105.0/24 maxlen: 24
82.152.176.0/24 maxlen: 24
89.28.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b8:b0:3a:86:9f:f9:e4:38:55:ae:74:2d:ad:1b:a6:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 6 08:43:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2d1b3c18df233de5f8359f3128da5ae72a4c4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3c:6a:f3:a5:f4:47:93:24:b1:d5:5a:2b:6e:
d9:41:56:d9:30:bd:6c:fa:a5:ce:80:15:bb:a9:e1:
65:85:2b:50:40:02:aa:6f:92:08:34:bf:41:ab:5f:
fc:01:89:93:29:5d:48:59:af:f5:ef:3b:2f:51:a4:
bb:2d:9a:0b:4c:26:37:13:2b:5c:95:cc:ab:92:a0:
d3:4e:c5:fc:4f:74:6c:9c:15:73:b6:fe:dd:37:10:
77:19:3c:ce:1e:d2:d4:6a:ae:fd:b7:e6:59:78:02:
77:e0:61:d7:af:9d:d3:fa:f1:c6:17:45:ee:e3:bf:
84:6d:0d:04:46:5e:e6:3c:ec:0d:c5:ea:c9:dc:67:
00:01:06:ff:60:44:78:af:e5:9f:cb:61:e5:ea:ac:
94:e4:30:3d:19:0c:e1:c1:09:fa:2a:ae:bf:be:5e:
b5:69:ae:72:9a:db:1b:7c:41:83:3e:6e:d3:ff:be:
ff:05:d9:70:ae:4f:7e:e7:4c:09:2c:01:67:19:43:
49:7e:23:05:53:f1:b0:59:ee:51:4a:91:a6:13:7d:
3e:1b:ef:a4:df:1f:60:04:3b:8b:45:69:82:c7:3e:
f4:62:fc:88:84:59:6d:16:ff:10:f2:b6:86:50:94:
6e:fd:1c:5d:3b:d2:c6:8e:aa:d9:c0:1b:3d:b1:93:
a3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D1:B3:C1:8D:F2:33:DE:5F:83:59:F3:12:8D:A5:AE:72:A4:C4:E5
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wtGzwY3yM95fg1nzEo2lrnKkxOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.133.0/24
80.240.86.0/24
81.168.105.0/24
82.152.176.0/24
89.28.234.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:57:8f:45:89:11:8f:ec:e4:eb:ca:d8:2e:d1:62:9e:1c:19:
55:37:57:86:3d:cf:29:78:b2:3e:98:23:75:3d:73:2b:bc:71:
55:91:b2:29:0e:66:a3:cc:ac:d7:e5:8f:7c:db:1e:3a:72:9e:
2b:a4:8e:d5:c4:9e:80:f6:61:94:73:72:ff:93:25:d9:70:5c:
12:90:94:45:29:f2:6e:c6:52:70:cb:19:3a:5b:63:89:9b:6f:
b3:1e:1a:fb:db:2d:01:02:96:74:79:93:be:25:37:5c:e9:89:
b2:63:c2:b2:ee:6b:43:be:90:62:b2:b3:7f:01:df:7e:0a:e0:
02:ab:d1:1a:88:c3:8d:61:34:06:dc:32:b4:1f:f1:82:80:58:
15:1c:17:45:6c:fb:2e:5e:50:8a:cf:25:90:72:6d:8b:8f:97:
72:31:cd:9b:82:57:4e:cc:33:2a:32:43:6b:fb:42:6c:7e:ba:
f9:c2:b2:8a:56:40:2f:96:37:c4:59:a2:4e:92:17:57:09:c6:
9d:de:86:77:ea:06:81:bb:05:84:ba:fd:6d:ca:1c:57:8e:78:
99:9e:df:b4:4c:40:1d:48:d4:0e:ba:75:87:15:4c:c4:7e:46:
5a:b7:83:74:27:4b:55:f1:7a:a0:1d:22:d3:52:55:38:69:d0:
02:d4:9f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:28:01 2025 by rpki-client