Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/W1_LeC4T7DrvujyTn3J3YI7-QXI.roa
File: W1_LeC4T7DrvujyTn3J3YI7-QXI.roa (raw, json)
Hash identifier: 0I3vgRjhX0kcMTxTGH5KTcOsn8j2HgujVu/6VCKIjmM=
Subject key identifier: 5B:5F:CB:78:2E:13:EC:3A:EF:BA:3C:93:9F:72:77:60:8E:FE:41:72
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 019822271EC4F5B06D0425FC7BFFB07FFF53
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/W1_LeC4T7DrvujyTn3J3YI7-QXI.roa
Signing time: Sat 19 Jul 2025 10:07:25 +0000
ROA not before: Sat 19 Jul 2025 10:07:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151612
IP address blocks: 85.117.243.0/24 maxlen: 24
185.236.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:22:27:1e:c4:f5:b0:6d:04:25:fc:7b:ff:b0:7f:ff:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jul 19 10:07:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b5fcb782e13ec3aefba3c939f7277608efe4172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6a:33:bd:bf:ac:47:d1:b2:2a:7b:f9:38:a6:
3d:cb:2b:cc:fa:bd:bc:d5:f0:61:6d:82:9d:3c:eb:
68:12:9d:cc:1f:f0:74:7a:c0:b6:a4:de:11:a2:0a:
f6:2d:79:91:90:05:a8:8f:0e:2e:44:ed:b3:a5:86:
eb:e2:5c:89:b7:67:a8:89:6c:54:1e:59:2f:2f:19:
e4:ad:3a:0b:3b:24:e6:f5:f3:20:e0:34:63:1a:59:
d9:48:60:e0:a6:80:99:03:1a:01:cb:4f:fb:ed:c0:
fe:e7:f1:55:a8:11:35:80:94:aa:ca:32:0a:b5:41:
a4:22:02:f9:3a:ca:da:d3:ac:fd:74:a4:58:73:47:
47:70:9c:79:c4:62:38:42:2b:4e:ba:81:e8:e2:bd:
78:dd:22:81:98:96:98:56:7f:79:b7:10:ea:4e:e3:
c9:99:60:db:f3:2d:68:0b:ba:bc:5a:82:2a:7f:c2:
8e:b7:a0:5d:65:4c:ff:b8:82:5c:da:06:ba:82:05:
3d:ed:ea:46:6e:a5:81:e2:5b:b0:0b:eb:b8:31:e5:
eb:ab:f5:65:24:2b:27:2a:e6:46:1a:50:a7:7f:b7:
a0:81:3b:52:62:71:83:36:8a:dc:a8:e3:82:5c:94:
6c:68:f3:19:5d:cf:d4:d2:fd:d9:54:48:2f:c4:46:
d6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5F:CB:78:2E:13:EC:3A:EF:BA:3C:93:9F:72:77:60:8E:FE:41:72
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/W1_LeC4T7DrvujyTn3J3YI7-QXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.243.0/24
185.236.8.0/24
Signature Algorithm: sha256WithRSAEncryption
85:64:92:8c:33:84:2e:10:71:b6:7e:c5:0e:0b:ac:ac:3f:2b:
ac:a9:4a:a2:7b:43:e2:bb:23:1f:09:b9:88:f0:36:99:d0:47:
b6:59:71:72:bc:fb:79:05:c1:da:14:31:45:aa:73:81:70:d5:
01:43:f0:1c:a8:f6:32:3f:df:2e:4e:46:bf:21:b0:cd:4a:e7:
61:7b:b3:a6:6f:22:2e:b4:ba:16:4a:4e:19:2e:f1:09:5a:e5:
d6:f3:09:a3:2d:20:ca:f9:ee:c2:6f:08:64:2e:bb:79:de:98:
83:76:11:7a:de:57:cc:36:8c:f8:f2:de:1d:dd:b9:82:1e:b8:
5d:18:27:11:f6:d1:ac:21:8a:0e:29:56:c3:c7:af:fb:9a:d6:
70:79:e8:15:60:4a:6d:46:b6:b2:94:3a:42:ed:d3:c5:31:d3:
d1:66:f3:6f:55:ec:37:75:d7:c0:a5:e6:c6:51:28:a5:34:7c:
fa:0d:d0:f4:19:b9:1b:94:0b:ae:4b:e1:89:45:65:1a:bc:a7:
d2:ae:2a:a9:c6:99:9a:73:46:ea:58:1f:fb:9e:b2:be:3f:18:
75:dc:b6:4c:b9:f0:f4:5f:f9:e8:d6:53:18:60:5e:04:a7:1e:
4a:03:ad:24:04:02:a1:e9:80:ea:56:4c:79:4c:aa:35:51:6f:
23:21:46:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:28:32 2025 by rpki-client