Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/W5UTNQ5ej991ZXRgwLKU5FQvFHg.roa
File: W5UTNQ5ej991ZXRgwLKU5FQvFHg.roa (raw, json)
Hash identifier: IRDGgxnAqqWapeedP2vWmhEF4xJ1dwTUzVZaEKAfNbA=
Subject key identifier: 5B:95:13:35:0E:5E:8F:DF:75:65:74:60:C0:B2:94:E4:54:2F:14:78
Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial: 0197FB3592B12C882F42E24588C4DA0CBE50
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/W5UTNQ5ej991ZXRgwLKU5FQvFHg.roa
Signing time: Fri 11 Jul 2025 20:38:01 +0000
ROA not before: Fri 11 Jul 2025 20:38:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200220
IP address blocks: 63.251.122.0/24 maxlen: 24
162.248.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:fb:35:92:b1:2c:88:2f:42:e2:45:88:c4:da:0c:be:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
Validity
Not Before: Jul 11 20:38:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b9513350e5e8fdf75657460c0b294e4542f1478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:19:11:4c:73:d2:42:b6:3c:f7:d9:00:88:16:
69:65:97:c5:41:19:2f:08:0d:17:20:f1:19:64:61:
15:67:8d:ff:5b:a0:ee:b9:c5:5e:db:5e:be:b0:c9:
46:66:40:40:fb:b2:09:80:78:c8:3b:0f:c5:3f:fb:
0b:23:f0:91:91:f5:78:53:ac:4f:13:43:9e:cc:99:
19:62:90:ea:bd:d8:f3:77:33:e2:72:82:f2:b8:cf:
92:c3:77:39:45:41:65:62:a4:5f:e4:29:ff:f7:5c:
39:a1:b0:8e:45:73:48:62:c8:1b:1c:de:a9:49:5a:
c0:11:6e:8a:85:8a:32:e4:2d:41:a7:d2:ed:6b:1e:
7f:52:d3:eb:3b:20:e2:f0:9c:84:b5:83:3b:3a:81:
2c:0a:35:0d:44:9b:fc:d9:37:4c:01:b3:4e:f4:1a:
3b:20:a9:ad:21:ff:b4:34:93:ae:fa:df:85:11:33:
13:9a:7b:d1:ed:1d:6d:ca:1b:5c:81:eb:a9:cd:8e:
87:87:39:97:c7:1a:87:ec:15:ae:26:94:cc:1e:54:
4c:52:8f:4e:74:10:59:60:9b:28:be:51:79:6e:06:
db:32:6b:1f:7e:00:f7:b8:05:15:e0:5b:cf:30:cf:
9d:8d:b4:a1:ed:57:82:03:2c:b5:2b:22:8c:60:73:
7d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:95:13:35:0E:5E:8F:DF:75:65:74:60:C0:B2:94:E4:54:2F:14:78
X509v3 Authority Key Identifier:
keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/W5UTNQ5ej991ZXRgwLKU5FQvFHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
63.251.122.0/24
162.248.162.0/24
Signature Algorithm: sha256WithRSAEncryption
35:1f:02:aa:72:1d:3a:00:76:9b:d2:7d:51:79:02:41:fc:51:
f0:18:14:1e:79:df:bb:3d:42:97:d8:ec:03:1b:0f:75:92:90:
26:d4:25:06:6f:db:ac:67:9f:b1:6f:66:26:86:77:fc:7b:c4:
61:e8:81:3d:00:df:79:60:9c:c6:be:5b:27:44:6e:58:9d:e8:
39:aa:f7:83:ac:73:b9:f3:b8:f8:c1:61:c9:8f:c7:00:0a:3c:
5e:f5:0e:ea:1c:83:8f:48:20:e0:86:0c:a7:ea:22:67:15:85:
75:e7:a6:4f:4c:7f:21:a5:59:15:9f:b4:f8:0f:a1:e1:da:bd:
cd:1d:e7:3e:29:b1:83:43:b8:db:1c:fc:0c:75:f8:56:be:8a:
e7:33:33:87:f9:a3:1e:fa:09:74:d3:57:f4:66:28:c4:07:28:
58:86:dd:26:c2:ce:22:87:1e:57:be:bc:b9:9e:f5:6f:d4:a7:
bd:65:71:9d:de:78:a7:d2:b7:17:95:c9:92:e9:f5:84:7b:2d:
a6:43:a6:a1:cf:67:f6:38:c0:3b:f1:3b:fd:c1:f7:2a:ad:da:
ed:cd:7c:28:62:a0:cd:64:76:fc:14:11:91:9c:e7:3a:c0:0b:
b2:f8:5b:de:7c:9c:9f:21:51:5d:1c:88:07:41:34:7d:d9:dc:
e4:74:0d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:29:01 2025 by rpki-client