Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/8wmzxLkSyC63kJ8KsfaDTFp3590.roa
File: 8wmzxLkSyC63kJ8KsfaDTFp3590.roa (raw, json)
Hash identifier: yPTonCp/pr9ZtUUWsN3hsTJ0gebdbrNTrrkzT5j7S00=
Subject key identifier: F3:09:B3:C4:B9:12:C8:2E:B7:90:9F:0A:B1:F6:83:4C:5A:77:E7:DD
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 0197EEB06B7622BC3883DB9DFB01EFDDE365
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/8wmzxLkSyC63kJ8KsfaDTFp3590.roa
Signing time: Wed 09 Jul 2025 10:17:08 +0000
ROA not before: Wed 09 Jul 2025 10:17:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216059
IP address blocks: 95.155.152.0/23 maxlen: 23
95.155.154.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ee:b0:6b:76:22:bc:38:83:db:9d:fb:01:ef:dd:e3:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Jul 9 10:17:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f309b3c4b912c82eb7909f0ab1f6834c5a77e7dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:39:52:c7:6d:a4:36:1b:12:08:d3:04:20:8f:
33:9b:7f:fa:87:58:35:23:82:59:01:81:4e:dd:df:
81:55:c8:c3:73:84:68:48:ec:a2:f6:6a:59:bc:a0:
b6:48:6a:77:bc:f6:bb:18:fb:8d:14:86:d4:25:bc:
a7:c5:b5:63:a2:0f:35:ee:a9:e2:7e:62:0a:46:39:
09:e8:0b:7b:ff:8d:74:cb:4f:34:26:a8:4c:fe:df:
7e:00:31:ca:d2:9a:84:ff:03:34:07:b3:f9:94:26:
27:3c:f6:92:01:42:88:bb:f5:f1:d4:0d:66:d4:8e:
6b:b3:08:25:73:e7:f3:10:dc:5d:65:f5:e1:78:72:
4e:5f:47:a2:32:b5:a8:f7:46:74:1d:69:7e:47:2e:
74:1c:19:47:0d:a6:70:8d:24:b4:ef:94:ae:4b:45:
c9:e3:a7:f0:be:15:36:65:b1:63:27:f4:6c:ca:23:
1b:4e:2c:1d:37:f8:f7:3a:1a:c5:c0:0a:d9:e4:0c:
cf:e3:90:67:f1:20:81:b8:10:82:1f:8f:d7:65:01:
f2:82:ad:4e:18:54:a0:9b:c9:d2:13:5d:d4:71:5b:
00:f6:8d:05:f3:9f:1b:11:71:2c:75:d6:81:8e:28:
20:40:b8:99:6f:7f:7c:8b:4c:4e:87:56:cf:91:6b:
9a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:09:B3:C4:B9:12:C8:2E:B7:90:9F:0A:B1:F6:83:4C:5A:77:E7:DD
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/8wmzxLkSyC63kJ8KsfaDTFp3590.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.155.152.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:d3:20:83:4a:e9:7b:63:07:e8:4d:d4:0a:39:bd:a8:84:95:
5f:ed:65:5d:fb:ba:a8:e0:61:7d:84:b5:0b:d9:54:92:b0:72:
2b:b1:e8:e0:f1:07:9d:a9:ee:9e:8b:4f:58:fe:8c:61:1e:56:
d8:99:fb:ab:ba:52:f1:11:fd:e3:97:bb:cb:5a:6c:93:4a:b4:
7c:c9:32:a0:a7:b6:f1:99:71:f5:3b:20:0a:04:95:ab:68:e7:
90:aa:75:d8:26:02:b4:6b:60:84:9c:f1:ba:80:63:b5:d5:5b:
0f:38:18:db:44:62:29:50:5a:6d:1a:e3:a6:cd:12:bd:c0:d8:
a8:58:68:b9:b4:42:4a:34:92:8c:77:a3:a2:92:d8:34:ba:02:
a9:67:b0:ae:26:40:4f:80:b8:a4:b8:90:83:d8:71:99:29:40:
d4:ce:ee:4c:a0:fe:8c:d5:d3:39:bc:77:83:58:e7:65:9a:0d:
38:0e:d0:57:af:84:3c:3f:4b:e4:d7:a7:35:8c:de:fc:c3:43:
2f:71:17:34:cd:9b:99:31:5b:0a:fd:31:27:d6:e9:93:5f:49:
25:b8:c8:74:9c:d8:2b:aa:1c:16:57:87:d7:62:37:ca:39:c2:
01:15:dd:90:17:80:d1:2b:ae:9c:c7:1f:51:0c:58:4a:c6:49:
d9:91:08:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 16:08:05 2025 by rpki-client