Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/o98Wg7KpgmJ871dQGpUlt4TCmbo.roa
File: o98Wg7KpgmJ871dQGpUlt4TCmbo.roa (raw, json)
Hash identifier: mzU2BBa9J5BX5hmBuscvoDSNFgApfZanUcB3Ps+gIWM=
Subject key identifier: A3:DF:16:83:B2:A9:82:62:7C:EF:57:50:1A:95:25:B7:84:C2:99:BA
Certificate issuer: /CN=582e2170a7bcbec310154f2bce99833fec2801fb
Certificate serial: 01995839EE2EE8FF60551E4DBCA61707D405
Authority key identifier: 58:2E:21:70:A7:BC:BE:C3:10:15:4F:2B:CE:99:83:3F:EC:28:01:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/o98Wg7KpgmJ871dQGpUlt4TCmbo.roa
Signing time: Wed 17 Sep 2025 15:10:15 +0000
ROA not before: Wed 17 Sep 2025 15:10:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 67.63.59.0/24 maxlen: 24
67.63.60.0/24 maxlen: 24
67.63.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:58:39:ee:2e:e8:ff:60:55:1e:4d:bc:a6:17:07:d4:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582e2170a7bcbec310154f2bce99833fec2801fb
Validity
Not Before: Sep 17 15:10:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3df1683b2a982627cef57501a9525b784c299ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ba:01:e9:97:4a:80:f6:bf:75:50:98:6f:da:
c4:43:29:ce:85:22:f5:56:2a:47:65:62:d9:75:e5:
20:68:ce:df:e8:4b:28:91:be:37:b3:f1:97:11:73:
09:45:63:df:ed:09:c1:ab:1f:c0:01:a6:87:09:a4:
30:4f:0c:9e:40:ac:13:f1:57:e6:49:b0:29:69:c1:
10:d1:13:05:f6:f6:77:f1:4f:ff:07:dd:be:36:b6:
e8:fb:b0:81:6d:5b:22:3f:0b:10:62:52:5d:a8:86:
3d:5c:65:48:7d:d3:eb:89:a5:a1:8a:a7:4d:ea:ac:
e6:fd:6c:b4:5a:3d:4d:a9:49:46:4c:2d:91:69:6b:
16:65:a4:a0:75:c4:87:2b:85:50:c3:0d:fc:18:56:
5d:f0:f1:5a:e1:1f:dd:e1:e5:78:df:27:3c:86:4c:
6a:5a:b6:26:4a:6f:3f:03:27:39:19:07:8b:79:cc:
6d:28:57:3f:aa:31:78:36:8f:00:9d:60:4f:2f:10:
42:52:c0:52:3b:20:26:b2:8c:ba:2f:a6:1e:7d:79:
8c:d2:86:28:64:07:d5:74:ef:69:98:07:7e:02:af:
12:a6:9c:6b:27:5b:a1:fa:dd:e2:39:13:8a:36:c8:
29:f7:35:fb:18:1c:05:53:0e:56:0c:a6:11:a9:78:
5c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DF:16:83:B2:A9:82:62:7C:EF:57:50:1A:95:25:B7:84:C2:99:BA
X509v3 Authority Key Identifier:
keyid:58:2E:21:70:A7:BC:BE:C3:10:15:4F:2B:CE:99:83:3F:EC:28:01:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/o98Wg7KpgmJ871dQGpUlt4TCmbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
67.63.59.0-67.63.60.255
67.63.62.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:ab:00:58:ea:1d:35:d6:54:6a:59:6a:d8:cc:fd:19:4b:f5:
ae:52:bd:9e:fc:a6:25:f6:09:5d:9e:5b:6e:a8:d1:dd:3c:d8:
d0:5b:c1:eb:17:2f:af:8c:f5:40:00:39:dd:7d:1c:1a:97:96:
59:30:03:64:82:bc:ef:8b:83:7c:c6:3e:0c:5b:25:34:5e:4c:
e9:81:9f:50:7a:35:25:c8:a8:3d:27:34:4e:df:b4:09:db:9f:
30:42:ff:a2:e2:e4:33:52:ef:2f:f6:51:c5:43:d0:cb:db:61:
28:71:9a:34:70:3b:3a:a6:4f:03:58:72:4f:e0:6d:d1:44:a0:
6b:07:cc:58:3b:be:43:cb:5c:bc:cb:b3:44:00:55:21:72:64:
dd:c1:40:ee:fc:53:48:37:aa:b7:a0:79:66:10:fb:07:10:b8:
52:c0:74:a3:48:ca:19:19:ab:a5:0c:ca:56:60:91:18:38:48:
81:b4:d4:02:5b:4c:b0:02:7e:37:a4:24:52:83:48:03:a3:ec:
5d:1e:fd:7e:17:50:9f:d6:02:4a:36:dc:7f:ca:24:58:75:ae:
ce:48:a7:a5:6e:44:9b:a1:27:20:a7:00:97:9d:78:85:78:13:
80:42:83:ce:db:26:5e:67:85:fd:88:d9:6f:cd:7c:62:91:fc:
d0:c2:86:e8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Oct 8 21:11:29 2025 by rpki-client