Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/WdvSObRYtal3sYp1TXegu9fsYmA.roa
File: WdvSObRYtal3sYp1TXegu9fsYmA.roa (raw, json)
Hash identifier: 1MBNYv8/urcVZ/HY1fle5kd1r6D8MsVbXTwyTrT1ndI=
Subject key identifier: 59:DB:D2:39:B4:58:B5:A9:77:B1:8A:75:4D:77:A0:BB:D7:EC:62:60
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019A017F6C1DE3057C3C05009E1AFEDB00A8
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/WdvSObRYtal3sYp1TXegu9fsYmA.roa
Signing time: Mon 20 Oct 2025 12:01:59 +0000
ROA not before: Mon 20 Oct 2025 12:01:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60931
IP address blocks: 5.101.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:7f:6c:1d:e3:05:7c:3c:05:00:9e:1a:fe:db:00:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Oct 20 12:01:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59dbd239b458b5a977b18a754d77a0bbd7ec6260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a3:c2:54:c1:ce:72:2f:56:0a:ae:b4:64:00:
d6:2d:7c:52:6e:25:26:7a:17:70:57:84:de:69:54:
2c:21:ef:10:94:63:30:d7:46:6e:2a:61:42:4e:c9:
8a:71:e7:4d:13:23:e1:b4:42:10:d2:5e:f9:12:40:
38:da:98:80:1e:1a:d0:a3:48:e9:39:10:ba:17:94:
c2:da:d1:00:2e:45:61:c4:69:15:46:46:f5:de:dc:
96:c7:28:77:eb:6d:4a:aa:ea:f1:f3:54:74:f0:4d:
17:24:ab:60:27:61:c0:55:c7:b7:e4:5c:d6:70:7e:
3a:b1:32:c2:37:88:b2:ee:8a:63:fd:2f:88:7f:96:
d6:6e:9b:79:24:ed:40:6f:c0:fd:4a:04:73:65:36:
63:f1:35:c6:c3:13:a7:8e:3f:52:eb:29:b0:de:ba:
8a:7e:16:be:6c:39:74:dd:a4:28:7e:f4:57:9e:fc:
0b:32:70:dd:ad:bd:a5:2d:16:2e:68:e6:4d:91:3a:
fb:91:68:95:d7:cc:73:de:f2:5a:52:52:46:27:51:
57:7e:f7:aa:ab:66:97:75:83:eb:95:17:42:99:77:
92:de:dd:34:57:78:a0:e7:80:1d:ce:3c:07:e5:d0:
c4:39:36:ba:05:12:6d:f2:d7:3c:8f:9c:1a:8a:3e:
26:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DB:D2:39:B4:58:B5:A9:77:B1:8A:75:4D:77:A0:BB:D7:EC:62:60
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/WdvSObRYtal3sYp1TXegu9fsYmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.101.92.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:c8:a1:83:2f:32:e7:93:31:26:c7:14:5a:5e:15:8e:d8:5c:
78:11:ca:22:5a:df:eb:b0:a4:58:0b:5d:1f:bc:da:d3:23:b9:
29:22:f3:90:b6:41:0b:eb:b7:1f:a1:6c:8d:48:4b:2d:c2:b9:
4b:58:c4:d7:cd:43:76:08:2e:84:45:c2:6c:c8:d7:a0:3e:bf:
73:b4:57:ea:98:cc:f0:c0:04:d4:da:92:c9:90:2e:7d:eb:cb:
0b:f6:33:1a:84:26:b2:bb:91:ab:ec:c9:ed:31:27:c9:a6:f0:
86:b7:ec:64:e9:75:a2:d0:04:0f:15:4a:7a:d7:b2:05:b9:90:
92:b2:82:34:b3:9c:61:d3:5f:95:2a:cd:4d:ba:aa:f4:21:7e:
19:25:25:0d:cd:ac:89:4b:26:13:e5:65:23:93:ac:fb:02:6b:
28:59:ee:9f:2c:31:13:4e:9d:f7:e8:e3:3c:0b:09:49:fd:06:
fb:76:20:36:17:03:24:71:a0:83:9d:8f:b4:f2:38:6e:60:ac:
2b:31:2e:3d:c5:3b:85:50:80:41:fd:ba:85:7b:00:ac:69:65:
49:99:b1:10:fa:fc:85:3a:f3:f9:79:25:21:47:b6:d3:01:df:
be:70:f0:fc:0c:95:54:c5:76:b0:16:3b:7a:bf:8c:68:93:d6:
0a:51:de:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 07:17:42 2025 by rpki-client