Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/wfIDRd7xb3P5SZH_IEgOrtFY1hc.roa
File: wfIDRd7xb3P5SZH_IEgOrtFY1hc.roa (raw, json)
Hash identifier: /mg550jB5d24PmQoRPxF43TICtEYxMhbi51eASSfWBM=
Subject key identifier: C1:F2:03:45:DE:F1:6F:73:F9:49:91:FF:20:48:0E:AE:D1:58:D6:17
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 019A39F4E94F353AD41AF46A77C108837075
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/wfIDRd7xb3P5SZH_IEgOrtFY1hc.roa
Signing time: Fri 31 Oct 2025 11:09:03 +0000
ROA not before: Fri 31 Oct 2025 11:09:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209186
IP address blocks: 94.74.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 11:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:39:f4:e9:4f:35:3a:d4:1a:f4:6a:77:c1:08:83:70:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Oct 31 11:09:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1f20345def16f73f94991ff20480eaed158d617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:88:a2:22:90:0e:94:6d:fc:0b:5a:08:33:de:
b9:77:44:0e:50:58:15:c5:63:51:99:f9:95:b3:cf:
8c:1c:d5:84:97:04:cc:23:7e:0a:c2:b2:70:5b:dd:
34:ad:60:a4:1c:9a:2a:78:1a:04:46:e9:91:f7:70:
3e:48:77:13:cd:25:a4:95:b7:cc:b3:93:4b:56:b4:
f5:e6:d8:eb:f7:6c:08:09:d0:08:c7:0c:c0:1c:4c:
52:cc:cd:cd:9e:3c:23:1b:6a:21:c7:c7:7f:b7:8a:
8b:f6:ed:87:90:1e:27:bd:41:4f:1a:17:5a:a0:01:
7f:53:f7:40:cc:ad:d1:4a:73:a2:03:d6:84:63:ae:
f9:55:b3:1c:a4:86:04:81:eb:b3:e7:e3:65:d8:8e:
33:f8:2b:69:63:75:ad:02:2a:39:8e:99:dd:9e:b2:
40:ed:9d:4e:9e:d1:15:e3:24:c6:b0:16:32:5b:c2:
67:14:0b:43:2a:00:48:8b:ed:e7:fe:c3:59:dc:56:
48:b2:47:95:28:09:42:82:8a:55:2d:d4:b9:6d:a8:
d5:ef:5d:a7:5b:64:a1:50:ba:12:4a:c4:d4:77:d1:
58:fd:5b:76:b5:1b:b5:f3:eb:fd:26:09:5a:7c:2c:
0c:dc:83:eb:80:d4:76:9e:b4:88:4d:8f:e4:4f:6a:
ef:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F2:03:45:DE:F1:6F:73:F9:49:91:FF:20:48:0E:AE:D1:58:D6:17
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/wfIDRd7xb3P5SZH_IEgOrtFY1hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.74.187.0/24
Signature Algorithm: sha256WithRSAEncryption
89:a3:26:76:78:11:75:a7:36:cd:44:e8:be:98:eb:a5:98:2f:
b4:0c:fb:17:83:77:a0:47:c9:c9:05:69:e5:36:7b:91:2c:b6:
b8:42:a5:3d:10:6c:0c:2a:9e:37:ec:12:47:0d:34:3c:86:d3:
21:32:4d:fb:0b:ab:66:3e:d1:b8:38:2a:92:83:00:0e:68:1c:
23:9a:a2:f7:c6:a9:02:e0:df:46:03:98:26:a0:6f:de:ac:fc:
30:27:64:2d:31:07:29:f1:00:5c:e4:d1:a7:c0:de:39:ec:d3:
13:a4:12:5e:e2:53:6b:ca:0b:4f:5a:fe:bc:65:d3:0f:01:e3:
05:0e:36:1e:7e:42:c9:92:66:f9:88:a6:76:0b:b5:9f:a3:75:
4e:84:8e:2a:e8:51:b9:db:55:8c:2d:4c:d9:6e:1f:9d:0b:6e:
7c:ec:e6:33:c8:5d:97:a2:ad:fa:95:62:b6:aa:8a:c8:af:ca:
9d:e3:a1:af:55:e4:e4:f1:0e:01:5f:ce:2e:7b:4b:39:67:6c:
14:0c:7e:84:7e:0c:75:24:0b:b4:8e:a3:2c:b8:0b:8f:bb:3f:
aa:4e:2f:0e:9c:61:1b:37:15:0a:a9:84:0b:35:06:bf:f8:f9:
cc:b8:8b:df:01:83:4d:f9:8b:68:06:15:ca:5a:3c:e7:6a:04:
c2:36:11:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:01:18 2025 by rpki-client