Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/WoVaijlh7MVqQV4JpMFA6Zv1lP8.roa
File: WoVaijlh7MVqQV4JpMFA6Zv1lP8.roa (raw, json)
Hash identifier: 93LhitKZk/dhVJfftIZflc4ldcyFRpIg6pCX+BpkdaU=
Subject key identifier: 5A:85:5A:8A:39:61:EC:C5:6A:41:5E:09:A4:C1:40:E9:9B:F5:94:FF
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 019904FAB1BD24FB701C953F08D8FE65D37B
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/WoVaijlh7MVqQV4JpMFA6Zv1lP8.roa
Signing time: Mon 01 Sep 2025 11:12:42 +0000
ROA not before: Mon 01 Sep 2025 11:12:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51540
IP address blocks: 213.238.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 16:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:04:fa:b1:bd:24:fb:70:1c:95:3f:08:d8:fe:65:d3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Sep 1 11:12:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a855a8a3961ecc56a415e09a4c140e99bf594ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d9:d7:80:95:fe:3a:1d:65:0b:4e:34:dc:35:
e9:d3:ed:0b:e0:44:1d:d4:43:cc:39:ee:e5:49:82:
f9:ad:00:2d:a2:1a:d2:dc:95:6d:51:3f:ab:87:03:
b6:f7:28:14:25:9a:3b:e0:80:02:2b:87:40:94:b2:
86:ea:a6:d5:c6:ae:7f:ec:fb:a9:86:f1:e7:2e:00:
de:7a:44:0f:9a:7a:bc:4d:ae:73:59:ef:8e:f4:1c:
88:03:25:5c:26:5f:95:e7:e6:be:c5:ef:01:90:ad:
d7:58:30:cc:8b:73:64:71:b5:08:bd:11:c2:e0:5c:
95:fa:1d:21:2c:de:a9:a5:3d:6e:ce:12:99:78:2e:
8e:c2:eb:30:63:1c:eb:fd:c4:b6:d5:d4:32:72:71:
c6:bb:ab:4a:1a:f2:98:11:68:6d:c7:d0:bc:25:42:
c3:55:fd:c3:53:0e:35:77:33:81:f6:e4:4d:17:13:
47:77:71:24:20:7d:b0:77:0b:4e:3a:01:f5:d8:79:
1e:ae:b0:b3:bc:65:22:22:90:03:ed:4e:e8:b9:5d:
cf:b1:65:6b:c9:b2:00:88:37:17:42:8a:6b:a8:f1:
52:1d:dd:e5:f7:7b:cb:d6:4b:bd:e6:a2:39:3a:e0:
27:ff:52:2e:63:0f:96:ec:17:e3:37:57:fe:f0:ec:
04:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:85:5A:8A:39:61:EC:C5:6A:41:5E:09:A4:C1:40:E9:9B:F5:94:FF
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/WoVaijlh7MVqQV4JpMFA6Zv1lP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.176.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:c8:d0:db:87:a4:59:d8:af:9c:fa:e4:f7:d7:87:1a:4d:cd:
c6:a0:34:a2:d9:65:bf:e6:6a:12:4f:46:1f:a1:d8:ef:bd:6a:
49:2c:4f:2a:b4:5b:83:bf:7c:93:84:91:14:01:8d:51:3b:55:
5a:7d:c4:e0:bc:fc:06:7f:07:c3:15:a5:ce:2d:22:d5:de:f6:
73:7c:44:49:54:76:a2:cc:47:18:79:76:a0:2a:96:d5:1e:51:
ce:a0:36:0d:5e:40:5d:32:0c:b9:24:b5:4a:23:25:ed:63:a0:
2f:5d:6a:63:1f:29:43:2f:92:e5:09:d2:aa:ca:07:e1:70:22:
0c:a6:6f:d1:89:b0:9b:4f:cf:4f:01:82:a7:d4:5f:86:46:fe:
00:3c:56:89:61:1c:d0:99:e7:d5:38:81:19:d5:b1:4e:92:ed:
58:23:f8:81:47:3b:38:61:26:3b:a7:3d:53:ea:65:c2:46:39:
ff:1c:e6:f8:fc:90:c5:d6:3c:25:45:c3:05:19:55:fe:12:e6:
a7:9b:9b:8e:e6:10:48:78:57:f8:de:36:91:ca:ad:da:95:da:
36:88:ef:84:30:66:28:d4:b1:b3:db:db:e6:54:7b:aa:db:24:
b4:12:b0:6a:fa:89:4a:88:90:92:6c:94:05:61:f6:33:08:ef:
06:04:ee:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 00:15:57 2025 by rpki-client