Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/wQo3rpXJ7WQb1wVz3F-n3mkMA3o.roa
File: wQo3rpXJ7WQb1wVz3F-n3mkMA3o.roa (raw, json)
Hash identifier: 0slrxX3Gy1rqJJwTHv3w+y28Hjcq6hYgq++R0+dQrwg=
Subject key identifier: C1:0A:37:AE:95:C9:ED:64:1B:D7:05:73:DC:5F:A7:DE:69:0C:03:7A
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0198F62C53ADC3A812D56204E01BE656792C
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/wQo3rpXJ7WQb1wVz3F-n3mkMA3o.roa
Signing time: Fri 29 Aug 2025 14:12:36 +0000
ROA not before: Fri 29 Aug 2025 14:12:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 81.18.63.0/24 maxlen: 24
178.253.210.0/24 maxlen: 24
178.253.226.0/24 maxlen: 24
188.255.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f6:2c:53:ad:c3:a8:12:d5:62:04:e0:1b:e6:56:79:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Aug 29 14:12:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c10a37ae95c9ed641bd70573dc5fa7de690c037a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2d:95:07:96:c6:0a:9e:62:f6:0e:82:f2:52:
1f:d9:02:b1:d0:fd:7c:b8:7e:c6:e9:7a:15:9c:e3:
10:2a:57:dd:f8:17:d4:09:72:7c:1a:25:e0:91:b7:
66:9d:92:6a:6b:a8:ae:e5:3c:bc:61:89:99:2d:ae:
e5:88:f9:10:98:93:1d:c1:23:64:ef:29:a0:a4:34:
7a:43:13:39:06:7c:64:5b:f4:13:f4:3a:40:2c:e2:
29:f0:dd:ea:09:5e:33:81:df:d6:a8:ff:d0:b0:4a:
27:34:11:a2:a5:2b:af:4a:de:5b:d7:7a:80:9f:34:
0d:e9:d7:ea:b1:74:93:f5:62:f8:41:ab:5f:e6:98:
38:c9:26:39:16:8b:2d:25:4e:a4:53:73:63:b8:1d:
0e:ac:35:20:51:96:0e:26:3a:2c:ac:84:2b:a4:38:
de:08:2c:fa:64:e7:14:6f:51:f1:fe:ab:91:6c:d8:
14:aa:14:32:2f:8a:05:a7:89:84:88:b5:e5:17:19:
60:ec:93:7d:71:fd:fc:48:15:ff:17:a6:8e:ec:78:
5a:a5:7a:80:4b:37:69:b2:1c:84:32:af:39:8b:66:
18:58:15:24:6e:06:99:cd:75:0f:48:03:8a:72:36:
4d:f3:8d:b1:88:3f:0a:bd:39:90:fa:ad:d1:7a:48:
6b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0A:37:AE:95:C9:ED:64:1B:D7:05:73:DC:5F:A7:DE:69:0C:03:7A
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/wQo3rpXJ7WQb1wVz3F-n3mkMA3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.18.63.0/24
178.253.210.0/24
178.253.226.0/24
188.255.253.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:5c:16:ce:09:ba:be:a7:46:ce:5f:88:02:29:2a:0b:22:41:
96:8f:3b:74:29:86:25:a0:8d:2e:33:9c:7c:8b:33:3a:5c:f3:
ed:72:69:c5:e4:bf:05:17:37:9b:e1:5f:3f:27:27:b5:93:da:
06:6e:a8:9a:71:be:0c:e2:0b:6a:88:e3:a4:24:1d:3a:4a:99:
7f:7f:31:d3:be:78:53:cd:45:af:e0:0e:4c:c7:f1:ff:de:57:
28:bd:4b:9c:ae:fd:0e:b3:67:cc:1c:03:d0:4e:97:5b:2d:c0:
7e:e2:f7:9c:58:2a:e3:4a:1c:02:3a:e6:fc:43:fc:a4:8a:07:
90:8e:5c:2b:8e:63:91:b6:14:75:f3:6f:23:1e:69:a6:ee:4a:
ac:5f:3e:f1:75:6d:0f:4c:23:d0:66:2c:e5:cf:be:0d:85:28:
0b:c5:7c:d0:0b:e2:88:3f:ac:1e:c4:f8:37:c6:30:e0:91:6f:
fe:f9:6f:d9:c8:bd:a5:b0:a3:34:35:7f:d7:50:9e:7c:96:9b:
32:b5:78:08:de:11:c3:78:17:35:ea:18:b0:d2:78:fc:8d:52:
25:98:b2:e2:81:01:4f:80:09:eb:41:54:8e:90:f6:01:c7:e4:
c9:4e:cc:ce:6c:03:bb:3a:fb:04:d0:89:9d:95:a6:5b:b7:91:
80:c6:56:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 07:56:25 2025 by rpki-client