Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/WfdvxK3x1F3AodYtqzljdJ1yOYg.roa
File: WfdvxK3x1F3AodYtqzljdJ1yOYg.roa (raw, json)
Hash identifier: s92qROaREFrjqwdA3FOCu1+WbBsbWcDQP0XNx1sByds=
Subject key identifier: 59:F7:6F:C4:AD:F1:D4:5D:C0:A1:D6:2D:AB:39:63:74:9D:72:39:88
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 0198C24C1B728004268CAD50AC0D1B14CE2B
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/WfdvxK3x1F3AodYtqzljdJ1yOYg.roa
Signing time: Tue 19 Aug 2025 12:27:04 +0000
ROA not before: Tue 19 Aug 2025 12:27:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 91.186.194.0/23 maxlen: 24
94.241.160.0/23 maxlen: 23
178.253.38.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 13:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c2:4c:1b:72:80:04:26:8c:ad:50:ac:0d:1b:14:ce:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Aug 19 12:27:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59f76fc4adf1d45dc0a1d62dab3963749d723988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ba:7d:7c:dc:b4:51:78:b4:59:ab:fc:ac:fd:
62:97:08:f2:c0:a4:11:86:1f:9c:b4:ee:c0:6d:4d:
99:9e:a8:18:3d:7c:37:f8:aa:f8:a5:0e:2f:fe:36:
68:d7:95:cc:12:89:e2:e8:04:53:7e:c5:af:98:96:
e6:d3:8e:6a:25:5e:bf:da:f8:55:6b:6d:a9:79:9c:
40:63:a5:dd:4c:d4:21:5b:97:95:81:d9:12:ac:fe:
e9:e6:e0:39:5a:ca:9e:f6:f6:bb:83:6c:cb:27:38:
7c:e0:4d:ed:29:e0:de:8d:92:4d:02:aa:04:52:b4:
16:d9:e3:2c:47:1e:94:4f:71:2f:9c:8a:60:57:61:
20:cb:a8:ae:3f:a9:b4:22:2a:f2:0f:af:c7:7d:c1:
f6:3d:b9:5c:6a:5c:63:3a:f3:ca:16:83:16:93:60:
11:38:dc:2d:d5:68:0e:01:07:18:cf:a9:fb:27:9d:
e5:fd:1e:28:63:a1:82:bc:1a:9c:88:db:81:43:02:
93:5c:a3:fc:41:2c:2c:af:c7:60:18:04:ca:6e:a7:
13:b6:72:1c:89:9c:bf:66:41:c4:04:3a:45:0d:f3:
1d:4b:34:2a:5f:0f:27:ec:36:1e:a6:52:eb:5f:d5:
fb:52:98:18:7e:93:d5:ca:69:aa:dd:0d:9c:a0:6d:
be:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F7:6F:C4:AD:F1:D4:5D:C0:A1:D6:2D:AB:39:63:74:9D:72:39:88
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/WfdvxK3x1F3AodYtqzljdJ1yOYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.186.194.0/23
94.241.160.0/23
178.253.38.0/23
Signature Algorithm: sha256WithRSAEncryption
26:de:2f:d7:08:d6:fc:66:05:4b:85:e0:01:7b:75:12:1f:d2:
05:18:27:60:95:2a:34:c3:e8:78:9d:23:1d:67:bc:97:ee:d5:
ab:48:63:1d:a8:9d:a4:26:26:69:68:f8:80:19:bf:84:84:48:
8c:cb:75:a1:56:27:55:e2:c9:c1:77:3c:d9:ea:9b:91:37:cd:
94:24:2e:8a:f5:55:a5:3d:11:8e:69:83:21:a8:ef:b4:47:a4:
82:ef:9c:68:28:83:3e:fb:f9:dd:5a:5c:09:07:51:5b:1f:a0:
2c:b0:64:13:21:1e:9c:32:c8:9b:9b:32:89:1b:e1:78:67:8a:
fd:56:29:57:d3:07:f9:d3:da:7a:4d:49:97:14:d2:3c:aa:a8:
5f:35:1f:ff:27:a4:1b:f1:09:05:20:f0:05:63:92:d9:13:ca:
e1:4e:ca:35:72:87:90:64:f6:40:ac:44:4f:16:d9:e0:4a:38:
93:8c:c6:8f:ac:ed:7f:47:23:c4:a0:28:32:df:ca:c9:5d:c3:
f2:d5:ce:f8:fa:06:f5:65:4b:8c:9f:50:4c:27:93:fe:a6:ab:
a4:e2:1c:cf:ff:21:9a:7a:88:40:68:57:c6:05:a8:c8:6d:1b:
1a:9e:5f:e4:f4:5b:9a:76:95:f2:21:97:d8:44:3e:88:5a:09:
a7:6f:cc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 21:36:23 2025 by rpki-client