Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/WScD7uexqWsVTcbkJjit77c6EOI.roa
File: WScD7uexqWsVTcbkJjit77c6EOI.roa (raw, json)
Hash identifier: f2zrSoKeWZhUxfn8r26SKqbqog0gDJQR8fLpQvUe4SA=
Subject key identifier: 59:27:03:EE:E7:B1:A9:6B:15:4D:C6:E4:26:38:AD:EF:B7:3A:10:E2
Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Certificate serial: 019980F76C97C1F6894961E2E216ED16E64A
Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/WScD7uexqWsVTcbkJjit77c6EOI.roa
Signing time: Thu 25 Sep 2025 13:02:02 +0000
ROA not before: Thu 25 Sep 2025 13:02:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 159.197.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:80:f7:6c:97:c1:f6:89:49:61:e2:e2:16:ed:16:e6:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Validity
Not Before: Sep 25 13:02:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=592703eee7b1a96b154dc6e42638adefb73a10e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4d:14:07:62:b5:b5:20:31:36:14:e8:11:aa:
c2:54:69:0d:0d:2f:01:88:d0:ce:16:96:83:b6:3a:
87:76:1d:df:91:c6:e9:96:a4:8b:d2:6d:92:e0:32:
bb:1e:f3:18:80:27:b1:3c:2c:14:5e:e5:8f:56:20:
59:93:eb:59:ef:ce:6e:44:21:ac:6a:b4:bd:d8:05:
b3:d7:49:4b:88:67:20:dd:96:fb:64:35:83:66:61:
76:f8:ce:ba:b9:7f:08:82:01:e3:6d:28:ad:29:e6:
11:bf:c4:fc:69:37:02:ce:dd:b9:2c:e7:1a:62:aa:
9e:1d:a4:1e:21:8e:32:0c:43:20:5f:7a:51:21:53:
43:a7:09:69:ec:d8:16:13:39:ee:13:9e:20:55:0b:
f0:6a:fd:f8:6d:ef:dc:fc:ca:8f:18:e5:cb:0a:91:
88:6d:ee:9c:33:15:04:86:8c:8b:5f:7d:53:1c:da:
4b:33:00:fe:f4:b5:1f:d4:d6:bf:0d:c0:b4:6f:03:
f6:8f:c1:b3:92:fb:4a:71:49:ff:81:03:d3:f1:8a:
d9:79:f4:29:70:09:7f:f2:e6:7b:a1:5d:56:4d:94:
2f:81:eb:96:22:7b:e6:49:4d:a7:84:b7:34:a1:f1:
be:74:1b:91:75:05:4f:09:56:f3:34:e6:eb:d7:89:
6e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:27:03:EE:E7:B1:A9:6B:15:4D:C6:E4:26:38:AD:EF:B7:3A:10:E2
X509v3 Authority Key Identifier:
keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/WScD7uexqWsVTcbkJjit77c6EOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.197.192.0/19
Signature Algorithm: sha256WithRSAEncryption
38:fb:a7:ca:b9:30:17:04:bc:ef:c4:f8:31:ea:ef:51:f8:0c:
b2:01:7a:19:f6:61:c3:c3:f4:ba:7d:ea:66:68:e2:60:0c:c3:
56:df:b5:e2:7f:83:7d:39:2b:20:15:25:9d:2e:25:03:76:69:
b1:b0:4d:4b:14:28:9e:7c:94:22:a5:3f:7d:26:db:0a:07:92:
ac:8e:83:fa:83:4f:71:7e:07:c6:9f:d7:0d:8b:33:73:a6:98:
51:b8:19:d4:69:1c:cd:b7:95:75:63:de:c4:30:11:1d:dd:cf:
3d:03:39:cd:54:44:b1:46:7f:b0:cd:df:95:60:44:e4:e7:89:
2c:a8:9f:9b:0f:1e:13:af:d8:7b:e7:0c:c4:17:6d:92:20:0a:
9a:64:3f:70:54:40:db:5a:04:e0:3b:f3:e3:c5:9e:9b:b3:7a:
2c:a4:3f:2a:39:3e:ee:3f:94:32:18:43:0e:4d:e1:45:de:2a:
17:94:06:eb:cf:c5:73:d1:8b:a5:e7:2f:df:f3:34:64:c4:84:
28:7e:5d:b5:81:3f:12:c0:d6:8e:7b:9b:49:37:78:c5:f7:c9:
25:d9:b5:87:85:91:22:8f:39:5d:61:c1:21:37:6e:56:20:6b:
0d:fe:bb:fe:4c:4e:91:a7:53:2d:0b:4d:2d:43:b8:a5:58:e2:
24:fc:1c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:31 2025 by rpki-client