Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/WDsw4u5a6GN13xXW5Kz2pHPOuCI.roa
File: WDsw4u5a6GN13xXW5Kz2pHPOuCI.roa (raw, json)
Hash identifier: N55aesHHY6Ko3XLGgRXELv//rfv/cCGSk3NGAHqndSo=
Subject key identifier: 58:3B:30:E2:EE:5A:E8:63:75:DF:15:D6:E4:AC:F6:A4:73:CE:B8:22
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 0199285BBB44FF5E73DB1194BFD9E445FB03
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/WDsw4u5a6GN13xXW5Kz2pHPOuCI.roa
Signing time: Mon 08 Sep 2025 08:05:24 +0000
ROA not before: Mon 08 Sep 2025 08:05:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54103
IP address blocks: 46.244.116.0/22 maxlen: 24
185.51.48.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:5b:bb:44:ff:5e:73:db:11:94:bf:d9:e4:45:fb:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Sep 8 08:05:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=583b30e2ee5ae86375df15d6e4acf6a473ceb822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:78:7a:40:8c:3c:ae:18:ab:85:3a:1f:38:58:
4b:b0:f2:1c:e0:e9:3c:03:e6:45:5c:24:f4:9f:98:
ec:66:ea:61:07:bd:eb:88:3a:12:bb:11:45:f6:fe:
22:47:2f:7d:b7:68:cc:8d:35:4c:de:44:22:46:9b:
a8:a9:a5:95:fc:69:e2:e4:33:c5:ff:28:a2:20:3d:
21:b9:07:4c:04:48:91:e3:b3:c2:c2:0d:4d:fa:3f:
50:b2:fa:0b:7a:ca:90:f3:d8:59:90:98:aa:47:f9:
a3:bb:d5:f9:b9:27:72:ea:9a:fa:81:e2:7c:0a:01:
50:f4:1c:a0:b1:32:f6:a0:19:82:6e:66:6d:88:80:
a9:d3:7c:de:09:b9:e6:b0:4b:f8:d9:8a:cf:6c:b4:
2d:39:9f:2c:4b:3c:a4:bd:8b:81:96:bc:c6:5c:ee:
33:9d:51:a4:90:4c:1b:d5:f8:b9:b0:b2:59:18:ec:
69:ad:5b:1a:fd:2c:a9:2e:b2:0e:d3:b4:b2:2c:6e:
20:74:af:3a:a3:4b:d5:94:1f:3a:e6:ee:e8:45:be:
8f:12:6c:62:ff:ca:7d:ff:89:8b:6f:fa:5e:b2:21:
8c:42:bf:87:38:ce:2e:df:1f:37:73:46:5c:a1:bd:
e4:d4:57:93:20:70:7c:fe:c8:b7:1c:4b:a1:23:b0:
8a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3B:30:E2:EE:5A:E8:63:75:DF:15:D6:E4:AC:F6:A4:73:CE:B8:22
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/WDsw4u5a6GN13xXW5Kz2pHPOuCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.244.116.0/22
185.51.48.0/22
Signature Algorithm: sha256WithRSAEncryption
e3:9f:8d:18:88:d5:1c:fc:9b:5a:dc:05:b7:56:36:89:ec:c2:
06:ad:e6:5e:b6:19:7a:35:97:4c:b2:f6:54:71:e1:06:6e:a5:
ec:f9:ab:94:ae:56:0a:48:59:ce:f3:5d:ce:d8:6b:01:6e:77:
e4:b8:53:4e:68:83:30:63:0a:51:7b:2b:68:84:3b:1b:48:38:
fd:85:27:97:8c:bc:b3:b4:2c:9e:a2:41:e2:75:44:fc:f8:a8:
3b:6f:5a:09:13:be:b4:5a:32:7a:86:4b:af:cb:5d:14:07:d0:
28:a0:5f:f5:e9:08:74:2d:a6:e8:f0:4a:a8:73:72:0d:39:03:
9e:44:25:15:3e:74:6a:7c:a9:e1:14:7d:d9:82:db:1d:34:41:
c1:d4:86:d6:de:9e:a6:02:28:e5:96:2b:a0:4f:f1:5d:ad:55:
27:5e:e1:15:a5:e2:91:32:d7:a9:63:13:ab:63:e3:df:39:d5:
fb:48:8a:e8:0e:0f:f1:c7:ad:0d:17:9b:b6:e2:bf:28:3d:55:
fa:61:01:2b:08:71:cb:ba:4b:db:34:a3:69:5b:81:fd:f1:bc:
df:e6:ea:b6:0f:1b:24:e5:75:92:fb:d1:a4:be:b5:55:92:21:
42:c9:22:45:65:1f:56:6a:dd:48:a0:aa:fe:d0:e6:04:12:25:
34:24:92:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:42:36 2025 by rpki-client