Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/rW9xL-Blor3a7KeOFcdz4MZUIZ0.roa
File: rW9xL-Blor3a7KeOFcdz4MZUIZ0.roa (raw, json)
Hash identifier: m4NWziBJ7p7f8NFdds1mBjp8BH+ppFVvWoMG+PNQoc4=
Subject key identifier: AD:6F:71:2F:E0:65:A2:BD:DA:EC:A7:8E:15:C7:73:E0:C6:54:21:9D
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 01966BF5274F290058FACA0C0C1D0975B170
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/rW9xL-Blor3a7KeOFcdz4MZUIZ0.roa
Signing time: Fri 25 Apr 2025 07:59:10 +0000
ROA not before: Fri 25 Apr 2025 07:59:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210369
IP address blocks: 176.98.185.0/24 maxlen: 24
176.98.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6b:f5:27:4f:29:00:58:fa:ca:0c:0c:1d:09:75:b1:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Apr 25 07:59:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad6f712fe065a2bddaeca78e15c773e0c654219d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f5:8e:3d:ce:b7:44:15:70:73:17:f9:81:66:
24:ce:8b:63:33:63:10:ec:af:f3:71:0b:12:e5:11:
a1:89:45:a8:e0:8c:65:b4:06:4b:e2:84:74:d6:39:
58:4a:ed:93:e9:f3:0a:f8:8d:f7:35:f4:12:38:a9:
66:8a:3b:66:a8:eb:c3:b5:db:0f:65:c5:16:3b:07:
9d:c3:50:7b:4c:85:57:54:df:40:e7:6e:9a:3d:67:
7d:27:ad:93:fc:a8:20:72:87:8f:8a:ed:32:42:e9:
a0:0b:13:a4:6f:e6:dd:cb:79:7c:fc:57:75:20:8a:
87:0f:f4:48:0c:fa:6b:0a:17:0c:4a:99:a4:c6:13:
45:8f:31:78:5f:b1:17:df:47:c9:37:e2:68:0b:fe:
89:93:04:b9:46:1f:0a:35:59:15:16:ae:25:15:de:
b7:84:fe:90:5c:3f:a9:cf:28:5e:0d:2f:08:cf:56:
a1:65:18:a9:df:2c:51:b0:25:64:ec:cb:88:9c:5d:
c3:3e:97:88:15:bb:f0:55:40:21:fb:3d:4d:7d:74:
6e:d2:bd:55:de:5e:7f:1f:66:8f:d4:c8:73:6d:d6:
d8:e6:ce:7f:92:5d:63:eb:8f:aa:2c:0e:60:18:66:
e7:86:b8:0e:e0:56:81:83:22:f0:0f:4a:40:52:44:
f1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:6F:71:2F:E0:65:A2:BD:DA:EC:A7:8E:15:C7:73:E0:C6:54:21:9D
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/rW9xL-Blor3a7KeOFcdz4MZUIZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.98.185.0-176.98.186.255
Signature Algorithm: sha256WithRSAEncryption
41:77:e9:a8:48:c9:56:ec:99:92:ee:b2:64:7f:51:f2:b7:28:
5f:73:c2:99:c4:02:79:61:87:2c:a6:09:2a:f5:f0:61:cd:27:
7a:1e:2f:74:da:42:a8:9e:5b:d8:0c:ad:14:a2:15:05:be:38:
e0:1e:4d:1c:1c:19:78:c9:14:ce:d4:5c:ed:21:19:17:80:ed:
23:77:9f:5c:6f:30:3c:3a:0f:df:2d:37:26:9d:c6:88:f5:ea:
b8:4a:c6:e4:d4:0d:38:60:9d:da:37:71:4e:5d:fb:ec:35:2d:
eb:86:e5:55:50:bf:55:0d:21:ec:ce:cf:92:67:f8:11:e7:af:
86:51:40:ee:a7:86:da:24:a0:55:8a:f2:7d:8f:45:88:0b:56:
11:87:a8:f6:3f:31:55:1d:4c:71:68:50:1c:b0:57:b7:55:78:
b8:14:ad:05:65:ea:d2:48:d7:d5:00:a8:09:ba:3f:09:a4:38:
a1:29:15:cc:f5:1d:c5:53:ed:d8:b0:2a:69:21:1b:5f:cd:c5:
8b:cf:29:dd:b9:8e:63:08:9d:42:68:62:7c:24:72:60:40:ec:
65:aa:9c:09:bd:08:22:62:a3:eb:bf:76:ef:83:bd:32:d8:84:
0a:a1:30:55:ba:79:85:4a:41:67:46:fb:09:95:8c:c7:d1:d2:
f9:66:69:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:30:13 2025 by rpki-client