Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/wnciBdu8lZY2hvNA1n2wUZlVCqI.roa
File: wnciBdu8lZY2hvNA1n2wUZlVCqI.roa (raw, json)
Hash identifier: UdaEqwB7nqa+Pnyq5hGu9jVwXxakpdXfIHnlHShbVZI=
Subject key identifier: C2:77:22:05:DB:BC:95:96:36:86:F3:40:D6:7D:B0:51:99:55:0A:A2
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 0199290C6BEEF4B33FF18AFDE89323DABCBC
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/wnciBdu8lZY2hvNA1n2wUZlVCqI.roa
Signing time: Mon 08 Sep 2025 11:18:23 +0000
ROA not before: Mon 08 Sep 2025 11:18:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2856
IP address blocks: 45.83.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:29:0c:6b:ee:f4:b3:3f:f1:8a:fd:e8:93:23:da:bc:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Sep 8 11:18:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2772205dbbc95963686f340d67db05199550aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1b:c1:cf:eb:2a:f6:e7:dc:6b:2d:06:87:61:
d6:a2:a7:d2:29:d6:6d:2c:ad:8b:2d:33:c7:07:59:
cf:fb:72:23:36:f3:85:c7:a6:63:50:2e:ee:97:54:
28:de:5d:e5:73:fa:5d:40:99:ce:72:2c:ff:cb:40:
aa:9d:8d:a9:04:29:5c:f3:ed:99:e3:7b:bb:90:29:
4e:67:69:bc:ff:69:53:fb:ca:0e:8d:04:e0:37:c2:
e3:93:24:0e:42:c8:c4:04:92:c3:0b:46:13:20:e9:
5f:11:92:b6:b8:0c:b9:9d:77:0c:44:a6:3f:c4:89:
0d:6f:98:43:7f:3a:55:0f:da:a6:26:51:0b:3d:3f:
48:88:3b:24:d9:e1:13:36:5b:1b:f7:d0:9f:33:40:
73:5f:86:2b:e9:98:25:86:04:67:e1:22:bf:21:00:
9c:d0:16:6b:23:93:65:fc:5f:ef:dc:6a:41:79:7f:
bc:7f:a6:f4:ce:43:67:ac:72:5f:01:aa:d5:af:7b:
f0:d2:0e:9e:66:1e:c6:40:52:cd:38:97:5d:9f:08:
ff:43:cf:90:96:a0:99:40:bd:95:ae:a5:67:69:9a:
71:44:85:d0:37:5a:13:80:75:0d:c6:c0:e3:ee:09:
bb:ee:89:8c:18:89:55:54:6b:9b:3e:32:93:06:17:
d7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:77:22:05:DB:BC:95:96:36:86:F3:40:D6:7D:B0:51:99:55:0A:A2
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/wnciBdu8lZY2hvNA1n2wUZlVCqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.238.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:bd:2b:df:15:c6:aa:37:9d:c4:a9:25:3f:ce:72:ed:a2:49:
c6:a0:2e:47:91:af:a7:cc:d9:36:ce:b7:42:13:48:cb:1f:ee:
49:5e:24:a6:c5:8b:9d:d7:7e:14:1b:e8:50:c6:7e:4c:62:b3:
8a:cd:87:1a:8c:ec:71:a0:96:2f:93:8b:4e:76:86:65:1b:3f:
75:20:78:8c:5a:58:bd:82:17:4d:3c:9d:32:ef:e3:f5:20:7d:
b9:59:c6:99:1c:ba:db:2a:18:41:a9:4e:03:98:58:3a:6f:4d:
64:75:40:7a:a4:2e:1d:97:41:e8:97:4e:21:fa:db:90:af:36:
77:5a:99:a7:2f:a6:f8:d4:d2:82:ab:60:73:6c:98:d5:88:32:
6c:0a:29:a9:4a:9b:68:a7:78:4b:4f:89:76:dc:cd:15:f2:76:
12:ef:14:6b:31:cd:8d:45:8c:48:5a:f1:bc:ba:9f:cc:ce:33:
8f:28:b2:29:40:11:b1:03:d0:f7:aa:c8:56:93:0b:30:6e:20:
b0:23:c7:88:d4:94:46:a5:61:c5:84:96:aa:ed:e6:ab:e3:21:
da:f9:dc:0c:15:ac:12:1d:d3:92:61:59:23:4c:87:5d:77:2f:
66:09:f3:fb:4d:51:e2:4c:c7:75:18:84:44:eb:3b:83:80:93:
c1:7f:d0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 11:11:29 2025 by rpki-client