Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/wsCfa_dpu6iZf2NU0pw8sHrNTzM.roa
File: wsCfa_dpu6iZf2NU0pw8sHrNTzM.roa (raw, json)
Hash identifier: ID8HALsHr8nweeK/J/fa9245rIiMTt1S8ecp9UAgByg=
Subject key identifier: C2:C0:9F:6B:F7:69:BB:A8:99:7F:63:54:D2:9C:3C:B0:7A:CD:4F:33
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 0198E6B6EB7E5A1E35C419BD347817F81C9D
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/wsCfa_dpu6iZf2NU0pw8sHrNTzM.roa
Signing time: Tue 26 Aug 2025 14:10:04 +0000
ROA not before: Tue 26 Aug 2025 14:10:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33659
IP address blocks: 138.226.0.0/20 maxlen: 20
138.226.88.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e6:b6:eb:7e:5a:1e:35:c4:19:bd:34:78:17:f8:1c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Aug 26 14:10:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2c09f6bf769bba8997f6354d29c3cb07acd4f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0f:8e:94:97:62:f2:6c:0f:82:e2:ab:d1:fd:
31:11:07:e2:8c:85:07:da:9a:4d:07:ce:90:28:e9:
27:f9:06:2d:74:af:26:33:da:94:0f:d8:a8:64:c0:
e5:61:60:28:c7:4a:e9:24:a0:df:7c:e3:9b:30:6c:
4b:9f:1d:41:f4:6a:1c:91:f1:92:4c:43:9d:d4:e8:
f6:ac:8a:49:53:e7:77:d6:62:1f:7b:02:c1:5b:38:
f8:8a:13:06:24:3f:80:34:06:29:fd:43:74:36:c0:
9a:a8:69:e7:83:83:a4:17:9c:b9:5e:6e:f7:f2:0a:
8c:a4:81:d7:c1:6e:47:af:32:7b:96:08:2a:af:a3:
28:ca:00:c3:72:8a:46:25:1f:93:56:2b:57:89:36:
17:9a:45:50:81:e6:61:70:44:0e:ea:f5:2f:4f:6c:
00:b2:3b:ad:23:84:c0:7f:b1:05:87:c8:1c:29:57:
48:a4:7e:94:17:d2:88:06:01:f2:b4:54:e3:3a:ee:
73:a0:19:f6:1a:27:bf:93:8c:7e:b9:97:99:b2:cc:
bc:09:e4:58:21:8f:35:c0:11:66:96:10:4f:e7:5e:
66:c7:48:a1:a5:44:df:ab:d2:f3:3c:02:ec:43:25:
e8:25:e6:bc:19:b7:5e:5b:3c:da:9c:ba:64:b3:2e:
83:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C0:9F:6B:F7:69:BB:A8:99:7F:63:54:D2:9C:3C:B0:7A:CD:4F:33
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/wsCfa_dpu6iZf2NU0pw8sHrNTzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.226.0.0/20
138.226.88.0/21
Signature Algorithm: sha256WithRSAEncryption
9b:ce:ce:d1:e0:ce:1f:37:00:76:dd:27:8a:20:8e:1a:ac:ef:
e5:d2:c0:6c:1d:ca:22:5c:b9:c9:c4:f6:6b:1f:b6:0c:a1:43:
0d:a1:55:40:89:de:56:87:63:32:7c:c4:33:1e:26:53:8a:14:
a4:cd:15:c9:db:33:6a:6a:51:db:d0:66:50:d5:24:d5:70:7b:
b9:49:ed:fa:18:0e:9c:ec:3e:e6:b1:c4:a2:f2:42:ec:4d:07:
4c:6e:4b:97:6c:90:d0:95:99:bd:8f:cd:d0:a8:b3:d6:31:6a:
67:1f:4e:95:06:c5:a0:f4:ae:e5:a0:cc:4c:51:7d:8d:9a:26:
97:d4:60:10:93:6e:03:91:da:2d:da:3d:f9:f0:12:2b:74:47:
3c:60:d4:03:a9:10:b1:bb:c6:90:96:ae:fd:b1:2d:36:91:d0:
93:19:73:df:57:eb:ed:ab:20:60:43:74:dc:1d:24:f2:b9:eb:
45:ab:f2:f9:7a:1e:48:85:a1:9a:fd:2b:55:84:75:af:a4:1d:
87:15:6a:35:cb:a2:e8:63:77:5f:de:53:9f:90:fb:ef:b1:63:
91:c1:92:0d:65:b2:94:38:c2:23:76:87:0f:30:73:ac:c8:29:
b2:4f:71:fc:48:45:d0:b0:c0:7e:83:34:d6:f3:18:80:79:fc:
0b:1a:52:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 12:06:35 2025 by rpki-client