Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/wW0iKtg9bPCx0wfkjNfecHkB2Ck.roa
File: wW0iKtg9bPCx0wfkjNfecHkB2Ck.roa (raw, json)
Hash identifier: UM3eZveIrytl53yxFS6AdW4CNHF0JEQaT47qsF3G7tI=
Subject key identifier: C1:6D:22:2A:D8:3D:6C:F0:B1:D3:07:E4:8C:D7:DE:70:79:01:D8:29
Certificate issuer: /CN=f73cdc6751d7c59073e4b706402d3691af09086f
Certificate serial: 0196E78847C5F80273768C1B80F6DBE7A590
Authority key identifier: F7:3C:DC:67:51:D7:C5:90:73:E4:B7:06:40:2D:36:91:AF:09:08:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/wW0iKtg9bPCx0wfkjNfecHkB2Ck.roa
Signing time: Mon 19 May 2025 07:53:10 +0000
ROA not before: Mon 19 May 2025 07:53:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49826
IP address blocks: 80.247.240.0/20 maxlen: 20
82.116.224.0/19 maxlen: 19
87.236.224.0/21 maxlen: 21
185.136.36.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e7:88:47:c5:f8:02:73:76:8c:1b:80:f6:db:e7:a5:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73cdc6751d7c59073e4b706402d3691af09086f
Validity
Not Before: May 19 07:53:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c16d222ad83d6cf0b1d307e48cd7de707901d829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e2:37:43:d3:c5:0e:66:c6:26:90:77:eb:ef:
bf:b9:29:f3:e8:e9:60:11:54:21:9c:90:0a:b3:9c:
35:2e:1b:28:01:02:dc:58:7e:f3:d0:b5:5c:26:98:
99:69:80:8d:9e:42:7e:e4:61:ee:d3:bc:3d:1b:2f:
ee:53:bf:2f:b5:d4:bb:8a:a1:fd:9e:a7:7f:33:85:
49:5e:20:ac:b0:9e:65:1a:7e:f9:40:e6:e2:aa:7e:
cd:f2:09:97:53:ab:f9:35:3c:ef:56:a0:58:2c:ed:
2e:a5:46:74:c5:f9:48:76:83:63:5c:ea:49:c7:33:
0f:c0:90:07:3e:a7:53:a3:19:46:a1:e2:cb:9b:d4:
e6:18:ef:43:a5:d2:62:db:08:e0:83:d0:a6:f5:fc:
a1:fd:3e:c5:db:92:5f:4c:4a:fc:d6:fb:19:3c:ef:
b0:b0:54:4c:a2:22:5d:35:80:c5:c7:16:ea:55:17:
f9:04:63:53:fc:ed:bf:00:4b:9f:18:8a:72:80:82:
c7:f5:57:33:83:9f:96:92:5e:5c:f9:08:de:95:0e:
38:6b:15:96:9f:13:57:28:d7:96:ad:0f:73:c5:4f:
4f:ac:7e:b5:39:f5:4c:25:9e:2b:cb:1d:03:85:93:
19:67:ef:07:71:d3:5b:e7:39:b7:26:3e:72:cf:fc:
85:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6D:22:2A:D8:3D:6C:F0:B1:D3:07:E4:8C:D7:DE:70:79:01:D8:29
X509v3 Authority Key Identifier:
keyid:F7:3C:DC:67:51:D7:C5:90:73:E4:B7:06:40:2D:36:91:AF:09:08:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/wW0iKtg9bPCx0wfkjNfecHkB2Ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.247.240.0/20
82.116.224.0/19
87.236.224.0/21
185.136.36.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:61:c0:9c:43:4d:52:07:8a:1d:95:52:47:61:44:2c:09:35:
c0:11:3a:ca:f0:18:9b:63:d1:dc:41:68:e9:f0:e6:3b:0a:24:
17:ce:4c:20:95:ff:4a:f9:d3:41:1f:76:78:9d:f4:a3:bd:b8:
70:f0:b7:e5:2d:15:8f:4d:55:27:9f:7c:e7:c5:dd:70:9e:ce:
ed:bd:05:34:79:e2:1f:aa:47:41:16:b8:31:86:16:8f:1b:fd:
8a:1c:0e:2a:46:31:7d:a2:c4:b0:f7:00:cc:ea:3a:09:e7:00:
8c:24:3f:f9:ec:73:96:b9:87:d7:d7:e7:08:72:f9:42:29:75:
1c:60:81:ba:bc:65:8f:bd:4d:59:e2:ac:dc:b3:47:74:91:9b:
89:83:c3:c0:c4:35:a0:de:20:78:0f:96:a3:8e:99:88:aa:c9:
7c:92:30:f3:e9:44:c2:86:96:2f:ae:ad:35:50:e7:2b:55:a3:
fa:5c:8f:b4:50:2b:f4:d8:29:7b:76:fc:50:d8:c6:c6:76:29:
57:4e:58:8e:1c:ed:08:a0:49:e6:1b:b8:29:d9:df:a0:50:60:
a1:11:ab:80:39:09:57:64:d1:a1:8e:f1:5d:ce:8c:a5:0f:f8:
94:19:e4:ef:fa:cb:27:bb:85:45:51:cd:19:96:cb:a7:20:0c:
73:98:3a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 23:15:53 2025 by rpki-client