Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/WtSCnO3gEAdA7CmHDm-1TgRanxo.roa
File: WtSCnO3gEAdA7CmHDm-1TgRanxo.roa (raw, json)
Hash identifier: zjCTfpdCrELIYE4h5CqDKN3D0MJfeRneuUlzKy7CY2A=
Subject key identifier: 5A:D4:82:9C:ED:E0:10:07:40:EC:29:87:0E:6F:B5:4E:04:5A:9F:1A
Certificate issuer: /CN=68a6d2ed46f9d89b1dd621775bd9fb5536bf44cd
Certificate serial: 0198F68A9E2D43BE21454DF2CD53A6F41AE2
Authority key identifier: 68:A6:D2:ED:46:F9:D8:9B:1D:D6:21:77:5B:D9:FB:55:36:BF:44:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/WtSCnO3gEAdA7CmHDm-1TgRanxo.roa
Signing time: Fri 29 Aug 2025 15:55:36 +0000
ROA not before: Fri 29 Aug 2025 15:55:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3303
IP address blocks: 145.250.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 00:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f6:8a:9e:2d:43:be:21:45:4d:f2:cd:53:a6:f4:1a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a6d2ed46f9d89b1dd621775bd9fb5536bf44cd
Validity
Not Before: Aug 29 15:55:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ad4829cede0100740ec29870e6fb54e045a9f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:14:20:27:e2:37:b5:41:89:ea:bb:69:d8:c9:
0f:fe:ef:de:17:bb:4e:11:04:2d:d5:85:71:4b:34:
00:52:02:b1:7b:cd:61:75:03:d8:c4:37:1a:4d:a4:
94:5c:55:e3:5e:1e:8c:fe:98:99:26:65:4c:5f:9d:
ff:88:e6:6e:d8:a1:e1:67:35:0d:9d:e7:35:ad:51:
3f:ac:40:b4:19:87:ff:39:92:ea:bb:7d:4a:d9:81:
40:e3:04:35:6d:f8:6b:0f:9a:7b:6f:31:29:be:ca:
4d:a0:a3:bb:e6:67:dd:f5:fd:87:86:73:42:ad:74:
20:08:37:26:25:38:d1:64:7b:27:e9:53:92:00:1b:
34:83:89:29:5b:c7:aa:55:df:45:4f:7a:a6:74:7d:
d1:03:0d:53:83:f8:39:ba:05:5d:8a:96:0d:74:51:
81:36:53:58:52:fb:4c:00:7d:d8:84:fb:0e:66:68:
49:2b:3d:68:d7:bd:6c:44:fa:f3:1e:c8:2a:28:10:
ce:ee:27:e4:f5:ec:f7:27:39:6e:2a:ce:8c:7f:8c:
3f:20:f8:21:8d:49:5d:24:b9:30:c9:ae:b2:4b:62:
e3:18:cb:ef:cc:19:b5:6b:2a:19:97:b4:f0:2b:ea:
a4:77:67:27:df:be:01:a8:2f:53:58:74:43:7d:44:
e3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D4:82:9C:ED:E0:10:07:40:EC:29:87:0E:6F:B5:4E:04:5A:9F:1A
X509v3 Authority Key Identifier:
keyid:68:A6:D2:ED:46:F9:D8:9B:1D:D6:21:77:5B:D9:FB:55:36:BF:44:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/WtSCnO3gEAdA7CmHDm-1TgRanxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.250.128.0/17
Signature Algorithm: sha256WithRSAEncryption
70:b1:a2:89:77:e4:50:47:a9:d0:1e:23:fc:c0:b0:70:63:d0:
84:7b:3c:d0:90:c6:93:bf:c1:04:9b:22:67:ab:01:f8:b0:f4:
33:50:c5:d3:b7:2a:37:5b:38:78:47:b3:c7:bc:9a:fc:02:8b:
9b:d2:78:42:bc:cc:04:8b:b7:b9:e8:9f:75:08:e2:c8:5c:a9:
c0:c2:cb:40:28:b8:37:84:1f:7a:0e:c0:a2:cf:7a:82:1b:2a:
c8:f2:37:87:a3:e6:2c:cd:50:4c:b2:a5:41:14:fd:aa:c2:d3:
f2:33:30:d7:94:f6:d2:17:a7:61:20:a6:f0:66:db:05:df:30:
54:e1:e1:4a:a6:50:47:01:23:fa:c1:d1:23:11:53:5a:d3:21:
34:21:37:9f:94:bf:98:17:cc:04:1b:18:c0:9a:ad:c5:76:d5:
8b:36:fb:9f:1f:1c:fc:ce:8f:fb:fc:fd:ff:d3:c8:21:54:ed:
2d:90:99:d0:4a:e4:6a:db:82:e7:ba:17:b0:af:5c:53:ef:b5:
dc:84:fc:2e:89:6f:a3:4e:40:f2:0f:bb:cf:7d:56:60:71:f7:
fb:ea:fd:4a:90:3f:2e:05:28:8e:02:f3:76:3b:89:71:34:ca:
55:83:52:24:ff:01:46:6f:d5:b8:da:e9:07:19:76:d6:2c:db:
4f:29:f0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:38:54 2025 by rpki-client