Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/W0IlYJBPaOJMLv1mCH5NTe9bDXI.roa
File: W0IlYJBPaOJMLv1mCH5NTe9bDXI.roa (raw, json)
Hash identifier: h5rJEpD/zc6V9IYMVIxJVkoM8iIZhHm9sfu6/N8DwVg=
Subject key identifier: 5B:42:25:60:90:4F:68:E2:4C:2E:FD:66:08:7E:4D:4D:EF:5B:0D:72
Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Certificate serial: 019A0076D5ECE4155341AF5EF4AA486C9261
Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/W0IlYJBPaOJMLv1mCH5NTe9bDXI.roa
Signing time: Mon 20 Oct 2025 07:12:59 +0000
ROA not before: Mon 20 Oct 2025 07:12:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213784
IP address blocks: 91.149.229.0/24 maxlen: 24
91.149.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:76:d5:ec:e4:15:53:41:af:5e:f4:aa:48:6c:92:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Validity
Not Before: Oct 20 07:12:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b422560904f68e24c2efd66087e4d4def5b0d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:67:95:b5:b1:1e:e9:62:5f:86:e4:79:43:7c:
d8:0c:98:53:0d:94:80:88:92:3c:2f:81:65:10:5d:
32:98:8a:ff:76:4f:6b:c2:90:3c:75:7b:d8:45:91:
5a:3d:d7:aa:22:75:aa:15:d8:7b:74:2f:65:dc:39:
ee:2b:d5:14:52:1c:25:f1:03:f8:f7:8a:87:7b:19:
77:ba:ee:43:6a:9d:6f:69:fc:cf:05:b8:6d:10:d4:
20:22:df:43:7c:bc:33:01:52:54:bd:37:d4:be:dd:
a2:7a:55:22:d2:9d:22:c1:39:cd:34:67:ce:8d:3c:
ee:2b:ef:c8:3d:5c:ce:9a:9e:0e:1f:1b:b9:40:5f:
ef:20:2f:ae:94:17:40:8a:f1:d4:e1:1f:b8:22:df:
a8:e0:a3:87:12:33:15:06:10:87:f2:ab:9b:3a:e9:
c3:ad:8d:32:ac:aa:ad:67:aa:b8:fe:32:51:c0:5a:
fd:ba:97:66:cd:d8:ea:d4:05:5b:0a:23:fd:c7:fe:
2a:bc:cf:27:84:2f:7f:01:c4:4b:e4:92:be:1f:35:
ce:e7:80:69:5d:90:b3:a2:f4:f5:a6:74:de:c6:43:
cf:e7:27:ad:01:7a:34:1d:28:58:61:69:0e:b6:5f:
29:72:de:ac:cd:89:67:75:71:cb:9f:bd:cd:c2:15:
8c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:42:25:60:90:4F:68:E2:4C:2E:FD:66:08:7E:4D:4D:EF:5B:0D:72
X509v3 Authority Key Identifier:
keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/W0IlYJBPaOJMLv1mCH5NTe9bDXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.149.229.0-91.149.230.255
Signature Algorithm: sha256WithRSAEncryption
ac:24:7a:28:ce:50:d7:80:fb:eb:f4:34:7b:da:37:1d:62:4b:
60:ce:91:ed:b9:8b:3a:fb:4d:9f:bb:81:9f:6e:e4:a9:e9:c9:
fd:3b:f5:d7:6b:70:80:27:58:32:83:8b:9d:bf:27:2b:7d:3d:
3a:32:42:df:fb:20:3b:54:84:2d:a5:78:5a:c8:6a:db:86:f9:
1b:92:d3:2c:48:be:a9:61:65:29:70:4c:a8:30:a8:23:8a:81:
fa:5c:9e:f2:6e:f3:fd:bc:70:84:89:4d:cc:fe:e4:c1:1e:b1:
81:e6:0a:36:f6:c7:46:71:3e:73:88:a9:b4:34:61:e0:17:a9:
55:f4:79:38:db:85:ea:53:0f:a6:b8:d5:72:5c:cf:f5:04:b3:
7a:ff:ca:ba:73:5e:6f:c5:c3:8d:22:65:b6:ca:18:c8:10:e3:
56:b7:77:7a:a4:fb:d5:ac:43:57:2d:5e:d3:78:6c:c0:96:ce:
d3:e3:e0:1d:b8:12:a1:45:43:86:89:4e:70:75:7e:0d:cd:7c:
73:19:48:5c:e4:e6:64:90:5b:b6:c5:a4:78:5d:9e:a8:30:b9:
14:e4:de:e4:42:ba:1d:62:34:ce:7e:80:06:cf:42:d5:4e:2c:
f6:44:2c:e4:a5:c4:1e:ab:c9:be:b5:1d:4b:35:4b:82:7e:a0:
51:4b:6c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 07:38:20 2025 by rpki-client