Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/wxKG5jJyEUEWYP2K3IlbB4dpRac.roa
File: wxKG5jJyEUEWYP2K3IlbB4dpRac.roa (raw, json)
Hash identifier: zPVL9UpKikAfpdB95a7Pp0+KJ7gkFwsrq1gFtJ1j0h0=
Subject key identifier: C3:12:86:E6:32:72:11:41:16:60:FD:8A:DC:89:5B:07:87:69:45:A7
Certificate issuer: /CN=b945d22d376fca197b2e84e1ee5732034432ffad
Certificate serial: 019A168B5BA37F68837D1AEEBBDF7C471F06
Authority key identifier: B9:45:D2:2D:37:6F:CA:19:7B:2E:84:E1:EE:57:32:03:44:32:FF:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUXSLTdvyhl7LoTh7lcyA0Qy_60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/wxKG5jJyEUEWYP2K3IlbB4dpRac.roa
Signing time: Fri 24 Oct 2025 14:07:02 +0000
ROA not before: Fri 24 Oct 2025 14:07:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24732
IP address blocks: 195.234.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUXSLTdvyhl7LoTh7lcyA0Qy_60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:16:8b:5b:a3:7f:68:83:7d:1a:ee:bb:df:7c:47:1f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b945d22d376fca197b2e84e1ee5732034432ffad
Validity
Not Before: Oct 24 14:07:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c31286e6327211411660fd8adc895b07876945a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:35:de:44:c4:ae:93:8e:bd:36:9f:ec:2f:d0:
09:de:b5:1d:b7:5a:72:23:a0:50:10:a7:f3:20:d6:
fc:af:2c:8e:3d:74:ce:0b:30:ab:97:a0:59:61:6b:
cc:c4:ca:63:0e:77:56:64:b8:e1:37:0d:58:06:42:
bf:a7:5b:71:3f:6e:3b:cd:95:75:fc:b4:ed:35:97:
a0:6e:77:9a:6f:6b:c4:a0:1e:c8:cf:81:c6:75:b9:
c5:74:76:10:28:c4:43:87:11:31:b4:dc:19:a0:d8:
27:c3:19:6a:49:25:ad:67:b8:73:52:ba:89:96:27:
fd:11:1b:bc:75:8e:83:9f:02:08:dd:be:b2:89:3f:
9e:8a:30:a0:39:ad:b0:c0:9f:a7:60:e2:4c:53:08:
b6:82:30:d7:be:8f:18:81:09:ac:45:71:f5:9f:9a:
5a:59:78:4e:91:69:81:ef:be:7e:aa:b7:63:10:5f:
6a:4f:15:c0:32:13:e4:1c:6b:2b:58:ca:4a:85:5f:
cb:3c:67:6c:b9:24:dd:c6:93:57:52:a2:54:79:43:
4b:0f:0e:78:dd:83:7f:fa:b3:42:b8:c0:bf:36:fb:
38:50:01:d6:3c:b2:29:df:20:d8:cb:e1:1a:a5:a1:
30:e5:19:f2:6d:0c:4b:ff:16:37:22:70:29:52:95:
29:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:12:86:E6:32:72:11:41:16:60:FD:8A:DC:89:5B:07:87:69:45:A7
X509v3 Authority Key Identifier:
keyid:B9:45:D2:2D:37:6F:CA:19:7B:2E:84:E1:EE:57:32:03:44:32:FF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUXSLTdvyhl7LoTh7lcyA0Qy_60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/wxKG5jJyEUEWYP2K3IlbB4dpRac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.16.0/24
Signature Algorithm: sha256WithRSAEncryption
28:2d:25:82:e2:e9:4e:23:cc:e5:34:cf:fa:44:bb:9d:07:ed:
1d:d8:c4:15:64:d7:a3:f7:28:3f:72:82:7e:a3:c7:7a:bf:40:
25:16:44:0b:ef:f8:19:e6:97:38:ce:28:e6:0f:3c:ab:c0:d2:
48:0d:f8:19:fe:3b:d4:0e:27:b0:ae:66:10:45:c5:5c:b0:4d:
13:97:b5:79:31:83:19:7d:72:e0:bc:6d:bc:4b:5a:29:31:4a:
42:db:34:05:3e:6c:52:e1:d1:75:16:58:6b:49:cb:ea:8f:2e:
84:fd:35:a6:96:d6:28:7c:81:e1:4a:e8:11:ae:83:cd:35:4a:
56:4c:60:04:11:7c:56:a8:f3:dc:7c:51:e3:fb:17:ed:60:0e:
21:f3:3a:dc:68:f4:dd:3d:fe:29:c9:da:f1:ed:be:d3:80:49:
22:d1:91:b6:1e:7f:61:02:df:d9:74:6a:27:35:e1:72:e7:84:
15:ce:7d:03:3b:d1:31:b3:63:94:9c:7f:d7:f4:dd:ee:44:9d:
dc:f2:53:bb:91:b2:f3:7c:df:9b:ca:32:9f:c2:e6:ca:26:81:
6e:5b:ba:74:2b:c5:e5:31:99:39:cd:f3:bd:b5:43:ca:8a:86:
92:1c:76:d5:16:45:a7:ae:c0:3c:87:ff:e4:17:54:a7:c8:d8:
25:0a:ce:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:02:05 2025 by rpki-client