Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/wWtKIfnyuy5Pwsg7v1x01k_AkAs.roa
File: wWtKIfnyuy5Pwsg7v1x01k_AkAs.roa (raw, json)
Hash identifier: 9+2f6OaYEE6gwGcro5Uy8iHzJQ0Asb4j3ndklknXQsA=
Subject key identifier: C1:6B:4A:21:F9:F2:BB:2E:4F:C2:C8:3B:BF:5C:74:D6:4F:C0:90:0B
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 0198DB8AD0160CA8DF88A3919A8143832F2E
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/wWtKIfnyuy5Pwsg7v1x01k_AkAs.roa
Signing time: Sun 24 Aug 2025 10:06:04 +0000
ROA not before: Sun 24 Aug 2025 10:06:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 80.93.192.0/24 maxlen: 24
80.93.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:db:8a:d0:16:0c:a8:df:88:a3:91:9a:81:43:83:2f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Aug 24 10:06:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c16b4a21f9f2bb2e4fc2c83bbf5c74d64fc0900b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:ec:82:3f:06:9a:49:04:51:b8:8c:24:38:19:
e6:d4:8b:b2:2b:01:6d:29:9b:76:97:e5:74:07:4f:
a5:24:00:de:db:98:f0:81:7e:d6:6b:12:ce:d6:e3:
50:4e:8c:3d:8e:3c:e6:96:2c:ed:ac:f3:a7:ae:72:
24:67:aa:b4:e7:20:13:c5:bb:84:4a:38:58:38:14:
70:62:2f:0f:82:4f:67:aa:fb:d0:4a:e8:02:95:c8:
d1:dc:04:30:1a:aa:bf:e6:08:fc:e8:bd:29:90:48:
4f:4e:da:06:02:69:88:e1:8c:a0:5e:d1:ee:05:70:
86:22:a0:b2:51:6e:82:57:3d:f5:12:b1:55:ed:7f:
ab:2b:6f:36:9c:68:97:f8:f7:2e:3b:7a:85:3a:17:
97:c5:fb:a6:53:76:eb:a3:67:22:8c:f7:f9:d3:3c:
88:51:56:ec:2f:98:72:5b:08:c6:07:04:e8:73:9f:
d9:1c:6d:23:2b:eb:b9:21:0f:27:be:95:bc:e7:f1:
94:60:64:08:c0:93:fd:34:db:d1:3f:30:d2:8c:e3:
43:85:b4:d0:9f:35:50:c4:e5:c3:13:55:c5:d2:ec:
05:cb:e3:ce:2a:c1:6b:48:99:ca:ae:2f:7a:0a:90:
76:13:a0:7d:87:59:8d:74:d1:82:d3:7f:93:50:6f:
56:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6B:4A:21:F9:F2:BB:2E:4F:C2:C8:3B:BF:5C:74:D6:4F:C0:90:0B
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/wWtKIfnyuy5Pwsg7v1x01k_AkAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.192.0/24
80.93.206.0/24
Signature Algorithm: sha256WithRSAEncryption
09:b1:48:e2:03:c0:36:0d:cc:9f:95:ab:ff:34:2c:10:e5:2f:
bb:1b:e3:b6:0f:08:ab:16:d7:68:38:61:28:24:55:68:86:a6:
15:e8:13:b8:3a:04:32:c8:88:04:c5:ac:a3:96:a9:da:91:ca:
19:25:5f:ab:8f:1e:b8:7b:1b:a8:6a:a9:01:51:6c:31:47:e5:
a2:e2:a7:88:72:e1:c1:b5:02:e5:c8:65:bc:9f:58:b5:8d:3b:
5e:79:b0:83:2a:0e:15:30:9a:5b:c7:8b:b8:09:1a:5d:a8:a8:
d9:63:72:b6:f4:3c:d8:a6:3b:21:f1:1f:d1:65:5b:d1:c5:ed:
53:44:7a:d7:84:e2:bf:67:5e:11:e6:ec:98:4a:3d:19:0a:5d:
c5:5d:25:11:6e:b7:f1:b8:6e:3d:1b:5c:43:e3:30:9a:c4:ab:
7c:c2:19:6e:ee:96:03:6c:cb:be:d1:52:93:90:99:79:03:b9:
f4:87:10:8d:ec:db:99:9c:38:d4:d7:c8:3d:96:92:7c:b1:74:
ed:4a:90:e7:fa:08:4c:83:6b:0b:7b:96:fb:0c:d1:12:de:79:
9b:22:0d:81:88:98:a2:a0:62:d2:bd:63:09:51:02:55:ee:bc:
7f:f1:8f:11:73:a1:6f:94:80:06:ff:90:f3:80:1d:72:d2:37:
0b:67:3b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 07:09:26 2025 by rpki-client