Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/waAUG9dHQxPuvbNDnM7McvKZrks.roa
File: waAUG9dHQxPuvbNDnM7McvKZrks.roa (raw, json)
Hash identifier: KM+Hqim19Y1GbtIM/SkitOgtiJ9ypF9fqby6ZM5bUSw=
Subject key identifier: C1:A0:14:1B:D7:47:43:13:EE:BD:B3:43:9C:CE:CC:72:F2:99:AE:4B
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 019A0601F66C2B9BE2272B2D12114BDA40AD
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/waAUG9dHQxPuvbNDnM7McvKZrks.roa
Signing time: Tue 21 Oct 2025 09:03:03 +0000
ROA not before: Tue 21 Oct 2025 09:03:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214025
IP address blocks: 213.220.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:01:f6:6c:2b:9b:e2:27:2b:2d:12:11:4b:da:40:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Oct 21 09:03:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1a0141bd7474313eebdb3439ccecc72f299ae4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b0:f5:c0:6e:cf:1d:f7:ae:8f:aa:e5:a5:65:
02:87:01:39:79:98:d6:11:44:bb:23:c6:ee:98:33:
1f:16:6a:14:47:e2:c3:60:21:66:a7:2d:e6:8a:b7:
99:2b:b6:fc:2d:0d:57:41:35:2f:21:ec:31:14:5a:
89:21:de:46:b1:e8:eb:90:73:0d:ba:81:99:9d:15:
87:ee:17:ee:7d:92:59:8e:6b:3f:7f:71:63:26:3f:
17:89:b8:a3:fb:30:49:d2:c6:ba:5e:86:9c:46:3d:
f9:8c:2e:48:ba:18:95:00:10:7b:77:95:cd:d5:af:
01:10:84:f6:6f:d5:b1:4d:55:93:03:19:f5:fa:42:
68:a8:bb:15:87:cc:6a:2d:2b:a0:89:e2:d4:be:60:
24:17:12:d5:26:d8:b7:e5:db:b1:ae:ce:0c:12:d0:
6a:28:98:ca:eb:4a:ee:48:cf:05:58:b7:48:d9:d8:
36:ab:75:c4:22:62:df:77:73:51:ff:09:6f:92:25:
12:ad:0d:64:1d:ba:86:c6:43:43:54:a9:00:ed:0c:
51:d5:7a:c5:ca:3f:a1:18:c6:19:c3:5a:64:08:74:
fd:b1:fa:d9:0b:3f:b5:7d:f4:98:a9:34:5f:a0:a3:
e5:4f:80:d8:2e:cb:2b:ea:36:f6:a6:1d:34:ec:b4:
36:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A0:14:1B:D7:47:43:13:EE:BD:B3:43:9C:CE:CC:72:F2:99:AE:4B
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/waAUG9dHQxPuvbNDnM7McvKZrks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.220.0.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:e4:10:85:85:b9:8e:a2:75:f6:31:2a:36:76:e6:f6:3d:63:
34:1d:6c:71:d5:6a:27:42:ca:89:ca:65:cf:e0:28:13:aa:89:
c3:7b:33:d0:e6:7b:b9:fd:ee:eb:53:f2:2d:11:89:56:00:d8:
36:27:7c:7d:53:70:5a:d2:d5:b8:ee:5f:ab:b6:ad:c3:09:4f:
01:2c:aa:27:6f:68:14:08:50:c9:4d:4f:df:28:7c:46:03:1e:
f7:58:e7:a4:60:d1:d7:c1:38:97:89:f1:d4:0c:50:4a:71:05:
9a:9a:ee:0c:95:9c:c0:2c:1c:06:e3:cb:ce:fc:24:25:7c:30:
7e:c5:19:e4:38:97:24:40:d4:a7:b4:4a:3e:0c:fa:bc:d4:45:
29:5c:2d:99:d9:86:41:15:2a:ca:f3:98:0f:2d:b5:a7:7a:4b:
f6:a9:2a:2e:6c:9e:73:71:48:35:f3:39:b6:70:30:0d:f4:e7:
d0:34:26:3d:10:b4:2c:ba:20:9f:bb:57:80:d1:b2:e2:f8:77:
c6:48:89:ef:73:14:39:96:3f:6b:84:79:06:3c:bf:dd:31:99:
7b:29:1c:2e:45:55:5e:97:ac:13:04:92:5e:4a:9b:3a:e6:b9:
a2:a3:1b:ef:16:75:fd:25:c3:21:65:4c:e5:8f:6b:c3:cb:48:
a8:b3:c8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 21:50:07 2025 by rpki-client