Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wsRUFhOx0y56h08tU3nujRzb1uk.roa
File: wsRUFhOx0y56h08tU3nujRzb1uk.roa (raw, json)
Hash identifier: hlqrrAjwlQx1Vdn5NM3AoKWRYawzDx9/5NK57R50MHo=
Subject key identifier: C2:C4:54:16:13:B1:D3:2E:7A:87:4F:2D:53:79:EE:8D:1C:DB:D6:E9
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01994255FDC7DFFEB25159B147AE43DB7511
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wsRUFhOx0y56h08tU3nujRzb1uk.roa
Signing time: Sat 13 Sep 2025 09:09:15 +0000
ROA not before: Sat 13 Sep 2025 09:09:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42946
IP address blocks: 195.58.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:42:55:fd:c7:df:fe:b2:51:59:b1:47:ae:43:db:75:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 13 09:09:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2c4541613b1d32e7a874f2d5379ee8d1cdbd6e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0d:3d:4a:9f:9d:e4:93:dd:cb:71:36:18:9b:
7a:08:fa:9b:a1:1d:f2:4a:20:79:84:5b:3c:c7:8a:
4a:53:59:fd:32:a4:5c:01:66:3a:1b:f1:4d:53:b3:
3e:eb:bb:8d:81:f3:4f:45:2e:4e:42:eb:4e:bb:30:
72:a4:50:1d:eb:b5:e5:99:5f:69:c1:27:3e:5d:be:
e7:41:71:94:80:31:97:56:f8:b1:5a:4e:eb:b1:4e:
b1:59:d8:76:ad:04:1a:85:79:3a:26:69:df:7d:67:
9e:27:be:29:0d:88:08:ae:d2:da:d5:ef:80:5a:83:
35:f8:e3:e3:68:67:40:3a:06:c2:b8:75:6b:df:4e:
08:7b:64:aa:1b:4a:f0:97:4c:e7:fe:6d:d0:e7:df:
7f:45:dd:dc:aa:73:be:32:d0:3a:f7:9f:c4:fe:7f:
fc:19:a8:3d:71:0e:80:88:51:1a:3f:14:da:f5:11:
5f:a4:83:ec:f5:42:78:13:44:3c:b8:37:aa:85:e1:
e7:23:6d:fb:80:44:2c:58:16:5b:24:8a:94:e2:db:
93:e1:56:5a:e3:86:23:c1:c5:b6:08:42:b3:06:e9:
6c:98:8b:49:7a:68:3b:82:fb:87:5b:29:d6:d5:a0:
14:d0:dc:75:88:23:98:0a:23:fd:20:0e:b6:71:32:
a0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C4:54:16:13:B1:D3:2E:7A:87:4F:2D:53:79:EE:8D:1C:DB:D6:E9
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wsRUFhOx0y56h08tU3nujRzb1uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.46.0/24
Signature Algorithm: sha256WithRSAEncryption
18:a9:09:29:31:29:5e:aa:a5:73:8c:f7:e5:96:f0:66:fe:6f:
18:5e:44:7f:12:35:0c:af:1b:8f:04:57:6b:b0:99:be:28:c3:
57:f5:11:82:a1:30:ca:64:15:d6:1c:dd:0d:5b:b3:1f:dc:80:
8a:f5:8d:14:bb:02:0e:a0:9c:57:2d:b4:7e:95:86:a4:ab:fa:
a6:b2:a4:66:fa:8a:b8:8e:fd:2c:0b:d4:51:01:2a:05:38:c1:
73:d3:e1:a9:2e:92:ab:3e:f9:f4:85:69:0e:74:17:78:11:a4:
a5:7b:3e:4a:02:66:95:45:7d:9f:e2:dd:21:55:3f:62:46:d5:
41:10:56:8d:8d:1b:f5:f3:06:9c:95:7b:6b:d1:ac:a4:3b:71:
35:3d:1d:0b:0d:5f:b4:ec:28:08:ce:6a:59:59:26:ca:91:71:
2f:42:36:11:71:18:fc:55:2a:f1:54:c6:25:36:85:6c:b2:62:
a3:eb:76:59:e6:90:9d:4a:83:ff:a0:5f:0b:a0:9a:3b:44:93:
40:51:0e:10:bf:06:a3:ea:55:6c:3f:34:e3:4d:b7:2a:64:bb:
2e:1e:98:49:88:04:a0:1e:56:e1:d2:52:1a:ca:6b:10:2a:b5:
20:6c:f1:c1:66:63:95:4b:f2:cd:28:7d:8f:d4:40:d7:69:29:
84:c1:de:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:14:51 2025 by rpki-client