Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WUwxn1F7svS1RR5oNmYMIlfLQ4s.roa
File: WUwxn1F7svS1RR5oNmYMIlfLQ4s.roa (raw, json)
Hash identifier: yBPtRcc1SjSrVivOrnUD/qBBu8qAH+nWkljQrUW4n5M=
Subject key identifier: 59:4C:31:9F:51:7B:B2:F4:B5:45:1E:68:36:66:0C:22:57:CB:43:8B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0199A505C952B48D4106E7F898DAC0BD4D92
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WUwxn1F7svS1RR5oNmYMIlfLQ4s.roa
Signing time: Thu 02 Oct 2025 13:04:03 +0000
ROA not before: Thu 02 Oct 2025 13:04:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213438
IP address blocks: 37.60.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a5:05:c9:52:b4:8d:41:06:e7:f8:98:da:c0:bd:4d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 2 13:04:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=594c319f517bb2f4b5451e6836660c2257cb438b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:34:1f:c0:77:1b:e0:ec:ee:37:e6:dd:b6:35:
c4:6c:76:a5:b4:79:a2:5f:fa:53:9f:5f:fd:20:50:
a8:a6:0b:1b:0f:2b:18:cd:5a:2d:e3:ec:25:0a:3c:
52:92:e5:51:90:a4:54:b8:28:e8:b5:47:f5:9a:6e:
9a:88:3a:8b:88:48:c1:76:49:49:17:13:af:83:21:
4c:6e:47:d0:65:ce:72:80:ab:e8:f7:d4:14:e7:56:
78:0d:4d:6b:a9:ff:16:5f:8d:41:78:20:d7:b6:f0:
f9:3c:54:fe:bf:10:ee:3c:9f:11:53:ea:14:01:11:
08:10:a4:8a:c3:e9:48:09:df:f0:45:bc:76:c6:12:
8b:e3:07:bf:56:df:5f:de:26:ac:b2:5d:99:8c:f1:
45:8b:b1:b4:4a:1d:f2:d0:8f:45:bb:7d:d2:07:e5:
1b:b9:99:86:ab:5a:a3:ee:42:a7:d3:f6:ba:22:7f:
cd:f3:cf:6b:ce:70:29:52:75:d8:0b:7b:b0:1c:de:
6c:1f:40:14:d1:f2:ac:09:cb:3b:c9:e6:71:01:44:
8c:ed:af:1f:c2:0c:9d:49:37:6d:aa:4f:d3:26:da:
70:4d:b9:c9:2c:50:7b:53:58:7d:28:fd:31:fd:3f:
5b:a0:e5:b1:de:48:01:b6:d4:8f:c9:21:e0:90:03:
cc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4C:31:9F:51:7B:B2:F4:B5:45:1E:68:36:66:0C:22:57:CB:43:8B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WUwxn1F7svS1RR5oNmYMIlfLQ4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.60.141.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:7c:fc:55:49:bf:22:a6:76:d9:7e:70:63:09:e1:62:ce:5b:
80:7d:b6:f9:be:a6:0d:52:b0:f2:34:cf:0a:18:26:42:7a:0d:
a1:a2:40:46:b6:10:db:6c:46:90:6d:e7:10:1f:10:58:b0:de:
31:63:26:32:d9:27:9d:39:52:df:c9:6a:0e:c9:26:94:d9:1d:
9f:51:b1:13:75:de:80:1d:8f:3e:b1:52:75:5c:72:a6:12:8b:
93:fe:ce:9a:6f:34:44:40:d4:5e:e4:bb:ce:3a:ab:51:a0:4e:
46:d8:e6:52:8d:ac:64:5f:ab:61:27:3a:4a:54:8d:a0:41:7d:
7d:96:d2:66:2b:36:dd:0a:0e:4c:60:22:d4:6d:bc:c1:b7:a8:
a9:16:c8:13:4c:b1:3c:09:84:d8:ef:54:e3:e9:07:b6:6a:a6:
31:61:01:3f:82:75:8e:72:e7:10:43:8f:a5:15:44:01:5b:16:
f0:46:db:db:69:73:42:e1:b7:5f:12:88:27:c1:da:9a:2a:09:
9b:57:14:74:de:d2:58:19:04:51:11:86:72:bd:43:71:bd:b8:
61:89:a5:b4:b3:49:05:30:84:e6:23:54:b9:14:ab:71:35:fa:
b6:8a:a1:5f:88:46:b0:9d:de:52:c3:81:79:87:65:08:ab:45:
ab:f7:dc:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:40:13 2025 by rpki-client