Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wilmZqk7agMbbC4Gv8PFNIvYTkc.roa
File: wilmZqk7agMbbC4Gv8PFNIvYTkc.roa (raw, json)
Hash identifier: pMGGYNc1AdZETVBk804KKoLOBMXiP2qLOni0uFw7HwI=
Subject key identifier: C2:29:66:66:A9:3B:6A:03:1B:6C:2E:06:BF:C3:C5:34:8B:D8:4E:47
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0198A17E4A608C8355A0CAB6AE378B1C24F9
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wilmZqk7agMbbC4Gv8PFNIvYTkc.roa
Signing time: Wed 13 Aug 2025 03:34:25 +0000
ROA not before: Wed 13 Aug 2025 03:34:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214971
IP address blocks: 94.103.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:7e:4a:60:8c:83:55:a0:ca:b6:ae:37:8b:1c:24:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 13 03:34:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2296666a93b6a031b6c2e06bfc3c5348bd84e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9b:81:35:22:e1:ba:67:84:10:97:bc:5e:bd:
26:06:20:4e:a1:f5:af:65:f1:64:ed:8c:61:26:06:
e9:fb:9c:bf:1c:3c:6c:3d:87:55:fe:5b:36:8e:3b:
c8:84:a8:12:b6:89:53:50:46:fb:64:01:ed:88:5a:
4c:86:e9:80:05:b2:9a:9f:c0:a5:71:83:a4:e5:1c:
05:a7:e7:17:70:df:56:ed:bf:75:0b:e6:6d:a9:46:
86:84:a6:66:89:77:14:e9:0a:e4:92:17:94:03:2a:
0d:b3:5e:75:2d:2a:25:60:96:27:de:3f:2f:4d:9c:
87:67:c9:c2:ba:ce:e3:61:34:8d:61:5e:ac:ad:ae:
bb:7b:30:10:3c:88:33:f7:5f:db:63:c4:ff:bf:f1:
1d:bc:1a:a2:5a:5e:cb:80:6c:04:0e:71:15:39:31:
dd:4f:37:33:de:13:71:98:f2:ed:3b:d6:74:e9:08:
b5:f7:90:a0:59:e6:79:48:a0:d9:e0:34:c9:7c:0a:
a5:b2:3c:71:3f:f0:41:f1:95:54:3c:fa:8d:ce:95:
2c:fc:c9:80:c5:2d:1f:ad:06:d0:af:c1:9b:a2:d5:
c2:a6:3d:b9:03:c3:00:fd:b3:8b:2c:77:be:48:4b:
b3:22:d5:88:cb:8f:77:b4:f9:5d:10:0b:4a:3c:02:
98:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:29:66:66:A9:3B:6A:03:1B:6C:2E:06:BF:C3:C5:34:8B:D8:4E:47
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wilmZqk7agMbbC4Gv8PFNIvYTkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.164.0/24
Signature Algorithm: sha256WithRSAEncryption
20:70:9d:6f:2e:3c:72:14:3d:44:bd:b9:3e:47:4a:cb:c9:eb:
0e:54:10:c8:95:31:c5:95:f6:9f:3c:0f:e0:5d:94:df:b0:3b:
a3:75:57:d6:83:9b:b3:f1:c9:fe:ae:90:49:d4:78:75:76:7c:
01:81:99:82:25:90:a7:0f:1c:0f:1e:a0:12:c9:29:f9:70:fc:
6c:26:10:00:5a:ce:d6:5f:ed:de:5e:a5:54:f4:e4:a9:f2:b5:
62:a6:b1:2d:40:43:76:a9:01:02:63:23:87:60:33:2c:2a:5f:
09:83:50:2b:3f:1f:ee:a7:a9:d8:05:bd:e9:d3:a9:65:76:51:
6e:78:cf:54:82:d4:80:a8:8f:b7:85:8c:53:1a:39:45:c9:92:
b9:8b:3a:28:14:c7:01:75:d6:ca:fd:af:74:4c:77:d7:77:7a:
16:7a:6b:58:ef:70:c9:e4:82:e5:8b:87:48:6e:ad:72:59:db:
82:35:62:9b:f9:cb:83:50:cf:ab:b7:fc:1b:e1:54:c9:96:ba:
4c:e0:11:0a:54:ee:31:d1:65:a0:92:7a:d0:12:df:e7:1d:ed:
da:b2:9c:9b:94:ac:d1:0a:b3:09:a1:13:ba:de:29:7e:ba:27:
90:3b:8a:eb:ca:74:d0:93:09:15:b5:37:21:85:52:cc:1c:b9:
d0:4f:57:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:07:23 2025 by rpki-client