Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/W6vwiq-voKk2QAWV9ym9B7kGas4.roa
File: W6vwiq-voKk2QAWV9ym9B7kGas4.roa (raw, json)
Hash identifier: 7ovXfRXZRQGLha60QudJ3CQy5egOSDRax/h7CJvWjlE=
Subject key identifier: 5B:AB:F0:8A:AF:AF:A0:A9:36:40:05:95:F7:29:BD:07:B9:06:6A:CE
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 01978219BBF740F3A98A5BBE1CCCA49AA589
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/W6vwiq-voKk2QAWV9ym9B7kGas4.roa
Signing time: Wed 18 Jun 2025 08:13:33 +0000
ROA not before: Wed 18 Jun 2025 08:13:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64267
IP address blocks: 89.23.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 22:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:19:bb:f7:40:f3:a9:8a:5b:be:1c:cc:a4:9a:a5:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Jun 18 08:13:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5babf08aafafa0a936400595f729bd07b9066ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9c:f4:e4:a1:dd:c8:d5:09:d8:58:ce:3c:7b:
b1:51:c6:a4:b6:76:72:54:12:91:78:b9:90:8f:b7:
a5:ec:97:fc:3a:82:8a:65:ad:bb:e7:57:76:f6:a1:
d1:99:1b:50:45:2c:05:2d:bb:b0:35:37:b1:3d:63:
e5:e3:03:8f:05:5b:28:94:6d:f0:c1:f8:88:0e:9c:
96:87:2d:f4:db:ed:21:9e:c1:d7:a6:b3:58:f1:b7:
44:5f:57:b4:e1:52:1f:c6:23:d2:71:d6:f4:eb:90:
d9:5b:e6:3a:df:cf:3f:04:60:03:4b:df:b6:c9:6a:
52:ad:dd:5f:6d:41:59:81:4a:bc:86:66:8a:29:f7:
03:7d:18:00:3c:13:47:68:ee:57:95:81:50:52:89:
39:7e:0d:61:84:94:4d:ba:66:d3:eb:e7:4a:2a:eb:
a9:fe:41:34:00:85:e2:60:20:1e:26:fa:8e:0f:f2:
00:42:66:6e:c7:a2:b8:c2:3d:51:84:9b:71:b7:aa:
78:04:7f:36:39:e3:24:b1:64:b5:9e:70:b5:d7:e0:
f1:89:f1:1c:3d:d7:c5:73:4a:9a:c1:3b:3d:e8:b4:
d2:27:82:dc:08:e3:ca:15:52:04:ec:3d:b7:92:36:
51:07:e4:30:de:f7:5f:27:53:d1:9d:f6:40:33:3a:
1b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AB:F0:8A:AF:AF:A0:A9:36:40:05:95:F7:29:BD:07:B9:06:6A:CE
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/W6vwiq-voKk2QAWV9ym9B7kGas4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.81.0/24
Signature Algorithm: sha256WithRSAEncryption
20:84:98:81:e0:7d:d9:04:e6:2c:68:e4:47:1b:ce:75:cd:1d:
dc:9f:34:b0:7d:5b:52:3b:b0:9e:71:77:81:98:37:eb:0b:bb:
ab:66:19:39:4a:9d:6d:b5:da:4b:a1:87:37:5a:c8:85:73:92:
a8:f4:13:2a:ac:11:d7:44:62:d5:42:24:63:9f:da:32:1c:f8:
9b:cb:89:86:53:0b:c0:07:40:ab:15:b7:a5:59:84:47:12:0e:
59:35:c7:24:6a:fa:42:e0:24:f1:ee:6f:91:e3:af:e7:e6:0d:
31:19:c8:95:ef:a5:c1:63:b8:10:23:56:32:05:7b:3e:a6:2f:
12:17:11:a2:a4:8f:ab:e9:a8:55:ce:ad:f4:ec:86:bc:b7:48:
f7:2f:2a:80:43:77:16:c0:25:5d:dc:5a:f2:64:10:67:12:06:
fe:b0:f4:c7:bf:50:62:16:4a:ff:eb:a3:ac:40:6e:f8:01:35:
20:d4:21:4f:7c:e0:04:a4:33:6d:11:68:e9:1c:7f:87:a9:30:
e5:e7:e3:de:76:7a:ef:fe:f8:ff:f8:8b:3c:53:f5:14:8f:9a:
5e:ae:02:7a:63:87:b9:ce:a9:6c:4d:e0:41:38:6e:5b:20:19:
c0:34:85:39:8c:4c:7b:74:97:23:e0:aa:35:98:42:2a:d4:ee:
8b:dd:79:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 08:14:58 2025 by rpki-client