Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/wGte5Are8NpBD8KTHQ531vUjpFs.roa
File: wGte5Are8NpBD8KTHQ531vUjpFs.roa (raw, json)
Hash identifier: G9rpZQy7UTdVZ8RG/8ciW3S8lvdFNXdVuqbWWEiXC7Q=
Subject key identifier: C0:6B:5E:E4:0A:DE:F0:DA:41:0F:C2:93:1D:0E:77:D6:F5:23:A4:5B
Certificate issuer: /CN=1027a8a61299b80a3e71d1a981427ec00b849d17
Certificate serial: 0198C620A29C0BB2153E1949126E0E3269A0
Authority key identifier: 10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/wGte5Are8NpBD8KTHQ531vUjpFs.roa
Signing time: Wed 20 Aug 2025 06:18:04 +0000
ROA not before: Wed 20 Aug 2025 06:18:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47543
IP address blocks: 95.142.100.0/24 maxlen: 24
95.142.101.0/24 maxlen: 24
178.237.35.0/24 maxlen: 24
178.237.36.0/24 maxlen: 24
178.237.37.0/24 maxlen: 24
178.237.38.0/24 maxlen: 24
2a00:1188:10::/48 maxlen: 48
2a00:1188:12::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:20:a2:9c:0b:b2:15:3e:19:49:12:6e:0e:32:69:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1027a8a61299b80a3e71d1a981427ec00b849d17
Validity
Not Before: Aug 20 06:18:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c06b5ee40adef0da410fc2931d0e77d6f523a45b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:84:6e:0f:bc:22:0c:6f:4c:6e:78:d8:bd:89:
62:c7:ed:28:82:42:94:35:26:63:49:fc:a3:11:6b:
d6:6b:a8:63:b8:de:93:d9:29:b6:53:1f:2e:7a:af:
6c:9d:53:f4:1a:ad:1a:52:ab:fb:ef:fc:d9:6d:a6:
3e:4f:65:b5:ae:dd:4b:60:4e:d2:f2:87:a7:49:ed:
21:de:a6:44:61:0f:74:03:9c:61:f2:49:2d:2d:45:
a1:f1:ac:86:84:69:62:51:a6:ae:de:f9:4b:7c:3b:
96:b3:f7:32:a5:17:ec:62:0f:7f:1d:04:b4:c0:88:
44:39:9e:7c:0d:b0:57:e7:b8:1d:12:70:9e:16:c2:
38:16:83:df:40:08:38:a2:3f:51:ed:1c:34:3b:f5:
d9:1d:08:42:32:0c:0c:52:a5:75:3f:6a:b1:ee:e2:
55:fb:ac:ef:7b:44:bb:e4:14:ea:d7:8b:91:21:9c:
f1:22:5c:d2:2f:a8:93:38:96:75:d4:41:f6:c3:ce:
58:88:26:2a:ed:83:ca:14:2b:34:ac:28:6c:52:d3:
e8:9a:84:37:3b:4e:4b:16:be:cd:af:e9:2a:af:61:
dd:31:38:c0:8c:32:3f:47:21:fd:3d:a4:0e:0d:53:
c9:44:97:cd:ff:b9:56:4f:cd:c4:c3:d9:a3:a8:fa:
53:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6B:5E:E4:0A:DE:F0:DA:41:0F:C2:93:1D:0E:77:D6:F5:23:A4:5B
X509v3 Authority Key Identifier:
keyid:10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/wGte5Are8NpBD8KTHQ531vUjpFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.142.100.0/23
178.237.35.0-178.237.38.255
IPv6:
2a00:1188:10::/48
2a00:1188:12::/48
Signature Algorithm: sha256WithRSAEncryption
22:26:c1:7f:62:ba:8b:ae:0a:73:f3:fb:f6:9d:34:bb:4e:19:
dd:75:f3:8e:96:13:dd:af:bd:f5:c4:45:6e:cc:91:9e:c2:9b:
2f:7b:5e:4d:84:0a:9f:26:c7:2b:0f:0b:4a:9c:c2:4d:46:f1:
e3:97:36:a4:e9:96:36:e2:e9:38:cc:9b:44:7a:72:fc:43:20:
36:5e:61:ea:84:9d:c6:3b:cc:ac:be:ce:97:16:40:f3:ba:3a:
e7:69:13:71:05:b4:4c:00:8d:dd:d0:44:11:54:e3:0d:36:eb:
9d:e7:90:9c:d5:c4:72:d8:68:cc:20:a6:54:53:94:86:fd:42:
e0:de:28:c0:e2:aa:45:c7:a2:41:65:b8:0c:9c:6f:6a:f6:ff:
12:b6:33:3a:05:12:64:1c:e1:21:90:0b:38:5e:3a:6f:9a:fc:
8a:b2:87:02:ea:9b:b1:9e:06:1a:63:08:5a:a5:fc:3f:c9:0b:
87:54:d5:26:bb:56:c5:fe:3f:0f:5b:73:4f:cd:1b:8c:79:47:
4c:a2:cc:ba:4b:60:2d:2f:a8:3a:17:0e:41:13:7b:6c:0f:28:
39:a3:1c:9e:02:6f:c8:6d:35:c7:90:c2:47:fc:80:63:da:c3:
97:9b:7b:a4:6e:c0:4f:6c:81:69:62:a4:67:9f:96:43:f7:7d:
e5:60:d9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:20:50 2025 by rpki-client