Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/wQA0abh25Jj5mK6DP_9yfPh_Szw.roa
File: wQA0abh25Jj5mK6DP_9yfPh_Szw.roa (raw, json)
Hash identifier: Gxtu2SrKEp09RMrd8FAfjNeoZCr/XklplXKAU3GLc1A=
Subject key identifier: C1:00:34:69:B8:76:E4:98:F9:98:AE:83:3F:FF:72:7C:F8:7F:4B:3C
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 0199F0B419FA23FC70B5EF4140671AB7B865
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/wQA0abh25Jj5mK6DP_9yfPh_Szw.roa
Signing time: Fri 17 Oct 2025 05:45:58 +0000
ROA not before: Fri 17 Oct 2025 05:45:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43877
IP address blocks: 87.99.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f0:b4:19:fa:23:fc:70:b5:ef:41:40:67:1a:b7:b8:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Oct 17 05:45:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1003469b876e498f998ae833fff727cf87f4b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:13:dd:98:92:7c:fe:95:9d:36:ba:d2:2b:01:
ff:f6:fa:1a:bd:47:e8:03:08:24:dc:20:e9:c5:86:
9a:86:36:bf:5a:e2:37:81:a4:58:5a:38:12:96:f2:
be:54:51:a8:37:a7:01:53:f0:f0:7f:31:ec:22:62:
e6:af:37:c7:ce:ad:5a:ca:53:39:56:3d:4e:a9:99:
b0:ed:11:5e:13:24:12:25:0d:db:b4:d0:90:5f:76:
1d:a8:9f:1d:54:7d:c8:86:0a:6c:a2:5e:89:d4:59:
ab:2c:0d:81:1e:b9:46:44:37:92:fc:8f:fd:4c:a4:
78:28:5a:a2:ea:e5:36:04:53:66:c3:7c:d9:d7:e9:
a6:ff:c9:59:3d:3e:cc:ae:55:16:d4:ba:be:0b:eb:
7a:36:65:13:d7:ea:8d:a2:a1:36:e2:1f:61:e1:e4:
ad:94:3f:77:b5:3a:0a:34:eb:1f:3e:74:66:4c:f9:
a1:0a:5f:47:8e:34:68:ef:59:41:0d:a0:9c:68:e6:
3d:fc:76:a0:aa:04:70:aa:81:25:f1:0e:1d:8b:30:
2e:43:16:4b:f2:63:a4:90:e7:d1:df:df:2c:2c:1a:
4c:82:fb:58:61:e1:05:5f:63:74:d0:e6:78:6b:b5:
04:ac:b6:fe:58:0f:74:d8:09:18:4e:bf:ca:1f:18:
68:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:00:34:69:B8:76:E4:98:F9:98:AE:83:3F:FF:72:7C:F8:7F:4B:3C
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/wQA0abh25Jj5mK6DP_9yfPh_Szw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.99.77.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:3e:ca:53:9d:68:fc:1d:33:f3:67:9c:de:25:82:58:41:f2:
8d:01:a8:64:a2:1c:d3:fa:23:85:d3:ec:8d:87:cc:72:c7:90:
28:5d:3d:f8:e5:b4:a0:01:66:6a:89:74:8c:31:a5:8a:04:fb:
f7:08:4d:52:a2:b9:30:ad:07:57:a2:05:e8:20:21:08:7f:a8:
a3:a8:14:39:39:14:5e:33:86:eb:c2:8b:c8:0f:00:cd:6c:a8:
ee:1c:4d:ac:f5:d9:dc:8e:fb:fe:39:d5:f7:68:37:99:45:52:
9e:fd:dc:b6:85:84:fb:9f:01:1a:e0:be:cf:4a:f6:21:30:a2:
1f:1c:7e:a7:01:0c:89:0d:3a:28:8e:ff:90:67:9e:9e:5d:d9:
4b:37:8f:bd:60:24:86:ae:b6:dc:ad:02:7d:af:7b:fb:6a:d6:
1c:33:fc:44:83:82:a9:02:4a:63:0f:39:87:9d:c0:cc:7e:eb:
74:f3:b4:dc:86:c1:a7:1b:dd:92:5d:e0:53:4f:3e:c4:98:50:
22:27:0a:61:0d:51:a1:3a:ba:96:a4:3c:b9:73:b3:b7:7b:ad:
98:4c:b8:4f:6a:97:02:62:c1:09:79:d2:d1:41:30:58:6b:d0:
01:31:84:fa:98:d0:76:03:f1:b2:ba:77:04:e4:a4:b0:b6:87:
89:64:b3:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:15:01 2025 by rpki-client