Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/w518JUndnoJzF7ArkNi72UzL1I0.roa
File: w518JUndnoJzF7ArkNi72UzL1I0.roa (raw, json)
Hash identifier: 8BFeioFwQr4QIG7R1EZ3G0EZLDkxKgvDohVxrnoFSAY=
Subject key identifier: C3:9D:7C:25:49:DD:9E:82:73:17:B0:2B:90:D8:BB:D9:4C:CB:D4:8D
Certificate issuer: /CN=5baeeb4c3a6985141255fd5f6ae1884067348f41
Certificate serial: 0198C0D1FDB97C7D9FCA6F280BFB037A8CC4
Authority key identifier: 5B:AE:EB:4C:3A:69:85:14:12:55:FD:5F:6A:E1:88:40:67:34:8F:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W67rTDpphRQSVf1fauGIQGc0j0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/w518JUndnoJzF7ArkNi72UzL1I0.roa
Signing time: Tue 19 Aug 2025 05:34:04 +0000
ROA not before: Tue 19 Aug 2025 05:34:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48160
IP address blocks: 91.207.142.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/W67rTDpphRQSVf1fauGIQGc0j0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c0:d1:fd:b9:7c:7d:9f:ca:6f:28:0b:fb:03:7a:8c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5baeeb4c3a6985141255fd5f6ae1884067348f41
Validity
Not Before: Aug 19 05:34:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c39d7c2549dd9e827317b02b90d8bbd94ccbd48d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:36:9b:c5:42:b9:26:72:96:b3:42:5c:54:dc:
21:1e:f8:d7:1d:83:9d:3f:c5:a9:7b:78:d7:93:a8:
dc:d4:b7:8a:73:ff:7e:a3:7a:29:a1:76:04:b7:a4:
88:83:46:8c:22:ea:c2:c1:c9:1a:c2:f0:c8:45:c9:
c1:07:2a:85:c0:4e:d8:03:da:ff:48:2f:70:bd:c5:
5f:e0:0b:05:10:9c:9f:8e:ec:81:76:33:cf:ff:70:
ff:58:62:bd:63:5a:6e:0b:8d:d9:84:4c:bb:f6:cc:
77:27:07:32:cf:e8:0f:8b:b8:38:15:ea:1b:5c:b9:
af:17:a6:80:cb:9e:38:e6:49:29:77:81:66:3b:9d:
b3:d0:be:72:dd:03:22:4c:92:23:e4:37:2a:6e:5e:
49:84:4a:aa:4f:b0:f5:1c:6d:69:27:89:63:4b:13:
a3:ba:0f:2f:6c:3e:a3:0f:aa:7a:ce:85:fb:85:77:
34:84:34:63:81:37:ec:34:3f:dc:04:78:b9:60:32:
df:5a:17:e4:08:56:80:aa:9a:37:4f:7f:b6:bf:77:
93:9a:b2:16:05:e7:a9:2e:79:76:35:d0:a0:dc:90:
b0:90:1a:f1:ec:44:7f:99:09:b7:00:22:8c:94:6f:
c1:e1:cf:1d:ca:87:f9:9c:a0:52:91:79:15:e7:25:
74:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:9D:7C:25:49:DD:9E:82:73:17:B0:2B:90:D8:BB:D9:4C:CB:D4:8D
X509v3 Authority Key Identifier:
keyid:5B:AE:EB:4C:3A:69:85:14:12:55:FD:5F:6A:E1:88:40:67:34:8F:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W67rTDpphRQSVf1fauGIQGc0j0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/w518JUndnoJzF7ArkNi72UzL1I0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.142.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:b8:52:f5:d7:c3:78:ff:b5:49:ca:0a:75:2c:be:4c:0f:3e:
1f:a5:95:56:d4:3b:33:38:62:80:eb:4f:2b:c9:85:53:5c:3b:
f2:db:74:db:ab:0d:41:a5:90:ca:eb:ac:17:8e:06:8b:29:4f:
76:aa:f7:cd:0e:9a:d4:23:56:55:c7:a7:8e:56:8d:8d:2b:78:
4a:d5:f8:a7:0b:90:90:56:05:47:e1:e1:86:eb:86:f1:92:e8:
ca:62:74:95:4d:63:a6:60:fb:0a:03:60:64:0c:f6:f0:78:16:
4e:a5:a5:05:ac:32:67:45:bf:f2:20:fb:00:0d:69:8b:83:ae:
41:7b:49:c7:24:ec:9c:b1:7e:2a:16:7c:0b:5f:8f:d0:5d:a4:
81:ad:c4:72:16:93:8c:97:4d:fa:05:e7:97:5d:1f:32:d2:a6:
03:68:9b:a8:14:0d:9f:54:72:c6:07:d9:fb:9a:d2:0e:f0:72:
68:3f:28:da:01:f7:d9:a8:0e:6b:87:5d:0d:47:39:72:a9:24:
ff:06:59:be:90:f1:89:79:03:7a:12:ea:2e:05:41:35:4d:2f:
e8:ff:4f:1e:8f:3f:7b:bd:7e:ea:f5:72:3c:fc:f2:bf:bc:52:
77:45:50:9d:fa:bd:59:2a:19:9a:b8:e1:96:f9:ff:d8:6e:20:
84:98:68:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:30:42 2025 by rpki-client