Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/w0ZNcMcB-bV_ZuH0hz4E--VU2Vo.roa
File: w0ZNcMcB-bV_ZuH0hz4E--VU2Vo.roa (raw, json)
Hash identifier: v/Cb++4Ig4m2ncnNcoRi4jmKgzmundzsjJp4HEYTTkE=
Subject key identifier: C3:46:4D:70:C7:01:F9:B5:7F:66:E1:F4:87:3E:04:FB:E5:54:D9:5A
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0199DC6E93DE31C1147FBFFB5A668C895EFF
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/w0ZNcMcB-bV_ZuH0hz4E--VU2Vo.roa
Signing time: Mon 13 Oct 2025 07:17:38 +0000
ROA not before: Mon 13 Oct 2025 07:17:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214432
IP address blocks: 81.18.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:dc:6e:93:de:31:c1:14:7f:bf:fb:5a:66:8c:89:5e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Oct 13 07:17:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3464d70c701f9b57f66e1f4873e04fbe554d95a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e6:d7:19:6a:a8:9c:df:f5:8d:b0:13:2c:d6:
d3:67:7b:5b:db:31:ef:bf:5e:7f:67:f4:fa:d4:ef:
53:10:b2:00:e1:95:ae:16:1c:9a:2c:c6:99:a3:38:
cb:1f:fe:2d:f7:18:80:7e:93:95:8c:99:20:53:f5:
a9:b5:3d:b8:4e:2c:a2:03:69:96:e3:9a:5d:4c:e3:
6e:d7:82:22:54:cd:48:78:18:e0:8b:c9:b1:67:c2:
d5:e7:fb:7c:28:b7:19:e3:94:21:49:68:da:ca:af:
cd:98:63:fa:00:aa:80:4c:58:37:57:63:77:3b:51:
09:f7:f3:ec:a8:05:ad:9e:03:23:02:c8:e0:7b:c1:
68:b4:34:98:d4:52:ee:48:73:4c:96:6c:53:27:da:
7b:00:0d:c2:83:82:0a:5e:5a:b8:e5:8b:39:b2:83:
68:c2:0e:c4:bf:05:82:f8:7b:24:64:75:f7:5c:97:
4c:bb:89:16:45:1b:1b:6e:92:a8:1e:bb:d6:b6:97:
e6:69:d4:3c:60:52:f6:c8:b7:98:65:55:b9:2f:0a:
ff:69:94:06:fa:6f:66:67:4e:93:4d:53:75:6e:ce:
78:98:31:cc:6a:38:bf:4f:8e:f7:86:4a:d1:ee:23:
f3:12:bd:d0:4f:55:5e:20:16:fc:e4:7f:e0:3d:68:
4e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:46:4D:70:C7:01:F9:B5:7F:66:E1:F4:87:3E:04:FB:E5:54:D9:5A
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/w0ZNcMcB-bV_ZuH0hz4E--VU2Vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.18.58.0/24
Signature Algorithm: sha256WithRSAEncryption
99:d4:8c:39:8d:ab:0b:9a:2f:3f:83:fa:b3:6c:12:60:51:1e:
59:32:84:6e:42:47:4f:90:f8:b8:6e:3d:4b:4b:5b:f5:a7:68:
c4:3f:e4:0f:10:4a:e5:b1:8a:98:23:59:99:ff:37:97:4f:e6:
c9:3a:e2:99:89:21:26:d8:b3:58:14:cc:dd:67:91:ac:84:45:
7d:f6:f1:08:6c:48:de:15:39:42:96:d4:6c:7d:b5:bb:da:5d:
b0:e9:bd:9d:f4:e5:dc:2c:f2:51:78:ba:c2:c3:bc:00:32:26:
03:1e:56:8c:d4:bf:b4:36:a2:0c:e0:e0:41:d4:63:b8:01:aa:
bc:f4:7f:b2:d9:cf:6f:75:6f:87:3a:75:eb:8c:19:cd:4b:60:
1d:73:cb:8f:cc:a5:bd:8f:82:15:c7:84:18:2b:03:9f:7b:b2:
3d:51:53:cd:7c:d3:20:43:91:87:14:a1:e0:d6:91:fd:4d:c6:
a9:fa:dd:6f:3e:96:7f:82:e8:ad:a9:ed:b4:5a:c6:40:1b:94:
8f:cb:74:0e:cc:87:bf:69:9f:75:b7:a1:ec:42:7c:c8:85:fd:
8e:d9:6d:7f:35:24:28:72:19:ff:e4:97:a9:65:6f:99:8e:d8:
04:97:f4:40:d7:fc:93:9c:6b:88:be:87:f1:7e:19:5e:e8:3f:
94:bb:3b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:31:02 2025 by rpki-client