Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/wQVHsxN8lTBq5V_pewzOq7Laf0k.roa
File: wQVHsxN8lTBq5V_pewzOq7Laf0k.roa (raw, json)
Hash identifier: w2m+GM7WmHsey3doCl3U/Uda3tGjG/DaokFOWdlHDKk=
Subject key identifier: C1:05:47:B3:13:7C:95:30:6A:E5:5F:E9:7B:0C:CE:AB:B2:DA:7F:49
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0199E6EBD0A58B584B7CE1AD89DCDE9A2C77
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/wQVHsxN8lTBq5V_pewzOq7Laf0k.roa
Signing time: Wed 15 Oct 2025 08:10:38 +0000
ROA not before: Wed 15 Oct 2025 08:10:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202791
IP address blocks: 188.255.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e6:eb:d0:a5:8b:58:4b:7c:e1:ad:89:dc:de:9a:2c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Oct 15 08:10:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c10547b3137c95306ae55fe97b0cceabb2da7f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a3:71:a7:30:e8:7b:cd:99:21:9f:b5:be:b4:
c7:74:81:c8:1b:13:11:7b:35:53:6a:15:4a:20:26:
8a:ef:c4:8c:58:8d:a0:58:e8:d7:ac:cc:9a:98:a9:
23:33:c4:19:3d:b9:a9:b1:c2:91:fd:82:e2:0e:51:
be:08:a5:d5:74:e5:7e:25:2e:e3:7e:07:02:2d:a3:
e4:26:45:cf:f3:59:8f:5e:e4:3d:58:6f:7c:92:68:
0f:81:89:d9:31:12:d2:7e:8e:32:4d:68:36:d6:ce:
db:cd:8a:d6:ca:d1:7a:8b:34:0a:1d:12:ee:ef:b6:
b1:b6:aa:c2:be:34:74:86:32:b0:64:92:0b:60:41:
1d:3a:b1:45:ad:2d:20:52:81:26:98:3f:e4:9f:26:
cd:3e:76:4b:b8:57:57:cc:9e:f5:10:a8:f3:c7:f5:
e5:b0:f0:c0:6d:6c:13:ee:8d:53:b8:bb:f2:1c:6b:
75:40:0b:b8:17:a4:ca:43:94:57:8f:ba:21:7d:b4:
0a:97:f6:4d:3a:54:4a:9b:fc:71:87:41:94:01:d0:
58:9a:9e:ac:92:fc:3f:7e:f8:fc:4b:4b:b3:96:d8:
5e:34:63:ae:8f:0c:c9:63:b0:80:0d:b8:7d:06:77:
9a:a5:08:b1:5d:34:2d:a2:bd:76:24:54:37:86:6d:
4e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:05:47:B3:13:7C:95:30:6A:E5:5F:E9:7B:0C:CE:AB:B2:DA:7F:49
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/wQVHsxN8lTBq5V_pewzOq7Laf0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.197.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:86:b8:42:ad:01:e7:be:b4:60:f6:8e:7e:11:b7:ce:59:a6:
65:5a:35:fd:ee:8a:35:67:4a:65:9b:58:c4:55:2d:83:a2:d7:
c5:b8:a5:40:66:57:57:18:77:9e:34:b8:4b:aa:50:04:fa:a9:
01:e2:fe:45:fa:0e:2b:ef:2b:70:a9:bb:88:30:5a:97:ed:0f:
97:d4:88:1e:1b:c7:4b:07:fa:36:14:1f:9b:98:5c:77:e1:27:
2d:61:2a:c1:e3:b2:73:88:fe:1c:1f:ba:ee:01:94:1d:bc:94:
29:d9:67:99:c9:27:2a:7f:e6:f5:3c:20:5d:13:64:8a:53:00:
ce:a2:ee:be:4e:76:c2:d3:96:29:6c:4b:21:28:a9:3c:a7:32:
ec:b1:47:d2:ed:29:bd:74:7d:bb:5a:64:e1:a1:d0:29:2f:51:
2d:76:8f:73:a1:3e:9b:75:4a:3b:88:f6:52:f1:5c:b7:b3:9a:
1a:1b:fb:dc:ff:02:29:57:87:e9:0d:c9:03:06:f0:98:49:4e:
44:fa:55:39:aa:d6:0b:eb:b8:a2:3c:8d:ba:29:8a:89:0d:81:
cb:b6:6e:f6:15:2e:58:41:76:f0:a2:73:2a:64:9a:04:dc:e9:
1b:a7:7f:75:70:88:2a:56:54:1b:0d:9e:83:0d:bb:52:38:3c:
ee:d4:ca:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:30:53 2025 by rpki-client