Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/wWFdhMIO6v61Bc3PDCCNPDokWKM.roa
File: wWFdhMIO6v61Bc3PDCCNPDokWKM.roa (raw, json)
Hash identifier: LD5hJmV8+HaeLOGo6OUg1n5/lZTU/SRfQzXJm/qTJc4=
Subject key identifier: C1:61:5D:84:C2:0E:EA:FE:B5:05:CD:CF:0C:20:8D:3C:3A:24:58:A3
Certificate issuer: /CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Certificate serial: 01989905665FA1DCB319A3EA7D8F1EE350C3
Authority key identifier: A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/wWFdhMIO6v61Bc3PDCCNPDokWKM.roa
Signing time: Mon 11 Aug 2025 12:05:24 +0000
ROA not before: Mon 11 Aug 2025 12:05:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152179
IP address blocks: 46.236.198.0/24 maxlen: 24
46.236.200.0/23 maxlen: 24
46.236.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.mft
rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:99:05:66:5f:a1:dc:b3:19:a3:ea:7d:8f:1e:e3:50:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Validity
Not Before: Aug 11 12:05:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1615d84c20eeafeb505cdcf0c208d3c3a2458a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d2:62:25:51:0f:02:fa:cb:e0:b9:ae:a6:0c:
c0:e3:c4:69:b7:90:16:d9:86:a4:c1:4e:73:1c:c5:
10:f6:99:67:1d:46:e5:9d:ed:95:b0:21:a1:26:86:
5f:11:6b:cb:58:73:5c:b1:54:9d:e7:b3:98:71:cb:
bd:a9:83:77:d9:05:1a:a2:5e:1c:7f:0c:6a:4e:b3:
7e:a1:50:75:1f:20:7a:64:40:db:97:63:85:f5:87:
90:a1:c7:6a:30:ba:2a:d3:37:83:08:ac:89:97:f7:
6f:fe:a1:98:2e:51:47:d7:11:9d:df:cf:57:ec:96:
f0:f6:81:38:dc:0e:70:ee:29:fb:dc:01:6a:17:9a:
2f:d4:6a:c4:69:da:2c:25:5a:c4:e8:57:75:1b:3d:
dc:32:0a:e9:a6:b5:6e:af:19:05:e7:ad:24:6a:88:
ee:66:02:c4:f6:3c:6c:51:b7:c6:9b:72:46:16:13:
8d:05:f2:fc:a2:81:95:e5:86:78:00:8c:72:f4:4c:
36:c3:1b:54:13:00:f9:fa:84:67:62:13:ab:5f:98:
53:e8:b9:33:dc:d5:0d:a1:31:fe:45:f0:a1:a9:89:
11:c4:8e:1f:46:35:9f:f5:c6:c0:56:fb:ad:bc:59:
18:11:39:c6:a9:04:21:88:16:fe:9b:e9:18:90:1f:
ff:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:61:5D:84:C2:0E:EA:FE:B5:05:CD:CF:0C:20:8D:3C:3A:24:58:A3
X509v3 Authority Key Identifier:
keyid:A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/wWFdhMIO6v61Bc3PDCCNPDokWKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.198.0/24
46.236.200.0-46.236.202.255
Signature Algorithm: sha256WithRSAEncryption
0c:d3:2c:d7:86:c1:3e:4d:fc:5e:62:7a:9b:ac:57:99:f3:6e:
9b:81:ff:d1:25:c6:43:d7:75:54:b9:03:6e:e6:c3:70:d7:ed:
82:9d:1c:1b:59:96:78:97:67:c2:61:1f:d8:91:98:4e:e4:1a:
b5:c8:87:42:96:8d:af:78:58:d8:ae:32:cc:8f:c7:60:dc:29:
f2:47:95:11:74:87:22:cd:a9:e3:ae:fb:33:1a:9c:40:ee:07:
0d:49:7d:4c:f5:35:e4:4a:13:f9:29:bd:ef:55:b9:9f:8e:b4:
d0:d7:05:f9:6b:4c:36:e4:7d:62:25:07:da:85:8d:56:a8:21:
1b:90:8f:7d:12:c7:3c:71:ea:90:3f:eb:02:5b:40:2d:b6:34:
ec:50:42:4a:d1:19:9d:43:96:2a:fd:9e:d7:a3:b3:7f:11:7a:
97:24:55:40:20:d2:02:22:42:b0:6f:4e:a3:e7:60:ef:83:6b:
8c:93:83:c6:4f:dc:35:28:d5:e8:67:17:51:49:3c:61:67:b5:
56:a5:57:e1:0c:f7:15:79:8a:43:dd:17:9f:c5:11:6c:b4:ff:
90:af:64:94:a0:d9:f7:91:18:ac:fd:08:a4:f1:32:4d:45:25:
53:78:fc:5f:a1:25:1f:c2:eb:7d:f3:e3:25:90:38:2e:2a:99:
da:6b:9e:c9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:43:26 2025 by rpki-client