Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Wof8vint2UVZi_ADYqyMb6-zy0k.roa
File: Wof8vint2UVZi_ADYqyMb6-zy0k.roa (raw, json)
Hash identifier: RFGXqkyKTVMh87jFkBkTwIekDYjiJwUUL7iHXvJHDoQ=
Subject key identifier: 5A:87:FC:BE:29:ED:D9:45:59:8B:F0:03:62:AC:8C:6F:AF:B3:CB:49
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0198CCF484EFFF393D6A8A607AD1C9FC7A1D
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Wof8vint2UVZi_ADYqyMb6-zy0k.roa
Signing time: Thu 21 Aug 2025 14:07:13 +0000
ROA not before: Thu 21 Aug 2025 14:07:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213908
IP address blocks: 194.62.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cc:f4:84:ef:ff:39:3d:6a:8a:60:7a:d1:c9:fc:7a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Aug 21 14:07:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a87fcbe29edd945598bf00362ac8c6fafb3cb49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d2:53:3b:c2:61:7c:4e:f4:2b:5b:60:8f:2f:
68:81:ea:7c:95:16:d5:47:bb:e0:36:17:8c:46:16:
a6:ff:45:ba:79:55:c5:04:2b:10:f5:b7:38:d0:62:
f8:ea:b9:c8:9a:10:fa:03:bd:01:d1:2d:8c:d0:ba:
51:02:ef:cf:fb:ba:51:c4:5f:fa:4c:db:c8:1e:ec:
28:47:8d:aa:48:45:2e:a6:17:a5:25:5d:f9:ed:31:
2a:d3:9f:cc:cc:13:74:ad:88:7d:17:ac:90:78:22:
0d:ea:41:51:58:62:6a:d9:7e:5d:98:65:9d:15:a9:
4a:99:42:3e:6e:6a:ea:59:8d:26:dc:fa:16:40:ae:
15:a9:9b:a1:70:5c:9b:84:d2:95:6b:5f:f4:dc:38:
84:9e:60:23:97:5b:72:7e:e7:00:94:12:e6:20:f0:
85:9a:87:5e:c2:f1:35:c1:27:92:63:45:5d:55:16:
e4:48:02:8b:0c:59:b7:22:f8:f4:41:29:ab:67:4a:
76:5f:b9:7e:c4:b5:35:c1:cd:3d:04:2f:77:75:5e:
13:60:a6:fe:46:df:85:87:1f:e5:a8:e6:58:1c:7f:
6a:78:fd:5e:c1:2a:d7:59:f8:16:e5:70:1e:68:dc:
ea:30:3b:d6:d7:2c:d8:93:7e:b2:35:c7:00:41:cf:
65:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:87:FC:BE:29:ED:D9:45:59:8B:F0:03:62:AC:8C:6F:AF:B3:CB:49
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Wof8vint2UVZi_ADYqyMb6-zy0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.53.0/24
Signature Algorithm: sha256WithRSAEncryption
84:ef:bb:ff:99:f6:dc:0e:55:40:ea:33:59:66:a8:3a:c2:b1:
72:3c:32:d1:c9:a7:61:d4:bc:94:72:05:9d:d0:83:4f:35:7d:
71:8d:16:99:cf:54:c7:df:d1:d1:5e:9c:72:b2:de:6e:a9:0f:
6e:b6:8c:a0:b4:2c:c8:54:d2:f7:90:c7:39:0d:11:fc:6d:2c:
1c:ce:74:a0:80:5f:86:1f:f2:c0:c4:09:8f:67:7b:78:09:23:
00:75:30:ba:10:f9:08:ae:a3:81:78:d7:0b:70:14:81:ad:99:
35:80:75:07:ea:1e:58:54:45:6d:45:9d:3b:54:9b:26:76:17:
75:98:23:d1:a3:69:29:9a:80:8d:d4:22:16:67:cd:b6:f3:16:
75:99:f2:d6:70:4d:da:42:b2:e0:c4:9a:57:68:61:4b:9a:09:
96:3d:cc:fa:e7:7c:ba:91:88:11:94:a3:ea:08:60:16:58:f2:
f5:91:3b:44:5c:1b:45:8a:55:eb:ba:cc:2b:19:31:2c:ee:2f:
cb:68:cc:96:cf:d2:b9:5b:a1:b5:d3:02:0f:be:3b:be:59:0c:
7b:65:ba:d7:b0:68:c1:ae:61:34:c3:c1:ed:f6:a9:d3:09:e6:
29:be:9d:9d:c9:00:bf:7a:c5:e8:ca:98:3e:67:36:2a:17:4b:
f3:a6:18:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:36:55 2025 by rpki-client