Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/wCJSdfq8Izx4MRAZ1OgRAp1oSKE.roa
File: wCJSdfq8Izx4MRAZ1OgRAp1oSKE.roa (raw, json)
Hash identifier: AM6RE45NtcULIgSEkJPzE9RmTZuSiXRuqRZn0Km8ACQ=
Subject key identifier: C0:22:52:75:FA:BC:23:3C:78:31:10:19:D4:E8:11:02:9D:68:48:A1
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0198CCA11194156891711C8DD992567866F5
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/wCJSdfq8Izx4MRAZ1OgRAp1oSKE.roa
Signing time: Thu 21 Aug 2025 12:36:04 +0000
ROA not before: Thu 21 Aug 2025 12:36:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197555
IP address blocks: 193.35.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cc:a1:11:94:15:68:91:71:1c:8d:d9:92:56:78:66:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Aug 21 12:36:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0225275fabc233c78311019d4e811029d6848a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e1:62:bb:b3:81:95:7c:02:33:1f:3d:85:37:
d7:ec:44:ee:7e:f7:f1:af:9d:4f:8a:84:3e:44:40:
7f:ee:23:08:43:b1:20:08:1a:eb:fa:82:30:66:ab:
27:47:73:4f:d9:99:a2:2d:e7:5d:74:60:35:0c:e9:
0a:d7:47:ed:2b:eb:ec:e4:7a:29:66:d0:85:e4:67:
98:8a:66:d0:0d:fd:47:35:7e:1c:9a:48:c0:d5:2e:
33:05:70:11:5e:6a:a4:bb:41:03:21:66:68:be:cf:
34:fd:90:61:60:f3:e1:dd:47:ea:90:ce:36:3a:fd:
74:a8:26:76:32:d8:22:02:fe:0b:a1:1b:b0:57:2a:
61:ff:d8:12:fc:ea:cd:d3:20:ff:b3:a1:c5:9e:65:
9b:9b:a2:02:5f:14:64:cc:37:9e:62:e8:46:89:c9:
2b:4c:03:3b:19:19:6c:ff:ed:99:db:8a:70:7f:c7:
33:73:ec:e6:71:02:c0:2f:b4:e1:97:72:20:c6:db:
2f:17:7c:6c:75:f0:1a:00:45:29:5d:0d:a1:57:e9:
d9:2b:48:b8:fb:90:82:71:eb:4e:a5:b3:6a:c2:84:
30:bb:f2:ff:0e:78:0c:67:23:78:63:24:16:3d:c5:
c6:d5:41:c6:af:5b:5b:b4:2d:aa:67:07:22:80:fb:
92:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:22:52:75:FA:BC:23:3C:78:31:10:19:D4:E8:11:02:9D:68:48:A1
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/wCJSdfq8Izx4MRAZ1OgRAp1oSKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.153.0/24
Signature Algorithm: sha256WithRSAEncryption
32:64:3e:50:1f:ac:b3:fc:bc:b2:53:86:14:0c:17:a7:c7:23:
23:c2:fb:a3:6a:ef:f1:37:b1:d9:0e:f1:51:94:42:0c:de:54:
16:70:6b:13:18:be:d3:b5:3e:d5:86:4e:c9:d9:26:a1:90:5b:
c5:93:6c:2e:e4:b9:3a:d4:5a:13:e4:09:ad:ae:e9:0a:f4:a8:
ff:b5:3c:f4:b4:fc:4f:12:15:f2:9f:f9:43:95:af:43:be:e1:
68:da:bd:14:5f:9a:67:8d:b2:89:b1:94:aa:ba:1d:dd:48:72:
17:5e:3e:96:6a:d1:e9:ae:6e:0a:47:d6:a9:31:55:11:2d:dc:
af:40:9e:9f:26:0f:60:4e:f4:02:7e:ba:c7:24:06:ed:b7:39:
3b:a6:db:c6:f8:eb:80:16:95:40:dd:bf:d3:89:53:aa:26:e3:
bf:93:96:79:94:a4:7f:64:81:e6:ec:2c:51:c1:99:ae:3d:0b:
cd:7c:ce:a1:4e:5d:05:ff:d2:03:1d:ff:72:de:7f:a6:ed:a4:
71:eb:44:38:2c:42:4c:29:72:a7:16:d0:55:b4:2c:bd:83:24:
cb:d0:a7:29:64:e4:b1:df:19:07:bc:e8:ba:3b:25:74:a9:47:
65:3a:eb:43:00:af:a3:41:d2:05:e6:51:4f:70:b6:01:c2:a6:
ae:7f:16:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:28:30 2025 by rpki-client