Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/w18jUtmrOZJRWhemLj9RjwFNsjI.roa
File: w18jUtmrOZJRWhemLj9RjwFNsjI.roa (raw, json)
Hash identifier: WrHytcRrwStiCvINSnhM6Ft3GSQ1csnMbWLO+Jsyj2w=
Subject key identifier: C3:5F:23:52:D9:AB:39:92:51:5A:17:A6:2E:3F:51:8F:01:4D:B2:32
Certificate issuer: /CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Certificate serial: 0198C3FFE55487120CB3289E7BB4F8045889
Authority key identifier: 05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/w18jUtmrOZJRWhemLj9RjwFNsjI.roa
Signing time: Tue 19 Aug 2025 20:23:04 +0000
ROA not before: Tue 19 Aug 2025 20:23:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 2a0e:b1c6::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c3:ff:e5:54:87:12:0c:b3:28:9e:7b:b4:f8:04:58:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Validity
Not Before: Aug 19 20:23:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c35f2352d9ab3992515a17a62e3f518f014db232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:13:a3:12:50:e9:1d:c0:2f:ea:e5:f3:16:bc:
18:dd:a1:0b:c3:74:75:a1:4d:eb:ea:30:dd:d6:c8:
9f:94:f4:ab:d9:2a:77:05:a2:49:9c:ac:0e:0c:8b:
d4:e0:8a:b6:f5:7c:6f:c6:0b:f2:0d:ba:dc:85:e9:
90:dc:57:f7:24:25:de:bb:9d:8e:c7:14:6a:23:84:
99:84:93:1f:f2:3a:c8:20:e1:fd:71:72:12:7d:96:
1a:b8:5e:9b:01:a4:e2:2a:f1:f2:f2:ce:4c:30:2e:
c2:d5:cb:4d:90:4f:1e:e4:fe:1b:b3:c3:a6:31:24:
1b:7b:9d:fc:ec:bb:f6:06:7d:d8:75:ed:11:e9:9b:
be:8a:95:18:8f:c9:3a:05:b2:38:15:87:7e:55:67:
ca:7b:2a:b4:0a:b5:4b:09:14:86:e6:e3:31:54:00:
23:80:08:3e:a3:36:86:43:91:7b:e3:f0:d5:9c:4e:
d1:5e:91:07:c3:77:42:6b:36:00:f5:07:cb:a4:33:
93:86:4e:df:e7:93:02:1e:59:00:a5:fc:ec:00:06:
e2:9d:36:e8:45:15:3f:58:89:b0:42:66:13:ad:c4:
f2:b0:cf:c1:a0:4e:cf:14:1a:ad:f6:35:89:bc:7f:
af:05:a4:77:9e:eb:a6:b3:0c:a3:c2:c3:6e:0b:2b:
de:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5F:23:52:D9:AB:39:92:51:5A:17:A6:2E:3F:51:8F:01:4D:B2:32
X509v3 Authority Key Identifier:
keyid:05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/w18jUtmrOZJRWhemLj9RjwFNsjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b1c6::/32
Signature Algorithm: sha256WithRSAEncryption
58:db:38:34:ff:0d:07:93:d9:47:c9:53:97:d8:59:32:c2:0a:
af:3e:ab:68:4b:b1:ad:d8:c5:19:9d:9a:cc:84:11:a9:6c:06:
87:64:43:7e:33:42:eb:49:05:9f:13:1a:ad:40:0b:4c:5e:03:
d8:0f:da:bc:88:26:8c:14:a9:eb:ef:6f:3a:25:d6:e8:04:ba:
23:ed:2e:01:da:26:d6:7d:25:3e:a5:f9:71:87:b6:2d:c2:48:
95:c2:ed:8b:37:22:81:a2:c2:bf:9d:29:c8:ae:2a:4a:e0:3d:
1c:24:91:65:29:e8:b0:61:88:3f:d0:b1:46:ca:e1:ef:cf:f0:
e1:49:98:65:5c:43:30:02:e2:9e:41:fc:47:79:d7:b7:55:45:
a2:99:97:79:cb:5d:cb:8c:63:56:21:73:66:0f:7f:9a:a7:9d:
7b:39:89:bd:4a:13:b7:33:56:e2:f2:4d:7b:8c:10:83:e5:3f:
c9:1b:89:cb:04:b7:8b:fb:15:23:94:de:aa:71:9c:41:02:96:
7a:23:44:8b:36:be:05:68:60:97:b3:d2:4c:07:76:0c:4e:80:
76:34:6f:0c:39:9d:2a:ed:25:43:46:6b:f7:d4:9f:16:9a:93:
4e:40:cf:b0:77:88:44:b3:89:31:59:3c:ef:83:d4:db:59:c9:
d7:25:55:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:55:22 2025 by rpki-client