Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/wx-I5II9KgePJb1BzwbnkIwKi-s.roa
File: wx-I5II9KgePJb1BzwbnkIwKi-s.roa (raw, json)
Hash identifier: 1XKZt7Lxtq6c0LtCqaWKuwXxDvHKvqfE/UobEHayINE=
Subject key identifier: C3:1F:88:E4:82:3D:2A:07:8F:25:BD:41:CF:06:E7:90:8C:0A:8B:EB
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 0199CD8EE53D3B0D9A2340F22B814F749B74
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/wx-I5II9KgePJb1BzwbnkIwKi-s.roa
Signing time: Fri 10 Oct 2025 09:58:38 +0000
ROA not before: Fri 10 Oct 2025 09:58:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209847
IP address blocks: 45.133.216.0/24 maxlen: 24
194.156.98.0/24 maxlen: 24
194.156.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cd:8e:e5:3d:3b:0d:9a:23:40:f2:2b:81:4f:74:9b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Oct 10 09:58:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c31f88e4823d2a078f25bd41cf06e7908c0a8beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:90:7e:e6:03:c3:90:d0:93:a2:cc:e8:9a:19:
a5:0d:d6:98:82:b6:23:ba:94:73:2b:cc:bc:b6:de:
9f:a4:84:66:2c:54:2d:59:d1:a1:89:ae:97:f2:cf:
f7:d1:4a:78:36:b7:5a:f2:c5:4e:f8:d7:c1:8a:2e:
c7:e1:3f:41:8f:02:af:67:e4:06:72:5a:40:6b:c8:
eb:ef:b7:6b:1c:17:10:4b:85:c5:04:d5:5b:15:16:
29:a6:76:c4:04:fe:41:fa:08:27:90:68:c1:a1:98:
32:90:da:38:ec:08:03:58:5f:b2:e8:3b:d8:ef:16:
4c:10:89:e0:ec:44:f0:aa:72:b1:63:56:3e:9e:d8:
10:88:a0:c8:15:7c:f2:a3:16:84:24:3f:76:d0:be:
4d:99:ab:a5:6f:01:e0:db:7a:3b:38:6e:c3:50:3e:
d2:1d:26:ab:65:89:5c:f4:3f:7c:24:eb:90:13:82:
14:81:cb:36:a4:16:b8:45:c7:7c:14:ca:80:25:ff:
97:08:54:ee:78:d7:50:a7:24:f9:77:09:7c:11:a8:
67:07:88:aa:1a:b3:3d:6d:83:22:d1:3d:06:f3:0b:
8f:98:79:7e:c7:5f:a4:1e:ce:b8:1b:5d:b0:9e:ca:
48:78:76:84:ed:5f:7e:e2:92:c9:ee:a5:74:9b:ae:
c0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:1F:88:E4:82:3D:2A:07:8F:25:BD:41:CF:06:E7:90:8C:0A:8B:EB
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/wx-I5II9KgePJb1BzwbnkIwKi-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.216.0/24
194.156.98.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:81:21:12:b3:64:97:7b:e0:d7:10:26:62:4a:4b:ea:5e:9b:
7f:1c:66:0a:9b:6c:4a:dd:8f:60:f1:15:9a:5e:0f:c4:73:81:
10:17:27:3d:fb:25:98:cb:75:a2:60:bb:e9:32:10:19:7c:0b:
36:26:9f:fe:89:6c:ea:a1:46:b0:e5:de:bc:17:ac:30:e0:49:
71:36:a6:4e:ac:f7:62:16:c5:38:b1:b0:3a:cf:d3:00:de:4a:
e1:5e:7c:53:20:59:9c:af:fd:1f:47:41:67:f7:27:42:e6:73:
f3:d1:61:d3:91:07:d2:d1:21:ae:1e:09:01:6a:53:d3:72:aa:
52:a8:64:65:ae:f9:d0:17:f9:58:77:f2:12:87:b8:d0:7d:c2:
a4:d8:ea:4c:52:63:91:ab:8a:e1:1c:fb:00:d6:ea:8b:af:f4:
f3:00:dd:a0:bb:0d:34:89:13:3a:93:5a:3d:de:1d:15:22:88:
6e:a0:30:6e:a4:98:4e:4c:ea:e8:f1:9c:85:ae:ac:42:13:5b:
50:a2:dc:28:d4:04:c9:43:49:e7:0c:de:2f:2f:b4:4a:37:02:
3b:fb:f8:50:03:c3:4a:d5:cc:1f:0d:2f:1e:28:a8:8e:ec:5d:
04:be:d3:f1:89:94:e8:67:de:03:ea:ee:b1:33:18:73:1a:38:
f0:67:94:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:49:33 2025 by rpki-client