Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/w1gXAM10IC9pZqybLOONxjNQk9s.roa
File: w1gXAM10IC9pZqybLOONxjNQk9s.roa (raw, json)
Hash identifier: FswUkq5LiNvg83RjgvN+Lqt4aaAz4dRQ2S08k/Lt+qM=
Subject key identifier: C3:58:17:00:CD:74:20:2F:69:66:AC:9B:2C:E3:8D:C6:33:50:93:DB
Certificate issuer: /CN=8d58406ad38b155c198e385a9c2f621bce21f877
Certificate serial: 01990E7A2CF33C0D4E66B3DD81699FB428D2
Authority key identifier: 8D:58:40:6A:D3:8B:15:5C:19:8E:38:5A:9C:2F:62:1B:CE:21:F8:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVhAatOLFVwZjjhanC9iG84h-Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/w1gXAM10IC9pZqybLOONxjNQk9s.roa
Signing time: Wed 03 Sep 2025 07:28:31 +0000
ROA not before: Wed 03 Sep 2025 07:28:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209573
IP address blocks: 139.28.64.0/22 maxlen: 22
139.28.64.0/23 maxlen: 23
139.28.64.0/24 maxlen: 24
139.28.65.0/24 maxlen: 24
139.28.66.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVhAatOLFVwZjjhanC9iG84h-Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0e:7a:2c:f3:3c:0d:4e:66:b3:dd:81:69:9f:b4:28:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d58406ad38b155c198e385a9c2f621bce21f877
Validity
Not Before: Sep 3 07:28:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3581700cd74202f6966ac9b2ce38dc6335093db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3f:50:4c:50:1b:8c:d6:7a:da:eb:17:e0:ae:
bc:46:80:eb:c3:5b:8e:a6:db:8b:3a:09:cb:61:88:
e2:11:fd:e8:a2:4c:83:ef:9f:77:1f:c7:70:40:5d:
37:38:a7:c5:12:7f:c9:78:ad:80:e4:55:59:5f:f9:
80:f2:79:91:8e:9c:54:b8:a7:b2:6c:0f:e0:92:5a:
85:aa:42:2e:1c:7a:38:e7:c9:b2:64:b6:c7:56:ec:
c3:fd:dd:37:19:e4:ed:5a:0f:10:ab:07:fb:99:07:
8a:be:75:3f:df:b3:ca:c1:0f:18:5a:e2:f0:31:17:
af:12:f5:f1:a6:1f:57:a4:af:ac:f6:11:0b:9f:7d:
a7:fb:71:3a:05:ce:8c:ff:84:19:89:a3:de:8c:da:
8d:45:2c:fd:c4:77:a9:74:bd:0a:f9:d5:ed:f8:a6:
96:24:d0:07:6c:f1:18:b3:c4:75:72:74:35:c3:4f:
43:e6:e7:e5:78:96:e2:56:37:92:25:67:3c:41:ab:
5f:9d:33:3d:88:86:99:3c:cf:44:48:93:a0:73:90:
b7:59:34:38:fd:13:08:ca:67:04:a1:f1:c7:44:34:
09:81:63:7a:56:5e:f3:5d:91:61:66:f0:bc:65:c2:
5f:82:59:0d:8d:cb:59:2c:cf:37:b9:7c:65:90:b4:
c2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:58:17:00:CD:74:20:2F:69:66:AC:9B:2C:E3:8D:C6:33:50:93:DB
X509v3 Authority Key Identifier:
keyid:8D:58:40:6A:D3:8B:15:5C:19:8E:38:5A:9C:2F:62:1B:CE:21:F8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVhAatOLFVwZjjhanC9iG84h-Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/w1gXAM10IC9pZqybLOONxjNQk9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.64.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:0e:94:9a:66:61:6a:5d:a0:2c:fa:9b:9b:8c:66:70:88:0b:
f2:27:95:f5:c5:a7:32:24:4a:62:18:be:e2:8c:e8:7a:fb:46:
a0:89:b3:7f:2a:01:7f:53:2d:47:a1:ff:47:87:9a:2b:29:cd:
91:ce:25:6b:9f:f7:ca:95:88:29:21:99:f1:12:a8:d0:b9:26:
6b:d9:73:8d:e9:1a:31:ac:ae:ab:27:4e:c8:cc:c4:e4:58:97:
0f:8e:cd:e8:5d:10:fe:54:18:4c:dd:4f:90:93:4a:33:34:c9:
a4:41:e8:34:3a:10:c1:45:b9:dc:dd:41:b6:48:76:75:65:fe:
da:78:d5:d8:7f:b1:20:dc:95:6b:5a:2c:35:b4:78:8b:69:35:
69:94:ba:e9:19:03:e3:cd:62:5f:66:96:d6:87:d1:cb:18:bd:
96:49:ea:6f:1b:29:69:48:64:7d:07:37:cf:44:b1:08:9f:1e:
25:2e:0a:74:6e:8e:a7:4a:14:72:32:cc:52:28:6f:76:fd:5b:
df:b3:b2:ea:16:59:b8:73:21:85:3b:45:ce:92:a7:c1:3d:bd:
d6:94:f3:5f:72:56:fc:57:d0:a1:78:74:eb:ef:72:28:44:44:
9f:00:c9:67:f2:9f:3d:ba:f5:39:5f:91:1d:08:5b:b5:59:27:
ab:ce:e5:91
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZkOeizzPA1OZrPdgWmftCjSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNTg0MDZhZDM4YjE1NWMxOThlMzg1YTljMmY2MjFiY2Uy
MWY4NzcwHhcNMjUwOTAzMDcyODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzU4MTcwMGNkNzQyMDJmNjk2NmFjOWIyY2UzOGRjNjMzNTA5M2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD9QTFAbjNZ62usX4K68RoDrw1uO
ptuLOgnLYYjiEf3ookyD7593H8dwQF03OKfFEn/JeK2A5FVZX/mA8nmRjpxUuKey
bA/gklqFqkIuHHo458myZLbHVuzD/d03GeTtWg8Qqwf7mQeKvnU/37PKwQ8YWuLw
MRevEvXxph9XpK+s9hELn32n+3E6Bc6M/4QZiaPejNqNRSz9xHepdL0K+dXt+KaW
JNAHbPEYs8R1cnQ1w09D5ufleJbiVjeSJWc8QatfnTM9iIaZPM9ESJOgc5C3WTQ4
/RMIymcEofHHRDQJgWN6Vl7zXZFhZvC8ZcJfglkNjctZLM83uXxlkLTC7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMNYFwDNdCAvaWasmyzjjcYzUJPbMB8GA1UdIwQY
MBaAFI1YQGrTixVcGY44WpwvYhvOIfh3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalZoQWF0T0xGVndaampoYW5DOWlHODRoLUhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wYmE1MWMtMTc3MC00ZGZhLTgzNjct
MjhmNjhhNGExNDNiLzEvdzFnWEFNMTBJQzlwWnF5YkxPT054ak5RazlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8wYmE1MWMtMTc3MC00ZGZhLTgzNjctMjhmNjhhNGExNDNi
LzEvalZoQWF0T0xGVndaampoYW5DOWlHODRoLUhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCixxAMA0G
CSqGSIb3DQEBCwUAA4IBAQBPDpSaZmFqXaAs+pubjGZwiAvyJ5X1xacyJEpiGL7i
jOh6+0agibN/KgF/Uy1Hof9Hh5orKc2RziVrn/fKlYgpIZnxEqjQuSZr2XON6Rox
rK6rJ07IzMTkWJcPjs3oXRD+VBhM3U+Qk0ozNMmkQeg0OhDBRbnc3UG2SHZ1Zf7a
eNXYf7Eg3JVrWiw1tHiLaTVplLrpGQPjzWJfZpbWh9HLGL2WSepvGylpSGR9BzfP
RLEInx4lLgp0bo6nShRyMsxSKG92/Vvfs7LqFlm4cyGFO0XOkqfBPb3WlPNfclb8
V9CheHTr73IoRESfAMln8p89uvU5X5EdCFu1WSerzuWR
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:12 2025 by rpki-client