Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/wT6-Zw7AGd86-fxWbGmTOHpfarE.roa
File: wT6-Zw7AGd86-fxWbGmTOHpfarE.roa (raw, json)
Hash identifier: sOi75jBrZgAaSe/N5e1cUDcPkkUhhPirWKuRm8pL5uo=
Subject key identifier: C1:3E:BE:67:0E:C0:19:DF:3A:F9:FC:56:6C:69:93:38:7A:5F:6A:B1
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 0198A29CD7D5488CADA576276AC5853CFBA4
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/wT6-Zw7AGd86-fxWbGmTOHpfarE.roa
Signing time: Wed 13 Aug 2025 08:47:24 +0000
ROA not before: Wed 13 Aug 2025 08:47:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401838
IP address blocks: 91.193.253.0/24 maxlen: 24
93.89.211.0/24 maxlen: 24
93.89.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 20:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a2:9c:d7:d5:48:8c:ad:a5:76:27:6a:c5:85:3c:fb:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Aug 13 08:47:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c13ebe670ec019df3af9fc566c6993387a5f6ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:80:b6:69:1a:df:e7:4d:35:90:ca:bd:2d:80:
6d:ae:d0:9c:47:ed:50:5a:00:a6:64:09:f9:94:61:
32:bc:87:56:c1:55:3c:f4:b5:87:94:7f:2d:d6:f6:
df:4f:70:00:f5:ce:3d:c5:03:ae:5f:22:92:b4:1b:
4f:6b:7c:8e:31:de:0a:18:b7:e7:a1:c7:03:80:8f:
e1:14:5e:04:b4:4f:ad:fb:60:89:59:d2:de:fe:92:
07:33:d2:ad:f0:7b:ce:83:1b:29:e2:0e:4f:16:93:
98:2b:a7:90:b4:37:1e:cb:69:17:b2:91:6b:46:25:
9e:d1:8e:6f:2f:17:57:73:15:b0:63:1f:bf:5b:74:
77:9d:79:31:c8:14:9a:41:93:67:39:ce:91:f1:e9:
8b:0c:04:01:0e:2d:ad:fc:08:10:32:66:db:6e:da:
39:f3:ef:66:18:19:c9:50:c9:db:f9:d2:b6:ea:f0:
80:92:95:c6:b3:59:39:b9:70:1a:c7:00:3a:93:97:
ab:cd:f5:b2:4c:01:cc:70:5a:c7:16:5f:06:12:df:
1c:a9:f6:aa:09:d1:51:09:3a:ce:c3:d9:b7:2c:dc:
03:e5:a3:0e:17:0d:78:db:89:15:62:58:48:fc:e3:
bf:5c:59:51:b2:e2:da:fb:6b:68:3b:40:8e:ec:50:
2b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:3E:BE:67:0E:C0:19:DF:3A:F9:FC:56:6C:69:93:38:7A:5F:6A:B1
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/wT6-Zw7AGd86-fxWbGmTOHpfarE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.253.0/24
93.89.211.0/24
93.89.217.0/24
Signature Algorithm: sha256WithRSAEncryption
74:0c:99:71:ea:a5:53:8d:9c:da:54:f4:1c:57:8a:7d:9b:4c:
f0:9e:a2:19:c0:93:28:fe:7e:92:b7:8f:04:02:19:90:8e:92:
fa:fa:db:17:6c:57:89:e8:de:bc:c4:26:d6:19:13:5f:f0:6d:
a0:db:bd:fc:73:9d:ef:46:c5:33:c7:dd:09:a0:86:12:ef:2a:
29:19:5a:12:7c:65:c9:9a:0d:69:7f:6b:7a:38:f1:23:ad:f1:
82:ad:0a:e9:4e:d4:a3:7d:f4:4d:69:6b:0f:8f:8b:44:12:c1:
78:d9:56:92:cc:74:d8:9f:60:3e:ad:3c:6c:51:04:22:2f:f4:
24:51:ad:b5:72:3a:0f:f3:78:ec:8f:4d:07:4d:a8:32:7a:9a:
4b:c7:b6:91:8b:b1:46:48:75:ed:32:8d:c7:70:b0:20:59:a1:
ba:64:c7:d8:16:70:e3:34:08:22:a7:f0:40:d5:a4:b4:c2:eb:
89:02:a1:e1:6e:82:c3:5a:1e:ee:03:76:4a:d7:e6:44:b4:e6:
42:a5:f9:88:dc:15:7a:af:29:34:dd:80:19:fe:ec:fe:d2:d0:
98:32:cd:bc:95:a8:fa:63:aa:52:f3:f8:f8:fd:8a:67:53:b6:
52:c6:e9:7e:46:11:3a:06:ee:73:a8:fc:b0:b5:43:3d:52:8d:
06:9a:77:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:15:25 2025 by rpki-client