Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/WUfD8Mr87P5Q6OMMM7D8qYRj7Yw.roa
File: WUfD8Mr87P5Q6OMMM7D8qYRj7Yw.roa (raw, json)
Hash identifier: lnz8UTY3gY8sbN5aHqvW8R9IL0N+tSM+RiVHcs7FDNU=
Subject key identifier: 59:47:C3:F0:CA:FC:EC:FE:50:E8:E3:0C:33:B0:FC:A9:84:63:ED:8C
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01985533F6454530155DF3A64298F93C123C
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/WUfD8Mr87P5Q6OMMM7D8qYRj7Yw.roa
Signing time: Tue 29 Jul 2025 08:02:05 +0000
ROA not before: Tue 29 Jul 2025 08:02:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 89.213.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:33:f6:45:45:30:15:5d:f3:a6:42:98:f9:3c:12:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 29 08:02:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5947c3f0cafcecfe50e8e30c33b0fca98463ed8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:55:5d:ba:fb:bf:d0:03:61:d7:24:1a:73:a6:
c6:78:b7:6b:7f:0c:98:3a:61:9b:af:e8:bc:84:6f:
62:7d:31:3c:41:69:31:df:94:0d:94:2e:e1:50:45:
82:28:92:88:b4:c4:cb:0a:aa:ca:b2:1a:c9:1e:b6:
0b:8c:64:09:19:71:3f:55:4e:c3:55:0e:78:13:a1:
04:ae:bc:e7:09:aa:54:bb:37:6c:29:73:e8:14:ed:
4f:12:8f:db:fd:ec:35:f9:97:5b:6e:27:e1:23:94:
5f:be:fb:44:3a:25:1d:7b:1f:be:dc:e1:22:2d:e2:
b7:72:e0:cb:56:a6:d6:85:e4:ce:dd:c3:c5:71:23:
af:5f:d1:de:2b:f5:ac:ed:82:45:95:49:b0:c0:ff:
ce:72:20:98:6d:20:9a:b3:bd:51:54:c2:72:34:e7:
0e:8a:74:c5:e8:a9:6d:9a:ab:f7:fb:b8:ed:c9:b5:
c4:6a:ae:22:da:6e:f4:04:f3:62:98:08:ab:bb:cc:
8d:b0:53:29:3d:80:ef:8c:89:94:44:cb:b4:14:bb:
dc:93:6c:71:3e:d2:b4:23:e5:6e:93:19:1a:9f:e4:
c8:9f:28:59:57:7c:9d:0c:2b:88:8f:79:3e:45:4b:
3a:56:94:89:74:63:e8:cc:8a:84:54:f1:87:18:73:
16:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:47:C3:F0:CA:FC:EC:FE:50:E8:E3:0C:33:B0:FC:A9:84:63:ED:8C
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/WUfD8Mr87P5Q6OMMM7D8qYRj7Yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.146.0/24
Signature Algorithm: sha256WithRSAEncryption
27:02:25:29:16:5c:be:78:90:a4:c5:d4:6a:25:56:89:fc:78:
d6:cf:30:2d:0a:3c:25:b6:16:da:36:01:f6:a7:2e:7f:91:ce:
b9:7b:0a:ad:2a:db:a4:ec:5e:10:6b:69:53:a7:0b:13:af:0b:
49:8b:ba:a9:4a:0c:8a:d5:05:67:68:89:4d:64:aa:24:8d:3c:
dc:aa:bf:11:40:57:be:02:f9:79:a4:44:6c:d8:a4:e4:1e:83:
b2:f9:d4:1c:78:38:6a:b9:1b:de:b3:0d:a5:54:cf:85:4b:27:
0f:65:4f:e2:65:53:56:09:22:89:71:98:4c:24:36:42:43:d1:
6e:0d:38:61:4f:fd:a8:e7:be:d3:43:3a:ed:72:e8:9c:57:05:
e9:24:bd:6d:5a:d7:f6:9b:6a:c3:85:f1:b6:1f:d6:b3:b6:bb:
69:d7:86:db:21:71:af:1e:4f:87:3d:b6:7c:c9:3b:7e:d8:1e:
71:c3:d6:92:25:24:23:36:c1:c7:23:52:75:c3:65:c8:1c:59:
cb:a4:81:19:67:1e:13:7e:d9:b9:d5:90:ab:77:09:00:48:2c:
a3:17:9a:7a:1f:99:89:9e:e9:18:a4:16:51:34:08:e8:f7:b1:
30:d6:b3:d6:34:d2:19:09:98:41:1d:35:ff:35:9b:cd:7d:45:
f0:ef:f4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:26 2025 by rpki-client