Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/u1WYY4t_FwYACCiDWBudqRhfZP4.roa
File: u1WYY4t_FwYACCiDWBudqRhfZP4.roa (raw, json)
Hash identifier: QMM4/xwZq5RJk+iqnI7Hz+hYtbB8Xzmn4QnagnKtQyU=
Subject key identifier: BB:55:98:63:8B:7F:17:06:00:08:28:83:58:1B:9D:A9:18:5F:64:FE
Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial: 01978E327ED5CAE8CCE0C7EDC1BA3182580D
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/u1WYY4t_FwYACCiDWBudqRhfZP4.roa
Signing time: Fri 20 Jun 2025 16:36:03 +0000
ROA not before: Fri 20 Jun 2025 16:36:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202623
IP address blocks: 141.101.64.0/24 maxlen: 24
141.101.91.0/24 maxlen: 24
2a06:98c0:1400::/48 maxlen: 48
2a06:98c0:1401::/48 maxlen: 48
2a06:98c0:3602::/48 maxlen: 48
2a06:98c0:3603::/48 maxlen: 48
2a06:98c0:3604::/48 maxlen: 48
2a06:98c0:3605::/48 maxlen: 48
2a06:98c0:3606::/48 maxlen: 48
2a06:98c0:3607::/48 maxlen: 48
2a06:98c0:360e::/48 maxlen: 48
2a06:98c0:3612::/48 maxlen: 48
2a06:98c0:3616::/48 maxlen: 48
2a06:98c0:3622::/48 maxlen: 48
2a06:98c0:3626::/48 maxlen: 48
2a06:98c0:3627::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8e:32:7e:d5:ca:e8:cc:e0:c7:ed:c1:ba:31:82:58:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Validity
Not Before: Jun 20 16:36:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb5598638b7f170600082883581b9da9185f64fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ed:9f:79:56:fb:b1:48:09:bc:1d:48:1b:45:
a6:8b:53:c0:18:61:6e:e2:b0:f2:1a:93:55:bd:e3:
42:a9:14:d4:a6:cf:dc:a8:57:8b:2d:0d:ba:74:62:
06:a4:78:88:9a:d2:1c:e7:30:62:74:31:a1:b4:56:
38:96:3f:8c:34:22:68:b4:b9:7c:de:ee:f5:2e:bd:
60:c4:f5:5b:1f:62:56:af:28:51:4c:88:ae:de:4d:
b8:b8:0b:6a:34:cc:03:c3:0b:7c:a8:2d:a4:8d:5f:
8d:b7:67:0d:40:4f:c6:53:10:68:2b:f9:1d:9d:56:
e9:ee:c9:9c:88:f7:d4:f9:a9:a9:e0:97:a6:09:51:
f3:12:15:38:9c:bf:51:b9:f9:6c:ab:cf:16:c0:ac:
dc:52:b4:04:d4:0d:18:91:cf:af:6e:f5:8c:ab:e3:
b3:01:1b:a8:ec:6d:2a:0b:9c:81:fd:fd:5c:99:bf:
cb:0a:3e:bc:ed:af:ea:ce:65:7f:16:fd:f4:c5:ea:
ce:4b:08:2d:94:7b:1a:33:42:f7:f5:64:3c:1d:c5:
b1:72:7b:b0:2e:1f:26:aa:0d:c0:bd:74:87:d6:a5:
b7:7c:e2:ef:16:22:73:f4:36:89:d2:d6:d3:c3:f4:
45:ab:b6:1e:fe:0a:5f:bc:47:17:24:eb:8a:54:bb:
71:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:55:98:63:8B:7F:17:06:00:08:28:83:58:1B:9D:A9:18:5F:64:FE
X509v3 Authority Key Identifier:
keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/u1WYY4t_FwYACCiDWBudqRhfZP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.64.0/24
141.101.91.0/24
IPv6:
2a06:98c0:1400::/47
2a06:98c0:3602::-2a06:98c0:3607:ffff:ffff:ffff:ffff:ffff
2a06:98c0:360e::/48
2a06:98c0:3612::/48
2a06:98c0:3616::/48
2a06:98c0:3622::/48
2a06:98c0:3626::/47
Signature Algorithm: sha256WithRSAEncryption
23:0e:1d:87:b3:df:85:fb:87:dd:97:b4:0e:a1:c4:35:3d:da:
8b:e6:52:62:b4:22:21:49:7c:39:81:4d:9e:11:d2:6a:69:21:
d6:17:e3:9c:0f:14:bd:7d:2b:9d:e6:26:ed:1d:c4:2d:a0:b0:
59:c3:2f:fe:08:1c:a8:45:06:f1:79:50:50:df:ef:33:b9:7a:
c8:4b:6e:93:01:7a:8e:85:17:64:26:ca:bf:96:0a:f4:ff:90:
3d:80:d7:46:ee:6c:4b:51:b8:52:6b:4d:8f:af:46:69:aa:d2:
e5:90:9e:33:3f:1c:57:27:aa:00:4a:50:e8:df:38:bd:a4:50:
77:72:3b:ff:e9:c7:30:7d:c8:fa:b5:c7:e2:5c:36:d1:70:b5:
7f:e6:83:1e:f3:03:c3:9b:95:1d:bb:60:1f:32:6f:f4:f9:fa:
bc:6a:c7:a9:f2:c1:34:b7:73:bb:a6:a6:b0:9d:d6:23:22:a8:
1d:a8:2f:98:a8:97:4d:c4:74:d5:a2:bb:36:16:c3:0d:bc:a6:
b5:3a:f4:33:e9:b6:51:cb:81:67:06:c2:4c:fd:a3:ba:6e:ca:
fc:e5:7a:64:16:a7:66:36:75:42:05:71:c5:d1:71:84:7e:a7:
d3:07:7d:4b:ed:e5:b2:f7:eb:a7:0f:e8:35:c8:5c:c9:e0:11:
fd:e7:5c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:25:26 2025 by rpki-client