Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wvTOglwbgRBUnKZXpgewdm7NJcI.roa
File: wvTOglwbgRBUnKZXpgewdm7NJcI.roa (raw, json)
Hash identifier: mg4T8OgGw8k9dahbOZ2itrYkA/z7m6/iJszN+zvR938=
Subject key identifier: C2:F4:CE:82:5C:1B:81:10:54:9C:A6:57:A6:07:B0:76:6E:CD:25:C2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01999F9F53E837E0B2FC73FC97A580D13BEF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wvTOglwbgRBUnKZXpgewdm7NJcI.roa
Signing time: Wed 01 Oct 2025 11:54:02 +0000
ROA not before: Wed 01 Oct 2025 11:54:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401362
IP address blocks: 217.60.24.0/22 maxlen: 24
217.60.60.0/22 maxlen: 24
217.60.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9f:9f:53:e8:37:e0:b2:fc:73:fc:97:a5:80:d1:3b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 1 11:54:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2f4ce825c1b8110549ca657a607b0766ecd25c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6a:8d:af:3e:c9:85:07:f4:a9:5c:8c:e9:2d:
ed:8e:a9:2b:0c:fe:f0:b7:c4:15:cf:10:81:b6:a9:
d8:ea:e6:47:84:ee:87:37:f6:ed:5a:65:a6:29:b1:
f8:70:61:b1:89:08:36:be:2f:fc:84:9c:a2:51:80:
02:cc:dc:38:d1:80:52:c5:9d:ad:bf:f6:2b:fd:02:
fa:52:3e:3d:82:26:e3:ec:1d:b0:39:d4:ea:72:aa:
18:0d:13:18:56:24:96:4d:39:b1:58:7e:34:c0:da:
13:4f:b9:de:72:42:01:21:3e:2b:9a:15:3a:bd:a4:
29:8a:58:f5:e4:a4:ba:43:ea:0b:ed:7d:95:77:78:
08:f1:94:ce:31:49:05:00:41:7b:bf:30:0b:8f:61:
88:71:fc:99:45:db:75:2e:42:de:2c:f2:c0:f3:b5:
ec:75:b5:68:bd:a3:2a:4e:4d:22:39:f2:ec:89:2e:
56:00:db:3c:80:78:eb:4a:ce:eb:d0:fb:1d:c1:27:
fe:7b:22:b5:c0:a1:fd:9f:08:0c:8d:13:a5:8c:1f:
e1:f5:7b:b8:4d:e3:d3:e2:bc:35:4e:f5:d9:e4:af:
d6:67:c4:e6:0a:a0:cb:65:94:93:6d:81:e3:ef:e5:
0d:cb:62:0c:f1:77:59:4a:1f:e6:32:63:91:86:90:
b6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F4:CE:82:5C:1B:81:10:54:9C:A6:57:A6:07:B0:76:6E:CD:25:C2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wvTOglwbgRBUnKZXpgewdm7NJcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.24.0/22
217.60.60.0/22
217.60.192.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:22:4e:6f:45:64:3f:d2:eb:c3:b0:02:dd:00:30:6f:09:da:
25:86:e7:a4:b4:a5:9b:e1:ee:83:24:bc:a7:58:7e:35:1d:00:
1a:88:2c:48:30:03:ea:01:69:1a:0f:21:33:01:dd:1b:15:32:
8c:f2:13:2b:bc:b2:3e:e4:8b:87:5a:20:1b:79:34:f3:3a:a4:
2f:77:a4:06:a4:9f:fb:cf:f7:a5:95:12:0e:29:fc:d4:77:96:
05:ea:28:4f:a8:ac:fc:29:de:1c:3e:92:ee:2c:3e:10:42:3d:
9c:5f:c3:7c:dc:59:f3:3d:b2:fc:d0:92:e9:69:9a:39:f3:01:
de:8f:3b:b9:3e:e7:62:3c:60:47:cb:a1:7f:68:8b:0a:1a:fb:
ed:cc:05:18:07:d9:d6:9c:57:15:58:d6:e5:fc:1d:42:15:40:
c8:34:18:79:0e:f8:4a:f7:bb:70:07:0b:a1:1e:42:64:0e:4e:
80:5a:7e:e0:86:2d:51:df:94:6c:55:42:ce:d4:ce:0c:fb:72:
ba:f2:74:e7:e6:c6:e9:a2:1e:f3:91:29:44:d0:2a:50:78:5b:
0b:37:72:24:87:a8:13:68:c0:00:52:3e:19:5c:00:71:c2:1e:
a6:fa:85:8c:25:89:2f:70:9f:c4:80:ef:c7:8d:35:81:9e:85:
8f:6d:44:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:48 2025 by rpki-client