Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/WzscS324TuaQN6LDWp7kSIElikU.roa
File: WzscS324TuaQN6LDWp7kSIElikU.roa (raw, json)
Hash identifier: UjmRRf/F9CARXZ/xI5RsKAmyNu/njk3dgJ/3FAZst2Q=
Subject key identifier: 5B:3B:1C:4B:7D:B8:4E:E6:90:37:A2:C3:5A:9E:E4:48:81:25:8A:45
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0198C674DF5DDF4225047F8532930DAB9E33
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/WzscS324TuaQN6LDWp7kSIElikU.roa
Signing time: Wed 20 Aug 2025 07:50:04 +0000
ROA not before: Wed 20 Aug 2025 07:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216145
IP address blocks: 89.33.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:74:df:5d:df:42:25:04:7f:85:32:93:0d:ab:9e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Aug 20 07:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b3b1c4b7db84ee69037a2c35a9ee44881258a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:be:ae:55:14:46:ef:ad:07:62:a3:b8:f7:96:
9a:83:dd:34:ae:35:97:87:ae:c6:fd:0f:d8:c5:8d:
cd:d8:db:66:cc:98:4e:ed:96:b8:e6:46:ca:fb:e8:
5e:06:1d:eb:ff:bb:7b:21:35:dc:c1:7a:e7:09:b7:
fe:ec:12:fb:cb:72:fb:c0:ca:a8:d1:8e:c2:e5:02:
04:3c:09:97:d9:d4:69:99:20:5d:13:3e:66:e9:fa:
25:e1:d3:6f:93:aa:68:e7:52:54:fd:14:1d:c5:cc:
64:04:5f:35:c6:6a:75:e6:bb:a3:2e:9e:3b:b2:8f:
d4:6a:13:bf:a5:b0:85:0b:15:4d:ef:46:d0:a3:cd:
4a:c2:e5:0c:db:18:e2:74:7f:e8:65:e6:47:ae:83:
73:cf:2c:56:6c:db:a0:eb:04:25:24:15:80:f9:6d:
66:68:d5:da:c0:55:09:0b:fe:86:8d:0c:b7:cb:b6:
33:38:99:58:bc:6a:d9:8c:f8:a7:1c:cd:f5:78:84:
29:e8:c9:fe:30:5f:b2:d2:a9:9b:bb:8f:7f:7f:61:
20:ed:cd:61:24:32:02:b1:a0:d9:7c:dc:2e:c4:6b:
d4:96:4e:8a:e4:c1:b3:5e:f5:05:e7:d1:aa:29:3e:
37:60:8d:9a:17:33:84:9d:f1:91:cc:7d:11:9f:9e:
ff:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3B:1C:4B:7D:B8:4E:E6:90:37:A2:C3:5A:9E:E4:48:81:25:8A:45
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/WzscS324TuaQN6LDWp7kSIElikU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.193.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:14:b8:9f:60:b6:c4:61:59:61:a8:98:a0:16:a8:4b:38:a9:
4f:78:cf:e9:0b:6d:c4:f3:f1:ab:86:ba:65:09:d9:36:e9:a2:
c6:a5:14:70:52:80:eb:b0:73:ab:bb:21:4f:1a:8f:89:23:3c:
99:a0:3d:88:33:d3:c8:35:56:d7:84:16:88:3b:55:bd:33:99:
89:47:13:12:02:0c:d8:25:47:46:46:43:04:3f:3d:e5:ea:f9:
97:de:79:a5:3f:78:a6:d7:6c:e4:9f:28:27:3a:d1:b2:1c:56:
1f:0b:22:e0:52:56:79:8e:8a:c0:de:93:86:1f:49:10:cc:c4:
42:0c:0f:7f:4d:f9:1b:6d:e1:3d:29:7c:58:95:28:cd:91:1b:
37:cb:0e:70:12:37:b8:a1:6f:bb:6b:72:3c:82:56:08:16:74:
9e:72:ac:de:38:41:86:28:94:b7:fa:40:25:24:a4:31:43:e5:
70:53:07:13:03:7f:dd:88:de:8a:2b:e3:62:9d:6d:f1:99:c8:
52:55:51:3c:72:bb:79:89:f9:f2:28:e8:98:0b:66:58:fb:2e:
2d:ed:bd:4e:59:25:54:02:6e:05:84:4b:60:dc:05:9c:5b:d5:
02:37:1b:63:02:77:03:d5:49:c2:19:db:d7:c8:2c:86:4e:d1:
80:31:3d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:55:27 2025 by rpki-client