Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/wlhdY45PRDciluR9WhbC6ZZOrs8.roa
File: wlhdY45PRDciluR9WhbC6ZZOrs8.roa (raw, json)
Hash identifier: Ryz2mCCSLVnTNY18Fx3rxy3P0z4W8mDtgl5U20yegmY=
Subject key identifier: C2:58:5D:63:8E:4F:44:37:22:96:E4:7D:5A:16:C2:E9:96:4E:AE:CF
Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Certificate serial: 01977978A8300DB8CB1C7DE2A78A7BBEEEB7
Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/wlhdY45PRDciluR9WhbC6ZZOrs8.roa
Signing time: Mon 16 Jun 2025 16:00:39 +0000
ROA not before: Mon 16 Jun 2025 16:00:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214937
IP address blocks: 78.108.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:78:a8:30:0d:b8:cb:1c:7d:e2:a7:8a:7b:be:ee:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Validity
Not Before: Jun 16 16:00:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2585d638e4f44372296e47d5a16c2e9964eaecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e6:50:07:24:5b:65:44:5f:f2:e5:29:92:ab:
ce:97:ba:ea:59:60:10:9b:2d:86:a1:18:4f:92:60:
c5:52:7f:f2:58:73:a6:48:18:10:6c:12:9b:4f:74:
83:8e:1b:c9:d1:a9:43:da:ec:01:58:59:0e:38:40:
ec:ee:9a:40:25:75:39:2e:32:ea:2c:e9:7c:b9:ad:
61:1c:18:cd:1a:14:bb:f0:01:a6:c8:44:9c:f0:7b:
0a:0d:cf:2b:42:7f:b6:3f:4a:ed:fd:ee:56:44:d8:
c5:04:e2:83:3e:ff:3d:5e:19:32:14:3b:31:bf:6c:
85:a3:54:3a:6d:03:17:ad:a5:eb:bf:6a:9d:d5:3f:
9f:0b:a5:43:f6:70:7a:f0:1a:1b:16:3c:3f:25:69:
aa:26:0c:c5:2d:81:d7:ee:9e:35:c2:ce:03:b1:7a:
09:53:57:86:16:9c:b5:41:86:0a:e9:00:76:0f:64:
b9:70:80:b2:b9:15:fb:9c:74:a8:fb:14:58:5a:a1:
fc:d7:7f:53:93:27:f7:e3:3c:8c:0d:ae:36:b8:13:
ad:24:07:9d:77:43:aa:be:b6:b3:60:ba:f5:d7:84:
40:cf:9c:b1:26:f3:25:d2:38:50:b8:d4:a6:a3:3b:
2d:a8:22:a3:ce:7d:b4:b3:69:be:2b:09:56:f6:44:
c8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:58:5D:63:8E:4F:44:37:22:96:E4:7D:5A:16:C2:E9:96:4E:AE:CF
X509v3 Authority Key Identifier:
keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/wlhdY45PRDciluR9WhbC6ZZOrs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.56.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:db:c5:4b:90:bc:08:9f:35:12:ce:e6:27:44:14:1b:e4:12:
a6:6b:96:61:a7:2b:a3:21:f7:d4:d1:ea:ba:ed:ca:7a:55:ba:
67:96:c3:c7:f2:a6:6c:80:cf:d2:80:cc:24:75:98:83:41:c4:
de:d9:4f:24:6c:b5:f3:b0:bd:cc:59:75:c2:38:7d:3c:f0:0c:
4f:6b:a3:e3:25:f6:97:68:c8:69:29:17:7a:cd:76:97:96:37:
47:7e:c3:e7:90:43:c4:8f:b9:f7:bc:41:e2:16:e4:e9:ab:d7:
76:e1:6d:3a:c2:65:d4:42:3a:62:8d:06:b0:be:0d:13:70:09:
a4:1e:e2:66:cd:09:bb:87:c1:e1:ea:33:62:c9:fc:f1:e8:76:
56:10:0b:47:86:b9:6a:1c:00:1a:6c:07:6e:68:23:a7:92:40:
72:a9:d1:c1:67:ea:2b:dc:18:3b:73:f2:a9:88:31:d3:f5:47:
a4:90:4f:16:85:f4:28:7c:7c:4d:46:99:f2:81:0a:88:41:0c:
06:0b:9c:a4:6d:a3:5e:f5:9f:af:90:69:a3:06:ce:79:c5:2d:
f7:86:00:f8:6e:de:86:53:94:e9:73:17:c3:54:46:f3:55:c4:
49:25:dd:0c:38:39:3a:1a:f8:9a:42:2d:75:f9:6b:14:f7:fa:
c5:4c:de:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 23:44:30 2025 by rpki-client