Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/wfSejFWh26iFaDPELsnvR1TSCTM.roa
File: wfSejFWh26iFaDPELsnvR1TSCTM.roa (raw, json)
Hash identifier: OW8hsiyWgn6jtKd7S9vMQN1SrD9c05HrY+6z4A8TNNA=
Subject key identifier: C1:F4:9E:8C:55:A1:DB:A8:85:68:33:C4:2E:C9:EF:47:54:D2:09:33
Certificate issuer: /CN=702f4e00943700c0897de7adbcfced5d10bf2e01
Certificate serial: 0199C83BAD5A3E28CF6940D88A6EDBBADA00
Authority key identifier: 70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/wfSejFWh26iFaDPELsnvR1TSCTM.roa
Signing time: Thu 09 Oct 2025 09:09:38 +0000
ROA not before: Thu 09 Oct 2025 09:09:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13045
IP address blocks: 81.14.128.0/17 maxlen: 24
89.182.0.0/15 maxlen: 16
185.93.136.0/22 maxlen: 24
193.254.18.0/24 maxlen: 24
212.59.32.0/19 maxlen: 24
2a02:560::/29 maxlen: 32
2a02:560::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c8:3b:ad:5a:3e:28:cf:69:40:d8:8a:6e:db:ba:da:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=702f4e00943700c0897de7adbcfced5d10bf2e01
Validity
Not Before: Oct 9 09:09:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1f49e8c55a1dba8856833c42ec9ef4754d20933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d4:98:31:71:9a:e5:f2:42:cd:8a:55:8f:37:
1b:49:d2:4d:87:98:2f:f2:b1:55:46:2d:3f:18:60:
0a:23:24:74:28:59:52:56:29:98:72:0e:41:50:70:
94:6c:79:f9:75:8f:0b:46:b1:e0:ec:ee:5e:32:c7:
d7:71:24:25:5d:8d:a1:b7:5e:f4:be:8d:6b:37:2d:
30:65:15:4f:a9:a2:52:f0:19:cf:65:de:78:c8:63:
89:83:4e:f8:fe:53:de:21:a1:b5:dd:2b:01:19:10:
ff:5d:c8:72:1f:18:fe:23:85:12:1c:90:55:bd:da:
fa:a1:f2:3e:39:72:7e:e1:d8:44:36:29:5b:d4:ac:
80:4c:5c:ae:6c:f8:e5:ad:ff:0a:d3:46:93:cb:c5:
b4:f8:ee:f2:f8:d4:59:47:8f:fd:e6:18:c3:77:7e:
0a:bb:1a:6e:30:02:f8:6a:a5:08:2b:f0:b7:f5:1d:
8d:fa:3e:0b:9d:ba:00:ae:5f:7c:38:f5:cf:70:74:
92:fa:b3:d4:24:bc:a3:12:66:47:b6:a0:77:b4:1f:
7c:5a:eb:c6:47:e9:04:12:e1:d6:67:d8:09:ae:b0:
f1:db:71:7b:6a:ae:4a:fe:0e:37:96:a7:9c:f3:b4:
e1:75:b0:12:54:99:a0:27:00:d8:f8:57:83:4c:83:
82:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F4:9E:8C:55:A1:DB:A8:85:68:33:C4:2E:C9:EF:47:54:D2:09:33
X509v3 Authority Key Identifier:
keyid:70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/wfSejFWh26iFaDPELsnvR1TSCTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.14.128.0/17
89.182.0.0/15
185.93.136.0/22
193.254.18.0/24
212.59.32.0/19
IPv6:
2a02:560::/29
Signature Algorithm: sha256WithRSAEncryption
6a:7c:d3:4f:f4:da:69:2f:7b:24:bf:1e:8f:26:7d:b8:fe:38:
73:fe:b1:74:51:c1:00:a2:70:64:e8:c1:cc:1f:b8:c9:c9:c8:
b1:e5:ea:71:fe:34:1e:50:14:0e:95:7f:e1:0c:9d:5a:c8:80:
a6:54:eb:0f:14:f7:c4:eb:22:df:b5:5f:4e:1a:77:2f:1d:49:
0e:61:f6:72:bf:87:73:ec:4b:8a:e1:4b:01:e6:1a:a3:c5:02:
3b:67:d6:f2:07:9c:a7:df:d4:86:ad:2b:0d:df:4f:1b:04:20:
ae:4d:90:9d:2f:33:67:08:ea:7c:10:12:18:54:31:23:26:de:
28:22:be:04:55:31:ee:71:a8:9f:05:01:31:5c:32:6a:23:92:
b6:5e:a6:7a:cc:ea:c4:3a:12:7f:15:ac:41:55:c0:9e:fb:e4:
12:9b:5a:34:88:d3:fb:88:d2:6f:68:e2:a4:13:6c:ac:45:db:
23:52:84:7c:69:38:28:97:07:22:17:b3:dd:10:59:cf:16:c9:
f1:37:b6:b9:c6:b0:e4:13:e5:5d:c1:32:d4:67:b5:6b:04:55:
2d:2b:22:5c:1e:81:9f:f3:e4:a6:83:0e:ce:cc:f1:bc:7f:e8:
a3:c7:a4:66:98:46:ee:c8:30:a9:ce:fc:52:cc:4c:2f:75:ef:
06:f7:ab:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:17:07 2025 by rpki-client