Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/WfzXnM2eK_kSs-4yP9rU_Vq2KXg.roa
File: WfzXnM2eK_kSs-4yP9rU_Vq2KXg.roa (raw, json)
Hash identifier: PgVhQbQKOEzO/hmF/YVvQFUh9kfxOMI2b5QsLYE0w8U=
Subject key identifier: 59:FC:D7:9C:CD:9E:2B:F9:12:B3:EE:32:3F:DA:D4:FD:5A:B6:29:78
Certificate issuer: /CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Certificate serial: 01977A5B5EBD8CFD876C721B646F472F9EFB
Authority key identifier: 29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/WfzXnM2eK_kSs-4yP9rU_Vq2KXg.roa
Signing time: Mon 16 Jun 2025 20:08:17 +0000
ROA not before: Mon 16 Jun 2025 20:08:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 79.110.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:5b:5e:bd:8c:fd:87:6c:72:1b:64:6f:47:2f:9e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Validity
Not Before: Jun 16 20:08:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59fcd79ccd9e2bf912b3ee323fdad4fd5ab62978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c2:b6:31:21:66:b0:69:98:42:9c:0f:40:aa:
c8:f8:d8:d5:a3:8b:cf:f8:10:bd:a2:e5:1e:5a:4f:
ea:d1:07:3e:55:ec:3d:f0:f8:43:b6:00:6d:ea:75:
09:72:07:35:58:6f:a3:3c:24:14:5b:82:14:64:8a:
43:f4:15:55:19:6e:1c:ea:6b:74:39:5f:48:5c:9c:
e6:70:f1:0b:ab:0c:63:26:f2:81:44:95:59:fe:76:
d9:e8:25:17:de:9c:f8:24:c9:72:12:0b:c3:65:5f:
68:3b:f6:2c:fa:a2:dd:bb:78:be:b1:b7:8b:f7:d7:
ce:83:40:cc:ff:f4:84:19:de:5e:3e:f7:ee:d1:5f:
28:2c:7b:65:6e:ef:27:d7:fe:17:3c:a7:48:32:75:
9d:87:36:44:ec:26:37:0c:9e:ea:e1:28:9d:86:79:
45:78:0e:60:cb:37:ae:54:80:31:e3:4a:bb:fb:68:
86:12:c1:38:7e:1c:a8:93:7f:86:c8:b5:43:54:54:
12:56:d2:fd:d2:72:3e:55:4c:58:63:c1:e7:34:d3:
48:34:4d:f8:73:5d:13:5d:ca:99:e6:b4:1d:bf:e4:
da:bb:b8:80:f5:19:df:6c:95:59:f9:11:6a:11:b8:
0f:c9:58:8e:da:b3:54:e3:6e:9b:e5:23:4d:cc:32:
bd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FC:D7:9C:CD:9E:2B:F9:12:B3:EE:32:3F:DA:D4:FD:5A:B6:29:78
X509v3 Authority Key Identifier:
keyid:29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/WfzXnM2eK_kSs-4yP9rU_Vq2KXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.167.0/24
Signature Algorithm: sha256WithRSAEncryption
74:45:9a:97:9c:8f:60:fd:42:6a:ab:2e:f1:45:1d:c9:0e:8a:
b4:e4:1a:33:fc:4c:34:e3:bb:4e:3a:22:f1:7e:f3:69:87:49:
ac:a3:6d:e6:7c:64:65:1b:02:b4:13:c9:d0:ad:d0:f5:09:ec:
14:8c:9a:51:7b:3b:d6:58:4d:de:78:08:29:6d:c7:55:87:a5:
f7:50:e0:e0:61:66:47:42:c6:7c:9a:b5:4a:c0:a8:a6:da:c7:
d3:ab:ca:e7:16:12:e4:db:81:1e:e1:e3:b6:eb:2b:c3:6c:9e:
86:4c:11:1f:55:76:f5:9b:db:a6:00:f2:4f:cf:7a:64:7b:92:
c6:3e:da:3c:1c:a9:4c:82:c0:ed:31:1b:9a:cf:13:e4:e7:0a:
af:3d:de:e8:f7:54:7f:52:95:e7:c1:a0:ed:c6:65:a4:0d:50:
85:40:e8:8f:d8:54:af:dd:79:ce:89:bb:d7:96:c9:63:e9:20:
81:2b:49:bd:05:63:04:39:dd:82:9f:90:ac:b7:b5:c6:df:22:
4a:ef:4b:d4:5e:41:72:f6:60:ae:73:e7:cb:cd:a9:19:17:4d:
3b:67:08:e7:19:00:09:d9:80:a5:cf:46:92:e5:e8:40:57:83:
ac:d4:67:3c:80:79:ae:de:46:fb:9f:58:a4:7c:3c:fb:d7:af:
5d:8e:4a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:01:42 2025 by rpki-client