Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/w9nvjOWk8C3C6okM2fJbltiz6Ts.roa
File: w9nvjOWk8C3C6okM2fJbltiz6Ts.roa (raw, json)
Hash identifier: cpGlnXUiTmun4rJ5XWY0h3JOGdRAWAFOUtSEsrbjwUI=
Subject key identifier: C3:D9:EF:8C:E5:A4:F0:2D:C2:EA:89:0C:D9:F2:5B:96:D8:B3:E9:3B
Certificate issuer: /CN=556828d62a5b893e22d5867f1a142d198e85e1ab
Certificate serial: 01977D4D159E625C475CF960BEB5EF53DF4B
Authority key identifier: 55:68:28:D6:2A:5B:89:3E:22:D5:86:7F:1A:14:2D:19:8E:85:E1:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/w9nvjOWk8C3C6okM2fJbltiz6Ts.roa
Signing time: Tue 17 Jun 2025 09:51:33 +0000
ROA not before: Tue 17 Jun 2025 09:51:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25091
IP address blocks: 185.188.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft
rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:4d:15:9e:62:5c:47:5c:f9:60:be:b5:ef:53:df:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=556828d62a5b893e22d5867f1a142d198e85e1ab
Validity
Not Before: Jun 17 09:51:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3d9ef8ce5a4f02dc2ea890cd9f25b96d8b3e93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cf:6c:80:e7:f0:d9:ee:38:ed:0d:f4:ab:d9:
a5:04:48:f5:85:17:20:9b:0d:e7:77:e2:72:95:6f:
a4:32:76:5e:aa:20:03:59:6b:22:48:ef:e8:bb:fb:
e9:28:3e:28:4d:e4:c9:07:4e:da:b1:e5:dd:2a:73:
1b:ce:70:96:da:eb:6b:a9:eb:e4:41:84:45:73:8c:
02:aa:f4:14:49:62:e2:28:2a:ab:84:79:c5:8b:db:
f8:f7:b3:a1:30:ba:bb:b1:22:fc:2e:a2:f8:76:db:
5a:e8:0b:85:10:9e:25:ca:8a:b8:51:8d:3e:b9:d6:
0a:c0:ca:a5:fc:c4:43:d7:6a:be:68:57:9b:d3:90:
30:97:6d:ae:b9:cd:ea:25:68:8f:6e:89:a0:2a:12:
68:b2:29:c9:60:08:a8:b0:ce:0c:4c:d3:5a:78:1f:
f0:ef:98:29:ad:bf:6a:25:7d:d6:e4:b3:00:ae:17:
09:e8:2b:5b:5e:8a:e5:e9:25:e2:d7:25:1a:62:a9:
7d:d0:bd:ab:eb:2c:4a:24:3e:fa:32:7f:d0:4a:a1:
21:69:48:f5:c2:c7:14:13:e3:ce:2e:f6:99:9d:f1:
83:1e:06:2f:8c:dc:94:67:d5:fe:e6:82:7b:25:68:
8a:8b:19:86:b5:d6:3f:c8:8a:e1:84:79:00:0c:3d:
47:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D9:EF:8C:E5:A4:F0:2D:C2:EA:89:0C:D9:F2:5B:96:D8:B3:E9:3B
X509v3 Authority Key Identifier:
keyid:55:68:28:D6:2A:5B:89:3E:22:D5:86:7F:1A:14:2D:19:8E:85:E1:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/w9nvjOWk8C3C6okM2fJbltiz6Ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.15.0/24
Signature Algorithm: sha256WithRSAEncryption
28:ad:e3:3f:89:99:a8:64:df:33:e7:94:6c:d3:8e:41:f0:8a:
58:32:6a:f7:00:e5:6d:17:ba:b9:29:60:88:8b:fa:8c:ef:a0:
0b:6b:8c:3c:4f:b5:63:e2:b0:2d:62:4d:31:88:d3:cf:8e:b9:
8d:93:ae:48:29:a4:ea:dd:4a:c6:65:cf:70:32:b4:48:ee:ab:
af:e8:d4:1f:10:51:e7:4b:40:e2:17:34:dd:17:b7:fe:d4:bc:
bd:80:0a:77:4d:20:e1:f0:af:16:03:cf:46:f7:da:48:db:27:
29:e7:7b:78:39:c8:80:a6:76:cc:ec:12:aa:d3:61:9e:92:65:
cb:c5:18:2d:4a:40:fc:5f:67:f1:18:5a:10:ba:64:3c:f9:42:
27:44:47:43:cb:5c:5d:97:60:e4:50:ea:9b:53:35:3c:fb:2f:
17:0d:aa:ec:90:59:3d:72:e0:f6:d8:ae:92:af:70:4b:44:16:
8b:bb:41:99:4d:07:af:09:4b:8d:94:ec:0f:a6:da:d2:9c:a4:
b1:57:63:d7:78:0d:ca:43:17:af:67:21:19:3f:b3:6d:cb:28:
26:9d:3a:ee:a0:fe:4e:b3:b8:0d:e5:59:be:d5:12:bd:9e:5c:
e0:bf:67:33:e6:88:42:7c:b1:ca:dd:9c:90:a5:c4:3b:85:40:
3e:25:a2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:15:13 2025 by rpki-client