Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/WhmXlVvWq-vWbYCCUU3N-8AbsTo.roa
File: WhmXlVvWq-vWbYCCUU3N-8AbsTo.roa (raw, json)
Hash identifier: WOaGZw2hMcCNM1tk4Bj1gxbSLeClLoXG8ozyPK4gMmg=
Subject key identifier: 5A:19:97:95:5B:D6:AB:EB:D6:6D:80:82:51:4D:CD:FB:C0:1B:B1:3A
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 01991E9CEA874492CBD5E49550E541760E3D
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/WhmXlVvWq-vWbYCCUU3N-8AbsTo.roa
Signing time: Sat 06 Sep 2025 10:40:24 +0000
ROA not before: Sat 06 Sep 2025 10:40:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 213.145.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1e:9c:ea:87:44:92:cb:d5:e4:95:50:e5:41:76:0e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Sep 6 10:40:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a1997955bd6abebd66d8082514dcdfbc01bb13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:48:78:90:fa:b6:39:d5:f3:c0:24:2d:7d:e4:
28:11:4c:92:b5:9b:75:dc:1d:76:a2:c0:d8:05:8d:
9f:1a:22:76:72:71:7f:2d:18:cb:f1:28:49:14:ba:
41:3e:8d:eb:1c:a5:17:76:c4:9a:c1:54:6b:e2:3b:
0b:af:b6:38:82:aa:9c:d1:a5:0d:17:fc:5b:43:48:
6d:1e:55:1e:22:bf:88:9d:a5:bd:d7:25:16:f2:94:
e1:8d:7e:e0:51:84:86:c4:6d:82:78:28:f4:b6:33:
ea:1c:d2:fe:aa:b4:16:06:6d:a4:e6:1b:ff:97:7b:
56:16:42:01:8f:79:55:db:e4:b0:34:cc:f9:61:34:
07:8e:d8:9e:4c:42:81:1f:88:55:62:ef:53:37:cc:
9b:7d:f4:31:77:54:b7:cd:f9:cd:3a:cb:57:71:23:
30:e7:a1:a4:80:73:07:3a:ad:18:ba:d0:f4:26:06:
ec:93:1a:96:45:b8:38:a0:fc:0a:f0:d4:be:01:59:
88:67:f9:d2:bc:24:82:09:89:ae:d2:7b:51:90:f0:
2d:3c:82:be:eb:49:bc:56:91:51:2d:e1:ea:e4:eb:
7a:09:f5:56:1d:bf:59:89:d3:bc:05:a4:e8:b4:3c:
65:3e:83:42:74:95:87:ee:90:d7:34:f2:70:01:2b:
f3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:19:97:95:5B:D6:AB:EB:D6:6D:80:82:51:4D:CD:FB:C0:1B:B1:3A
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/WhmXlVvWq-vWbYCCUU3N-8AbsTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.68.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:75:86:3b:9c:c3:d6:c9:5d:77:f0:8b:de:4e:74:f3:20:57:
a0:39:fe:90:a4:9b:89:27:b9:aa:4b:66:3d:28:fa:11:55:22:
16:15:71:49:dd:b7:b6:d5:db:35:33:8d:8e:64:19:4a:da:c1:
63:76:40:63:bc:1a:41:1c:23:c2:c6:45:be:43:aa:e3:13:b3:
7a:46:de:77:23:ae:14:b1:6f:58:84:cb:1a:26:f1:b3:c1:a0:
6f:33:9f:7f:fb:fb:b8:4b:f0:4b:68:95:83:31:4a:5e:46:10:
b7:af:9a:b6:5e:b8:4c:cd:f1:e3:11:f0:10:8f:2d:2a:48:38:
99:be:26:c6:a7:7e:46:97:47:6b:02:a4:ca:6b:f9:37:d6:2c:
b0:77:e8:ca:29:d7:cf:c5:c1:00:ca:28:59:73:be:91:67:68:
a4:e0:e1:26:26:c4:c5:16:32:28:2c:57:af:9c:29:ab:ec:10:
63:6b:cc:9a:0c:99:a1:64:ca:cb:06:00:66:c6:e2:fd:ea:e5:
1c:c6:01:f2:bc:61:80:75:86:fd:c1:49:ee:4d:49:4f:10:fb:
d2:fe:68:59:ec:b0:e2:a9:ee:2f:72:cb:9e:f3:8d:34:ca:e2:
4d:ad:99:5b:87:8e:65:27:aa:b9:c0:ef:1b:d4:b3:44:b8:d0:
7f:60:0a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:43:03 2025 by rpki-client