Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/wsqrJncE8vGcQKRwVGIW7jNdJzQ.roa
File: wsqrJncE8vGcQKRwVGIW7jNdJzQ.roa (raw, json)
Hash identifier: QMuERI1zOel2P+0Zvoc3OxuHc55kEcoxlWPyCWA8NgA=
Subject key identifier: C2:CA:AB:26:77:04:F2:F1:9C:40:A4:70:54:62:16:EE:33:5D:27:34
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 01998D51A861AE3F4819292FF45D03F48EDC
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/wsqrJncE8vGcQKRwVGIW7jNdJzQ.roa
Signing time: Sat 27 Sep 2025 22:36:02 +0000
ROA not before: Sat 27 Sep 2025 22:36:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214025
IP address blocks: 146.247.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:8d:51:a8:61:ae:3f:48:19:29:2f:f4:5d:03:f4:8e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Sep 27 22:36:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2caab267704f2f19c40a470546216ee335d2734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9b:d3:49:37:00:11:87:18:35:d9:e5:76:bb:
cf:62:e0:58:70:af:0d:40:57:77:db:d1:16:4f:3e:
c4:d6:4f:d1:e3:df:ed:cb:1a:32:cb:1a:da:3f:d1:
5c:0a:04:bd:7e:74:71:84:cc:c8:b9:ab:a0:3a:7c:
08:40:1b:4d:b3:25:e4:cc:45:aa:80:d7:c7:e0:e3:
7e:e7:5f:b9:8d:0e:16:d4:32:8d:3a:39:f0:0f:41:
7d:8a:d1:ba:ea:e8:51:67:d3:f7:63:75:52:59:49:
b0:27:6a:4a:71:13:cb:b0:d3:a8:13:45:f0:2a:3e:
b9:21:3c:b8:4a:cd:84:e3:1b:ba:e4:03:4f:a5:e1:
fa:a5:d2:1b:e7:6e:3b:8f:51:3a:c0:af:55:0c:91:
3f:ed:50:9d:03:bf:2d:e6:8f:0f:db:83:a4:e0:cd:
25:4e:b1:69:26:3c:4e:74:46:41:bd:01:f9:73:3e:
be:12:92:d1:7d:65:3c:59:ec:42:e1:1c:ef:92:e6:
8f:c8:7b:35:d1:72:97:24:45:5a:97:fe:4f:cf:6c:
70:d9:c3:90:fa:61:de:f7:b6:ba:c4:9c:45:dc:df:
3a:5d:3d:5f:30:80:80:bb:22:26:62:f8:09:ef:13:
c3:72:9a:8b:62:5f:b5:36:db:29:62:f0:90:13:b7:
6a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CA:AB:26:77:04:F2:F1:9C:40:A4:70:54:62:16:EE:33:5D:27:34
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/wsqrJncE8vGcQKRwVGIW7jNdJzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.108.0/24
Signature Algorithm: sha256WithRSAEncryption
09:41:e7:57:14:1d:a9:68:80:bf:8d:4e:50:72:b5:92:04:6d:
d0:bb:c7:39:15:1f:c3:df:c2:36:c4:47:1f:b2:8f:89:e8:dc:
68:df:0d:77:6b:94:b5:e4:4a:5e:7c:0b:ef:5e:b8:1a:1e:05:
38:27:00:52:dd:98:85:17:59:42:f4:db:29:87:36:6d:d7:ac:
03:77:40:95:e4:49:14:b1:79:3c:1c:bd:39:c6:df:35:b4:4d:
bb:47:ff:64:70:99:1b:c2:af:0f:91:ba:21:dc:a6:82:7c:9a:
ee:1e:18:55:ae:bb:c9:96:9f:e6:dc:70:56:47:d1:a8:06:a0:
b7:74:e4:a1:b1:ed:3e:01:53:e9:c4:82:18:ab:d7:a0:a4:ab:
02:b5:91:b9:95:05:44:45:96:59:3d:28:a7:bd:11:bb:8b:4e:
21:cc:be:b8:5e:97:80:ea:fd:e8:2a:40:0b:cf:9e:42:fe:63:
83:2d:fe:e2:44:8d:e0:5f:d4:33:67:5a:c3:91:c3:19:62:61:
27:4b:fa:f9:81:65:aa:be:11:11:e5:74:9e:f2:8f:89:12:ad:
99:98:b5:45:86:3e:8b:3b:50:fb:eb:85:bc:54:32:cd:a9:bd:
e5:1d:a0:e3:70:25:4e:b8:74:e4:b5:08:61:1e:8a:36:e2:f0:
f9:8f:6e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:46:43 2025 by rpki-client