Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/wnyc9yry7EO1ctez70j3ir5_uR0.roa
File: wnyc9yry7EO1ctez70j3ir5_uR0.roa (raw, json)
Hash identifier: oUP1xUF3UnOyClzZiwhrjigeOJSjHzNG3hRgCE6vc0I=
Subject key identifier: C2:7C:9C:F7:2A:F2:EC:43:B5:72:D7:B3:EF:48:F7:8A:BE:7F:B9:1D
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 019755D6015AA16BAF1F5FA12CCA4B61DD3A
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/wnyc9yry7EO1ctez70j3ir5_uR0.roa
Signing time: Mon 09 Jun 2025 17:56:17 +0000
ROA not before: Mon 09 Jun 2025 17:56:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 81.31.231.0/24 maxlen: 24
81.31.234.0/23 maxlen: 24
81.31.242.0/23 maxlen: 23
81.31.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:d6:01:5a:a1:6b:af:1f:5f:a1:2c:ca:4b:61:dd:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Jun 9 17:56:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c27c9cf72af2ec43b572d7b3ef48f78abe7fb91d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:92:30:18:36:38:c9:5b:f5:39:28:c8:bc:34:
3c:89:aa:58:ef:cf:20:d8:0d:5c:26:07:04:18:8b:
ff:e8:6e:5a:68:ce:bd:e6:0a:a0:9f:7f:7e:a0:02:
97:fe:12:18:2f:c0:41:d0:5e:db:a6:f7:f1:4d:fa:
60:1a:52:da:ee:28:6d:65:1d:6b:0d:c2:cc:10:fc:
3f:87:1c:76:55:b7:e6:e9:a6:bf:dd:94:ec:1c:8d:
9f:5d:74:5f:e8:70:30:6f:48:3b:e3:16:8b:f6:65:
4e:aa:20:31:ac:5f:0c:7f:00:2d:83:c3:95:4e:16:
4c:98:e3:35:1e:d5:c8:ec:ed:cc:42:67:11:40:6c:
b2:01:d1:a5:c0:37:b6:ca:c4:3c:c7:64:64:b1:f2:
aa:a4:fd:03:e1:de:e5:50:b5:52:ea:60:ef:e5:d8:
ca:66:61:8b:e4:84:66:9c:c7:59:b5:30:f0:3d:6a:
46:fe:b2:f3:49:49:52:62:59:b7:19:0a:54:95:63:
c0:a6:dc:f9:4d:d0:98:d7:3d:5f:2d:8a:7b:14:c9:
1e:38:3a:c4:eb:fc:7b:90:c6:3a:29:41:67:78:0c:
6c:eb:b8:e5:65:aa:f8:30:b2:a3:b2:b8:08:ae:11:
ef:1e:30:d2:2d:7d:9f:a6:ad:dc:3f:bb:74:61:d9:
6d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7C:9C:F7:2A:F2:EC:43:B5:72:D7:B3:EF:48:F7:8A:BE:7F:B9:1D
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/wnyc9yry7EO1ctez70j3ir5_uR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.231.0/24
81.31.234.0/23
81.31.242.0-81.31.247.255
Signature Algorithm: sha256WithRSAEncryption
99:0b:8d:29:43:55:70:77:31:8f:5b:e4:0d:a5:3f:37:07:76:
83:1a:64:f5:bd:38:1d:a1:7e:a1:9c:b3:12:34:a1:10:17:c6:
b0:27:71:2a:56:26:80:e0:33:22:72:d8:d8:36:7d:a8:44:7e:
db:b1:b9:4b:c5:2d:33:bb:e0:9c:c1:05:42:10:03:58:3c:3f:
d7:5a:22:83:a7:f1:0b:c7:a4:fb:47:cc:bf:40:20:9a:30:42:
4e:e1:0a:63:2d:50:7e:70:9a:5a:46:b1:36:fd:49:2f:42:ff:
49:30:34:65:6f:dc:d0:f3:d2:44:5f:00:33:15:16:05:41:55:
f9:a5:20:1d:26:23:e6:b5:54:c1:ce:d5:b5:06:92:86:3a:c2:
da:d3:44:43:d0:f7:23:e0:39:4a:3d:71:49:7e:55:98:ad:1e:
b2:ff:6b:28:cc:3a:14:6a:b2:cb:a4:e8:8a:33:86:3b:73:45:
48:51:44:db:4c:43:84:e4:c5:b9:34:a6:d3:d6:3a:23:8f:d5:
1d:eb:ef:46:5c:a3:46:d1:c9:7d:5b:4f:c7:bd:00:cb:81:df:
89:8c:82:a3:a4:8d:dc:ef:de:ab:bb:41:df:a3:d2:58:f2:4d:
4d:69:ba:59:23:cd:64:d5:d0:00:fb:0f:d4:05:b4:9c:7b:37:
9b:45:20:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:52:21 2025 by rpki-client