Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/wV8X6d9n1udO8_7qelBMs7zayK8.roa
File: wV8X6d9n1udO8_7qelBMs7zayK8.roa (raw, json)
Hash identifier: XNyzV/UvtP9ucrS5ao0e9xxzI7L3zFMzQVzB5P+BXHI=
Subject key identifier: C1:5F:17:E9:DF:67:D6:E7:4E:F3:FE:EA:7A:50:4C:B3:BC:DA:C8:AF
Certificate issuer: /CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Certificate serial: 019A11BDCDC1E36E844B56F43BEA88F003B1
Authority key identifier: 98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/wV8X6d9n1udO8_7qelBMs7zayK8.roa
Signing time: Thu 23 Oct 2025 15:44:02 +0000
ROA not before: Thu 23 Oct 2025 15:44:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31662
IP address blocks: 64.239.60.0/24 maxlen: 24
64.239.61.0/24 maxlen: 24
193.186.252.0/24 maxlen: 24
2001:67c:934::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:11:bd:cd:c1:e3:6e:84:4b:56:f4:3b:ea:88:f0:03:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Validity
Not Before: Oct 23 15:44:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c15f17e9df67d6e74ef3feea7a504cb3bcdac8af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e7:36:fc:3e:86:e2:a7:f7:f4:24:85:a5:81:
8a:b2:01:35:f3:8c:b3:89:c4:62:31:3b:92:24:db:
cc:1b:ce:40:24:21:b2:57:6d:f0:d8:65:02:a4:f9:
cc:28:cf:1c:b9:f9:03:bc:05:38:a7:7a:aa:63:fb:
ae:24:da:4a:9c:a7:e4:62:47:c5:32:cf:4d:61:33:
2d:59:fa:6d:35:59:f4:2b:9a:f7:7f:d9:dc:8f:95:
d0:9e:0b:0e:7e:55:de:cf:67:80:2f:47:4d:e5:01:
94:a2:d9:48:cf:26:cb:0c:cb:2e:9e:e3:bf:95:94:
76:f0:ec:fc:75:62:3c:4c:2a:d5:6e:34:36:dd:ed:
ce:03:71:62:2d:1b:b2:b2:76:cc:a2:f4:9f:56:91:
62:55:81:4b:7c:69:c2:fd:10:8b:a6:34:c5:9f:34:
a8:3d:9e:9d:e2:7c:9e:b3:67:b4:bc:03:2e:eb:34:
b1:74:68:59:bc:a0:44:ac:ca:85:5d:6d:59:d3:23:
fe:33:d9:4d:9d:f2:78:a0:e5:e5:b8:67:5f:a1:fd:
6a:00:47:db:58:6e:8b:f0:aa:b6:18:69:5a:ba:12:
10:9f:8c:65:84:c1:43:3d:79:32:b7:25:23:a6:2b:
9d:30:90:f6:40:c0:29:5c:5e:b2:8b:cc:cf:5e:59:
19:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5F:17:E9:DF:67:D6:E7:4E:F3:FE:EA:7A:50:4C:B3:BC:DA:C8:AF
X509v3 Authority Key Identifier:
keyid:98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/wV8X6d9n1udO8_7qelBMs7zayK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.239.60.0/23
193.186.252.0/24
IPv6:
2001:67c:934::/48
Signature Algorithm: sha256WithRSAEncryption
3b:80:d4:d4:17:cb:56:63:03:ea:23:6e:4b:31:97:5a:08:95:
e3:db:6d:a4:39:e0:33:63:4c:20:3a:fa:d7:f2:77:32:a8:5a:
86:1e:53:53:97:38:b1:da:23:77:7c:92:57:e1:a5:9e:b7:aa:
d5:b9:4c:af:7f:75:bd:7a:97:59:cf:c2:98:e6:c1:09:1b:ad:
c4:e4:6b:b0:43:9a:f0:73:5f:0e:ef:5a:f1:d2:c2:eb:e5:53:
e9:f3:1b:c0:a9:75:04:6b:97:91:b3:b9:75:b5:1f:58:f8:a2:
df:79:e3:d4:94:7d:2a:5d:ab:d6:b9:e3:b7:d2:31:73:34:25:
a1:aa:f3:2b:a6:53:78:b4:bf:bb:17:2e:ed:5a:24:13:ba:1d:
d6:74:21:11:7d:77:b0:52:03:a6:77:dd:4b:c0:0f:fe:c7:83:
e3:13:10:6d:c5:e6:b3:94:c2:ee:c9:80:2f:d7:f1:07:eb:9f:
60:0f:9d:ef:b3:48:6b:09:5b:b3:28:b1:eb:49:3e:1e:31:4d:
0a:27:3d:77:93:69:38:f2:66:61:cf:7f:93:66:77:05:8a:2d:
fa:e7:22:c1:55:2f:5c:51:24:31:7e:b5:02:6f:ff:5a:ee:35:
16:c3:88:e7:64:62:3b:80:62:11:5f:1f:4a:47:10:ce:7e:7b:
cb:8b:dc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:43:02 2025 by rpki-client