Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/wNSxjdjpt-TR-1proP9yG59e3yg.roa
File: wNSxjdjpt-TR-1proP9yG59e3yg.roa (raw, json)
Hash identifier: JBhv8bYYeufegR0jL24jd568OhDgTVlrmD99uqJDaeI=
Subject key identifier: C0:D4:B1:8D:D8:E9:B7:E4:D1:FB:5A:6B:A0:FF:72:1B:9F:5E:DF:28
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 01986DE6C57656A6DEDAA7A8A7D72ABF5DD0
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/wNSxjdjpt-TR-1proP9yG59e3yg.roa
Signing time: Sun 03 Aug 2025 03:08:17 +0000
ROA not before: Sun 03 Aug 2025 03:08:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216127
IP address blocks: 212.113.98.0/24 maxlen: 24
212.113.107.0/24 maxlen: 24
212.113.109.0/24 maxlen: 24
212.113.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:6d:e6:c5:76:56:a6:de:da:a7:a8:a7:d7:2a:bf:5d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Aug 3 03:08:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0d4b18dd8e9b7e4d1fb5a6ba0ff721b9f5edf28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e2:85:8f:a4:f0:ec:67:8a:4f:70:f2:16:81:
fd:e5:27:2f:de:2a:b6:cf:f9:0f:ff:e2:62:01:52:
6f:23:8e:fc:33:72:62:4a:2d:62:97:a5:7f:c8:86:
ad:a9:07:1b:81:56:22:9a:d3:6a:13:db:aa:63:d0:
e7:df:0d:e3:15:33:e6:f6:f9:7e:6d:d5:b5:fa:fc:
cc:0f:b1:61:f0:0f:4f:c0:78:5b:f5:59:59:8d:aa:
08:18:f0:17:ac:18:04:2b:6c:c5:ac:a9:c2:c6:38:
e6:00:92:b2:26:54:e2:e6:7e:e9:3f:e3:e5:4a:12:
1d:60:77:70:e0:70:16:06:2b:06:5c:1b:c6:e6:e9:
b0:6f:b3:cc:c3:f1:48:b4:81:6f:0f:d8:5d:f1:01:
e8:48:e4:7a:71:6e:ff:1e:d6:10:90:8a:ca:e8:5d:
18:99:97:d5:0a:cb:f1:98:52:43:dc:74:c6:1d:38:
08:1c:28:59:d6:ce:7d:5c:60:f3:07:3d:45:c7:17:
37:22:ae:27:8a:04:b7:ba:7e:1f:11:42:31:fa:9f:
a3:85:15:9f:f0:16:0f:61:95:48:46:4e:9e:16:0e:
b3:ca:99:0d:e9:b7:9c:cc:74:7f:48:5b:1c:ed:95:
c0:23:7d:a9:28:13:2f:b9:1a:9b:0d:7d:e7:95:39:
ab:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D4:B1:8D:D8:E9:B7:E4:D1:FB:5A:6B:A0:FF:72:1B:9F:5E:DF:28
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/wNSxjdjpt-TR-1proP9yG59e3yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.113.98.0/24
212.113.107.0/24
212.113.109.0/24
212.113.112.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:14:cf:7a:28:6b:cd:75:30:a0:96:89:d0:5d:70:a9:9b:f0:
90:ff:20:d3:b8:69:e5:ad:c8:ed:83:f1:93:4a:b5:30:c7:b0:
eb:12:00:46:8d:7a:ae:e5:70:50:2b:e8:43:3d:8b:33:44:65:
f2:16:65:b6:27:4e:36:25:7d:00:49:64:60:4e:ae:f1:48:b6:
17:e4:93:ac:4f:fc:61:d8:55:d4:ae:5c:e1:5c:ad:1b:10:57:
0c:df:28:d1:a0:58:58:e7:38:3e:8a:ba:38:ae:65:ea:6e:ba:
16:13:dd:ea:1f:ff:72:47:25:b2:3d:67:94:c4:40:44:79:e8:
6e:8a:10:84:c7:30:02:41:69:7d:d9:0d:2d:1d:73:e6:c7:dc:
2c:c8:fe:7c:8b:80:ac:4e:a8:35:ad:73:1c:4a:b1:24:8d:5e:
c2:e3:10:0f:6b:38:71:0d:6b:0c:00:de:26:42:15:c5:bf:bf:
89:53:a3:0c:47:a4:a5:da:81:7c:7c:25:ff:61:f1:c7:3b:c7:
6e:ab:ba:69:4d:af:37:ba:ba:07:ee:26:fc:c2:b2:b8:8a:5a:
1c:83:b6:21:ad:58:40:5a:44:a8:80:8a:48:bc:70:d7:fd:50:
85:c3:22:ed:0d:9d:9b:c1:af:3b:dd:33:8f:32:2d:02:54:53:
b3:aa:cd:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:18:08 2025 by rpki-client