Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/wJnInGV4teF0g10RSFL-97NsqfE.roa
File: wJnInGV4teF0g10RSFL-97NsqfE.roa (raw, json)
Hash identifier: guSafV7Vopy+ptWB7+TTMa3EtqeA7z2MepbgXumjwJc=
Subject key identifier: C0:99:C8:9C:65:78:B5:E1:74:83:5D:11:48:52:FE:F7:B3:6C:A9:F1
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 01985F7B8C3388737FC522076CD4B12ECF6C
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/wJnInGV4teF0g10RSFL-97NsqfE.roa
Signing time: Thu 31 Jul 2025 07:56:29 +0000
ROA not before: Thu 31 Jul 2025 07:56:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 62.171.240.0/22 maxlen: 24
194.238.56.0/22 maxlen: 24
194.238.78.0/24 maxlen: 24
194.238.79.0/24 maxlen: 24
213.18.196.0/22 maxlen: 24
213.18.208.0/22 maxlen: 24
213.18.220.0/22 maxlen: 24
213.18.245.0/24 maxlen: 24
217.177.0.0/21 maxlen: 24
217.177.44.0/22 maxlen: 24
217.177.48.0/22 maxlen: 24
217.177.52.0/22 maxlen: 24
217.179.56.0/22 maxlen: 24
217.179.72.0/22 maxlen: 24
217.179.80.0/22 maxlen: 24
217.179.88.0/24 maxlen: 24
217.179.124.0/22 maxlen: 24
217.179.220.0/22 maxlen: 24
217.180.12.0/24 maxlen: 24
217.180.13.0/24 maxlen: 24
217.180.14.0/24 maxlen: 24
217.180.20.0/24 maxlen: 24
217.180.22.0/23 maxlen: 24
217.180.38.0/24 maxlen: 24
217.180.45.0/24 maxlen: 24
217.180.46.0/24 maxlen: 24
217.180.59.0/24 maxlen: 24
217.180.61.0/24 maxlen: 24
217.181.80.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5f:7b:8c:33:88:73:7f:c5:22:07:6c:d4:b1:2e:cf:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Jul 31 07:56:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c099c89c6578b5e174835d114852fef7b36ca9f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:61:a5:47:f5:68:b3:19:0c:31:8d:33:e1:26:
dd:c9:c6:77:b3:e4:86:a3:1b:de:55:a7:56:9d:47:
78:85:80:d6:ae:98:1d:a5:b8:58:af:f2:b8:9c:05:
db:a5:f0:97:8b:a1:71:6d:b6:0d:49:15:c2:b1:db:
50:26:6d:82:59:a3:3b:b4:d8:61:22:6a:c1:11:fd:
47:f8:e1:a5:6a:93:d2:94:37:62:af:11:39:75:67:
1d:ce:c5:82:10:b8:6b:5c:bd:7b:9f:f0:9b:3e:95:
cc:75:23:0e:5e:3f:f0:bc:3e:d2:21:cc:fb:9a:5b:
60:93:2b:34:1a:63:7a:08:e5:a9:6f:d9:14:46:7b:
6b:37:ee:f6:12:c7:6f:5a:60:11:70:b3:78:e6:a1:
df:fd:4c:0a:f3:ed:de:74:68:6b:21:5f:71:64:8e:
57:c3:39:9b:96:d7:1f:46:7a:ad:ba:5a:0c:f3:fb:
73:ad:b6:98:36:7c:72:06:f6:0b:33:81:9b:25:65:
7c:16:7d:ea:39:8f:e1:c0:61:6c:8b:c5:e0:b8:53:
ac:5e:66:b8:54:ff:1a:2e:a1:97:b6:fc:99:8b:6d:
0c:fb:df:43:26:6d:78:34:b8:4b:0b:b4:c5:3b:03:
4b:dd:b0:8c:6c:60:ab:e3:c8:69:11:29:09:9b:df:
5e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:99:C8:9C:65:78:B5:E1:74:83:5D:11:48:52:FE:F7:B3:6C:A9:F1
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/wJnInGV4teF0g10RSFL-97NsqfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.171.240.0/22
194.238.56.0/22
194.238.78.0/23
213.18.196.0/22
213.18.208.0/22
213.18.220.0/22
213.18.245.0/24
217.177.0.0/21
217.177.44.0-217.177.55.255
217.179.56.0/22
217.179.72.0/22
217.179.80.0/22
217.179.88.0/24
217.179.124.0/22
217.179.220.0/22
217.180.12.0-217.180.14.255
217.180.20.0/24
217.180.22.0/23
217.180.38.0/24
217.180.45.0-217.180.46.255
217.180.59.0/24
217.180.61.0/24
217.181.80.0/21
Signature Algorithm: sha256WithRSAEncryption
4d:c2:c3:0e:66:dc:d8:11:e7:2b:7f:86:1a:ec:23:bc:9a:fa:
84:aa:e2:18:52:ab:85:af:6a:ee:aa:cc:48:d7:4d:9b:85:cd:
3d:a8:6a:f2:1b:29:32:38:02:32:cc:2f:c8:7a:1d:58:c7:72:
8b:50:ba:69:d2:04:5f:42:69:9b:fe:d2:f0:8f:80:cf:56:54:
1d:6a:54:54:d2:a3:2f:bf:96:4a:bf:11:99:0b:3c:0e:54:2d:
c5:9e:14:73:1e:a5:7d:a2:06:90:eb:e7:2a:0a:7e:85:f8:9e:
6c:56:0c:02:e5:ab:56:40:ad:f7:82:dd:ea:ed:aa:01:2d:e2:
40:28:a4:be:e0:c4:1a:73:4f:74:8f:63:45:ac:55:84:e2:54:
be:38:bb:50:72:01:7e:cc:aa:fb:a0:6a:7b:06:c0:b6:39:7e:
8a:78:e3:e3:33:11:ac:35:9b:25:f2:7b:a3:a6:e5:48:2c:a5:
56:ba:76:76:2c:74:c5:41:3d:ee:ea:70:7f:22:bd:d6:14:68:
14:78:20:20:cc:9a:0d:9d:23:c4:36:e4:7d:7a:48:53:d2:b2:
c8:7a:6a:1b:44:58:2c:00:c8:54:b1:3f:65:48:f3:29:ff:93:
93:97:0e:d9:d6:1f:ca:5b:ee:7f:b5:dc:ae:15:82:d6:29:22:
2b:be:00:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:54:00 2025 by rpki-client