Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/WpLAW2c6B5YhPTPpYLW-Jfd1o3k.roa
File: WpLAW2c6B5YhPTPpYLW-Jfd1o3k.roa (raw, json)
Hash identifier: t/tRVxfx4Z6wqSUIVFiQoxkGKBBBUBLDcZIYYRqnpak=
Subject key identifier: 5A:92:C0:5B:67:3A:07:96:21:3D:33:E9:60:B5:BE:25:F7:75:A3:79
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0197E950632F6CA4A8932BD9125ADB26FAB3
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/WpLAW2c6B5YhPTPpYLW-Jfd1o3k.roa
Signing time: Tue 08 Jul 2025 09:14:09 +0000
ROA not before: Tue 08 Jul 2025 09:14:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 131745
IP address blocks: 212.38.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e9:50:63:2f:6c:a4:a8:93:2b:d9:12:5a:db:26:fa:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 8 09:14:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a92c05b673a0796213d33e960b5be25f775a379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:0f:06:db:f4:0c:48:68:0e:fe:85:c4:6a:bf:
2d:4a:6b:22:e3:2d:8a:b2:18:0c:59:b6:3a:ba:36:
86:4c:89:91:0d:2f:fb:eb:c0:1f:c5:19:0f:d8:ba:
8c:af:45:a5:c6:bc:11:25:9b:f7:56:09:78:04:0c:
8d:35:16:b7:a6:64:30:23:88:b5:e6:f4:89:6d:74:
12:85:04:80:67:06:04:db:0f:56:7b:2c:3f:6f:1c:
af:df:0f:ff:cc:c6:4d:5b:7f:4a:22:38:f3:f4:44:
3d:d5:01:95:0c:cb:68:f9:b3:5b:66:2f:91:ff:5b:
6a:24:98:9c:34:28:22:3f:d1:a5:2c:36:99:c9:70:
66:c1:e4:58:91:50:a2:9d:28:49:b0:fb:7e:54:4e:
e2:c4:ce:54:a5:45:d0:7e:0b:8b:63:6f:ab:25:77:
9d:8b:fc:a0:7c:31:91:d6:f3:11:4f:b0:ea:65:4f:
57:2f:96:d2:9f:8e:39:f4:6f:9e:6d:a3:d9:dc:40:
1e:37:23:62:e5:0b:16:86:50:54:28:71:4d:25:45:
b9:f8:9f:67:a9:d4:54:a1:e5:23:f6:61:f8:44:e5:
81:3e:93:4a:f9:66:e8:ea:86:86:5a:e4:b2:3e:d0:
8e:5f:e7:ae:a4:08:08:e2:9f:8d:31:ed:81:f4:5d:
e4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:92:C0:5B:67:3A:07:96:21:3D:33:E9:60:B5:BE:25:F7:75:A3:79
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/WpLAW2c6B5YhPTPpYLW-Jfd1o3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.38.81.0/24
Signature Algorithm: sha256WithRSAEncryption
75:b3:1d:25:85:85:e7:26:4c:d8:99:0f:5a:e8:58:9a:73:bd:
cb:9d:3a:e3:c3:7f:9f:0c:64:89:7c:8c:de:73:f4:0f:7e:df:
23:bb:cb:fb:9d:57:45:58:0e:80:e7:5a:cc:7d:07:15:4b:ae:
86:f8:d7:51:1d:ad:49:93:4c:35:d0:1b:b9:ee:ca:af:7b:3b:
4d:3d:ae:a9:e7:80:05:41:e3:d5:b5:06:5c:38:b9:bf:3f:2d:
d4:38:0f:e1:b5:c7:17:05:9e:cd:fe:3c:a8:aa:e9:96:5b:9c:
5c:be:96:da:9f:39:ef:da:6c:a3:83:ba:b3:73:a9:18:da:74:
9c:5a:7b:a2:01:a7:7d:34:b0:ab:74:52:86:b5:cf:3a:57:28:
36:31:a7:6a:de:06:e9:1f:f7:bf:68:60:4e:41:8b:62:e3:d8:
16:70:cc:c9:5b:8c:33:83:3f:0e:56:59:ed:ef:74:e8:d9:30:
03:7e:8c:09:cb:06:e7:06:29:a8:3b:35:b8:f5:92:a8:bc:d6:
de:f8:d2:29:c5:33:ef:cd:6b:5b:b2:b0:0f:09:82:6b:12:1a:
d5:5f:a7:d5:3a:91:ec:da:df:6a:ff:d2:e7:34:b6:46:9e:16:
c5:c9:3f:82:fe:a3:a2:f1:30:8e:ca:00:30:a8:11:67:49:6d:
0a:6a:ad:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:44:56 2025 by rpki-client