Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ksHJ5veSiiTJpHDAiDQCZOGD_wg.roa
File: ksHJ5veSiiTJpHDAiDQCZOGD_wg.roa (raw, json)
Hash identifier: 7QrJc2QYXrVrexl1K+oore9QdTn/h4igVb10SyO02z0=
Subject key identifier: 92:C1:C9:E6:F7:92:8A:24:C9:A4:70:C0:88:34:02:64:E1:83:FF:08
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019A0B62EB392EA516B63FDC662A6E47BABA
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ksHJ5veSiiTJpHDAiDQCZOGD_wg.roa
Signing time: Wed 22 Oct 2025 10:07:03 +0000
ROA not before: Wed 22 Oct 2025 10:07:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135402
IP address blocks: 89.213.197.0/24 maxlen: 24
194.105.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:62:eb:39:2e:a5:16:b6:3f:dc:66:2a:6e:47:ba:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 22 10:07:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92c1c9e6f7928a24c9a470c088340264e183ff08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ca:9a:c5:b0:df:bf:8f:0f:74:ba:1d:10:38:
80:da:1e:3a:43:fd:73:40:9d:37:e5:16:17:76:f5:
01:82:98:0d:22:b4:c1:52:ab:2e:2d:2c:73:be:57:
5f:43:e7:6f:6f:b0:33:45:69:0b:39:ae:20:af:98:
c7:75:22:73:00:a1:3c:52:27:dc:c8:76:d3:8a:3f:
6f:d9:cd:fd:1b:d5:ed:c0:94:02:32:09:ba:ee:61:
8f:c1:e3:04:7e:6a:7e:2b:b1:9d:9d:16:b4:7b:ee:
ba:1e:cd:8b:43:94:a3:7c:a6:7f:4f:05:e3:07:93:
54:cb:46:78:62:2b:80:fd:8a:18:e1:cd:64:3c:47:
6b:13:a5:b3:5e:62:e2:d8:cf:1a:80:0f:aa:34:e2:
3d:9f:b0:5d:c9:f6:6e:5b:a3:52:ed:29:72:fa:b7:
e8:f6:86:88:a8:c7:24:90:a9:f9:19:d0:90:c5:2f:
75:f0:b1:04:f1:a2:3a:3b:a5:dd:91:99:a0:f2:cd:
bd:72:9e:11:82:f5:34:69:3b:99:60:00:05:ff:04:
58:dd:a7:cc:ae:80:00:4d:57:5e:6e:40:24:3e:bf:
5e:7a:18:44:9a:b3:36:8f:37:11:3b:70:e5:5d:76:
9f:06:61:95:7d:4f:ff:09:90:a9:73:0d:23:31:6a:
86:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C1:C9:E6:F7:92:8A:24:C9:A4:70:C0:88:34:02:64:E1:83:FF:08
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ksHJ5veSiiTJpHDAiDQCZOGD_wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.197.0/24
194.105.90.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:79:c7:28:24:c9:ac:85:e8:86:82:ad:0c:bb:b7:78:01:c0:
e3:38:7d:7a:21:8a:55:52:39:5d:1a:85:ae:06:89:c9:56:bd:
b0:7f:9c:c8:95:5a:83:0b:1b:ee:44:d0:34:6e:bd:29:89:a3:
e2:61:59:3b:55:8b:55:6f:4f:f4:86:2d:1c:56:f2:68:46:cd:
1b:e7:e6:d0:42:ee:b6:8c:09:7a:c1:e5:4d:91:1f:a6:38:78:
35:5a:cc:77:f1:44:a0:28:f2:4e:06:e1:2f:d3:24:74:89:92:
41:e9:2e:09:85:46:7b:b0:ff:a5:14:26:6c:f1:63:24:13:87:
a2:56:d8:a0:2b:5b:5e:cc:97:7f:43:2b:bb:f6:86:d5:34:8f:
bb:03:a5:05:70:45:28:ab:d4:98:96:b0:ad:6b:85:fe:2e:35:
68:72:66:1d:11:14:bb:7d:72:81:57:bb:8a:d6:b5:59:7c:61:
42:ea:c6:9d:51:e6:f7:68:3b:20:ec:fb:8a:d5:10:80:9a:70:
02:33:43:03:f9:86:ba:1e:9a:50:da:43:ed:79:22:47:b1:c7:
18:ca:fe:3c:a6:e1:b8:f4:de:c0:bc:93:77:68:a9:be:ae:fc:
9e:b1:2f:7d:80:2e:e1:93:31:be:9d:9e:2a:25:24:25:13:e1:
b3:b6:ae:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:00:54 2025 by rpki-client