Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/wjm8sOb2LDoBj5d0wEdUM2myTI0.roa
File: wjm8sOb2LDoBj5d0wEdUM2myTI0.roa (raw, json)
Hash identifier: 0uyqzA2VU8jqPC9PiOH0pI+cytCCQ4QIYGfCPy+XfZk=
Subject key identifier: C2:39:BC:B0:E6:F6:2C:3A:01:8F:97:74:C0:47:54:33:69:B2:4C:8D
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019A4D66A20BB6DD1D05C6DD71DAE09959A4
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/wjm8sOb2LDoBj5d0wEdUM2myTI0.roa
Signing time: Tue 04 Nov 2025 05:46:03 +0000
ROA not before: Tue 04 Nov 2025 05:46:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214526
IP address blocks: 178.239.157.0/24 maxlen: 24
185.124.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:66:a2:0b:b6:dd:1d:05:c6:dd:71:da:e0:99:59:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Nov 4 05:46:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c239bcb0e6f62c3a018f9774c047543369b24c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:83:7e:23:1e:cc:88:49:da:c0:af:e9:88:d4:
63:6b:54:1b:c3:5f:26:56:a2:d3:d3:7f:d6:25:01:
e0:a9:d2:b9:a2:7c:48:42:42:50:d1:93:bd:38:42:
fc:44:fc:62:88:7e:b4:41:ab:d1:92:cf:c8:29:8a:
6d:e0:20:5a:75:1a:8f:67:25:11:51:45:fa:dd:db:
79:f7:41:51:c9:d9:c8:16:7a:ea:0c:78:17:13:8a:
b1:00:21:50:c4:02:cf:cd:b1:28:e1:23:b3:4f:2b:
a5:b3:77:c7:cf:1f:83:99:49:cf:41:1c:a7:93:08:
d7:6f:91:d6:86:3a:b5:42:82:6a:71:dc:d4:48:fa:
d2:ab:4b:86:1d:e9:2b:2f:5e:48:5a:eb:93:df:cb:
ed:c3:a4:2c:5e:8e:de:cb:18:4c:71:67:38:09:8f:
cf:b1:34:4a:64:b6:1f:16:c1:47:59:12:ae:f0:40:
26:6c:06:2b:31:30:77:b8:bd:6b:ec:4a:f6:77:c7:
cc:b8:99:6e:e5:ff:34:72:fc:b9:93:80:25:a9:25:
01:d4:f1:7e:32:28:77:35:d9:16:38:f2:c7:1f:2b:
5b:9e:ee:26:8d:56:98:a1:c1:bf:f5:f7:2d:28:70:
a4:3e:19:cc:09:87:1e:80:4e:20:d8:67:98:02:aa:
be:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:39:BC:B0:E6:F6:2C:3A:01:8F:97:74:C0:47:54:33:69:B2:4C:8D
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/wjm8sOb2LDoBj5d0wEdUM2myTI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.157.0/24
185.124.175.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:bc:61:17:85:36:1e:b6:a8:5d:97:61:46:14:b1:78:ba:3f:
00:3e:46:a8:11:c6:98:13:d3:24:be:b1:f1:0e:ab:f5:95:09:
06:91:20:25:f9:21:11:08:3f:67:c2:08:6f:19:98:cb:c7:a0:
69:11:c7:11:d6:48:5d:ec:6e:8f:52:04:e2:d2:c1:8d:c1:ac:
c7:6c:d4:62:3f:7c:cd:48:90:fc:88:52:b0:e9:e3:93:b8:85:
dc:82:c6:b1:64:1b:e5:52:6f:07:e6:47:92:11:31:33:80:56:
de:0d:b3:9e:82:9a:40:31:dc:b2:ca:e3:97:53:b9:b5:2a:ce:
d4:9a:4b:7a:b3:c1:40:b7:0d:12:dd:da:4f:8a:f4:6b:76:b4:
0a:b4:61:de:0b:73:11:40:ee:53:c4:42:88:58:1f:0c:a4:3a:
df:d6:86:dd:74:85:38:eb:e0:3e:57:71:6d:0c:90:80:3e:de:
5f:b0:73:da:60:7d:c4:a3:cd:80:8f:20:a5:c2:18:53:17:f6:
04:7a:66:33:7c:0f:9f:0b:fd:16:48:2d:79:ff:00:6b:ca:52:
f4:5f:2f:64:f1:f1:25:66:a6:a4:c3:d3:33:60:8a:46:af:94:
cf:03:ed:5d:20:a7:fd:42:ce:cb:44:24:5b:99:a2:2a:47:c2:
23:85:47:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:30:08 2025 by rpki-client