Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/wbgG1j9R-vhoPqvH0nUMQbXvrx8.roa
File: wbgG1j9R-vhoPqvH0nUMQbXvrx8.roa (raw, json)
Hash identifier: xo2u/qdC49lIMc4JdjEDCUm3a6iK3K063v78xvOND8A=
Subject key identifier: C1:B8:06:D6:3F:51:FA:F8:68:3E:AB:C7:D2:75:0C:41:B5:EF:AF:1F
Certificate issuer: /CN=da21d02464b38aff3a31c90878d62723b9c742a6
Certificate serial: 019874E5B9B63A7BA8511ED15DFB351BF828
Authority key identifier: DA:21:D0:24:64:B3:8A:FF:3A:31:C9:08:78:D6:27:23:B9:C7:42:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2iHQJGSziv86MckIeNYnI7nHQqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/wbgG1j9R-vhoPqvH0nUMQbXvrx8.roa
Signing time: Mon 04 Aug 2025 11:44:28 +0000
ROA not before: Mon 04 Aug 2025 11:44:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9121
IP address blocks: 81.27.78.0/24 maxlen: 24
81.27.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/2iHQJGSziv86MckIeNYnI7nHQqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/2iHQJGSziv86MckIeNYnI7nHQqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2iHQJGSziv86MckIeNYnI7nHQqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:e5:b9:b6:3a:7b:a8:51:1e:d1:5d:fb:35:1b:f8:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da21d02464b38aff3a31c90878d62723b9c742a6
Validity
Not Before: Aug 4 11:44:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1b806d63f51faf8683eabc7d2750c41b5efaf1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6a:2c:23:76:d0:81:9d:68:6f:95:49:46:a4:
6a:38:0c:ab:cf:d1:83:80:2c:03:12:2b:fc:62:5f:
0c:e8:9b:fb:b1:5e:bd:73:81:93:77:e6:77:f5:c0:
29:a7:04:6f:f5:6a:b5:b0:32:3d:09:e8:e0:b9:70:
cb:d5:6a:6a:dc:63:8d:72:6a:ce:dd:32:76:fa:b3:
19:a0:89:4b:6f:f7:18:2a:ee:9b:db:e9:02:1b:7c:
55:a2:97:e0:a0:f4:77:79:fe:46:1a:b9:0e:19:27:
63:90:06:0e:6b:23:b8:a0:be:c4:65:83:91:96:83:
77:f2:03:82:9d:38:fd:ce:37:75:fe:45:7e:9b:91:
a6:00:49:d2:95:fb:48:ea:88:e4:28:6f:56:8f:d7:
76:e8:5d:63:e4:82:06:49:4d:fe:2a:84:a3:63:df:
0b:78:07:7a:b9:2d:83:a9:05:2e:a5:58:07:ff:43:
07:10:0b:d1:38:62:1d:c1:d5:46:c8:e3:1f:20:19:
e8:8c:0b:ed:7a:4d:16:07:a1:ab:8a:38:0e:a8:da:
f9:ec:4d:e2:08:cf:d1:f2:0a:7b:c2:6c:64:ed:b5:
01:84:c3:23:28:5a:1e:ff:98:4c:0b:f8:d7:e6:8f:
a0:47:cc:6e:27:b2:a4:b9:79:ca:47:ff:95:e2:8c:
43:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B8:06:D6:3F:51:FA:F8:68:3E:AB:C7:D2:75:0C:41:B5:EF:AF:1F
X509v3 Authority Key Identifier:
keyid:DA:21:D0:24:64:B3:8A:FF:3A:31:C9:08:78:D6:27:23:B9:C7:42:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2iHQJGSziv86MckIeNYnI7nHQqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/wbgG1j9R-vhoPqvH0nUMQbXvrx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/2iHQJGSziv86MckIeNYnI7nHQqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.27.78.0/23
Signature Algorithm: sha256WithRSAEncryption
00:30:5c:e6:ae:f1:5c:47:9d:99:9a:c0:45:43:b6:bb:5c:38:
a7:d4:d6:61:ae:2a:fe:33:d3:a9:dc:71:0f:38:2e:da:ab:b6:
f5:0b:89:f4:71:3d:1c:23:b5:0b:9d:1a:b4:9d:26:43:ae:e6:
f8:ee:22:9f:64:53:56:84:68:d6:62:3e:29:10:c7:0f:cc:f7:
1b:97:28:36:04:12:3f:ab:d0:8a:25:06:06:86:8f:25:7d:18:
ee:25:d8:89:30:1d:ea:3b:01:8a:bf:59:b8:2b:39:d4:3c:6b:
dc:f3:10:9a:0c:63:70:00:47:25:d4:d5:8b:74:05:75:97:e3:
d1:4f:4d:0b:a8:f8:e0:99:99:59:30:7c:cf:8f:fe:02:9d:bc:
48:4d:b6:10:02:d6:c0:09:26:af:ea:f9:f5:73:d1:d1:f7:5c:
c1:90:69:12:cb:1b:34:0b:73:7b:57:6f:59:73:2c:4c:2d:cd:
4b:ed:62:b6:a3:57:7a:06:a1:e4:8f:22:54:66:e3:9c:b2:f7:
c7:f2:2f:a7:e4:07:ee:bd:8a:0a:5e:2e:dd:3f:35:29:cd:02:
cd:f8:1e:19:5a:8d:ff:9d:f4:30:da:7b:64:e0:50:68:6a:f9:
4c:93:ae:89:69:97:ae:86:2b:6a:98:08:16:f1:98:df:5e:85:
87:a2:53:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:08:04 2025 by rpki-client