Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/wSGsamIp2JavINuAG5Ge2cvZdUw.roa
File: wSGsamIp2JavINuAG5Ge2cvZdUw.roa (raw, json)
Hash identifier: Yu+PmAJW3EqzZtBozauuFMpDk9UoMVCMv7Pei6FBkQQ=
Subject key identifier: C1:21:AC:6A:62:29:D8:96:AF:20:DB:80:1B:91:9E:D9:CB:D9:75:4C
Certificate issuer: /CN=1d8e8df5c031107118da61f29ab4f419d29d5a8a
Certificate serial: 01985AEA6B464643BF34BFCC804DC3D6818A
Authority key identifier: 1D:8E:8D:F5:C0:31:10:71:18:DA:61:F2:9A:B4:F4:19:D2:9D:5A:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HY6N9cAxEHEY2mHymrT0GdKdWoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/wSGsamIp2JavINuAG5Ge2cvZdUw.roa
Signing time: Wed 30 Jul 2025 10:39:28 +0000
ROA not before: Wed 30 Jul 2025 10:39:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3218
IP address blocks: 2a0c:6d00:61::/48 maxlen: 48
2a0c:6d00:85::/48 maxlen: 48
2a0c:6d00:232::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HY6N9cAxEHEY2mHymrT0GdKdWoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5a:ea:6b:46:46:43:bf:34:bf:cc:80:4d:c3:d6:81:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8e8df5c031107118da61f29ab4f419d29d5a8a
Validity
Not Before: Jul 30 10:39:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c121ac6a6229d896af20db801b919ed9cbd9754c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e6:ac:9f:86:fe:37:d6:dd:6e:7f:70:51:61:
31:f0:c0:82:28:bf:92:23:59:11:4b:45:85:da:41:
dc:d8:a4:9c:72:76:b0:56:9b:0e:85:0b:e6:7e:01:
b4:d8:26:d6:d6:33:98:97:e5:e1:57:24:77:3b:55:
9a:fb:ee:a6:be:c9:3c:c9:45:08:62:65:5b:85:27:
86:38:c9:da:ae:50:f9:a4:76:d4:40:f7:c9:13:fd:
f1:4c:b6:35:63:19:2e:71:64:08:1d:89:bc:16:8e:
bf:19:c9:83:7f:50:b1:a1:12:9c:39:7b:fa:0a:16:
cf:85:12:25:d7:20:8a:c0:38:1c:87:6b:54:aa:1d:
dd:b4:a0:70:01:b6:ef:5b:0f:45:05:c4:c0:a7:b4:
0d:5f:60:9c:5d:cd:16:33:7c:b9:3f:8b:17:d7:7b:
1f:73:65:ff:f1:9b:ef:94:4b:51:9f:52:67:67:0e:
0c:41:19:b8:0a:55:e8:1c:cf:f4:b9:a6:cf:50:f4:
03:f0:58:c3:b5:aa:f2:bf:78:5f:f4:6d:2c:4d:d2:
53:c8:d1:12:1f:fc:c2:e1:a7:eb:fc:8a:15:30:35:
91:27:da:0b:09:7c:23:78:db:90:72:21:53:69:e8:
dc:28:dc:97:1a:27:56:73:cf:62:ff:a9:30:28:67:
e1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:21:AC:6A:62:29:D8:96:AF:20:DB:80:1B:91:9E:D9:CB:D9:75:4C
X509v3 Authority Key Identifier:
keyid:1D:8E:8D:F5:C0:31:10:71:18:DA:61:F2:9A:B4:F4:19:D2:9D:5A:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HY6N9cAxEHEY2mHymrT0GdKdWoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/wSGsamIp2JavINuAG5Ge2cvZdUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:6d00:61::/48
2a0c:6d00:85::/48
2a0c:6d00:232::/48
Signature Algorithm: sha256WithRSAEncryption
06:37:68:d5:9e:2a:54:b7:38:fa:34:12:97:33:af:6e:8e:cd:
e5:69:df:3c:32:6b:44:96:56:89:ee:1a:ae:0c:5d:6d:65:cd:
4a:c1:10:04:31:bb:5e:87:1d:fe:b1:28:6c:06:12:8c:df:45:
6f:ed:37:40:06:96:6d:df:63:5d:1d:50:2d:c9:8f:57:14:93:
7f:ef:81:17:36:90:f0:9f:5d:56:c7:73:a5:8e:e6:c4:d8:3c:
71:32:ef:7a:59:22:34:bb:1b:1c:c7:c2:ce:13:41:ed:61:34:
10:94:bf:56:fb:79:aa:25:b8:9a:4c:5b:f5:6f:76:1e:9c:3f:
72:ce:42:cd:9c:6c:7d:be:53:27:c0:72:63:37:af:f8:2c:a7:
e1:24:ea:f4:da:e6:b2:c2:3e:95:cf:bc:84:8c:72:ff:97:35:
f1:20:a1:75:4d:c5:95:7a:0f:d7:59:33:37:ef:51:8a:c4:7d:
c0:7e:17:85:60:0d:e0:c6:38:80:46:8a:dd:51:c2:5e:c1:51:
d3:9c:71:ce:73:91:4a:83:f4:6d:3c:be:27:87:ba:b7:c4:d7:
a7:32:7f:11:e2:6c:2c:91:ad:de:94:fb:4e:9b:ab:5f:13:15:
fd:2c:4e:b2:4c:15:db:77:5c:9f:76:7c:8b:68:43:55:52:35:
71:fd:6a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:02:11 2025 by rpki-client