Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/WimrCnKR79RO40XGCqS2XS7OCtI.roa
File: WimrCnKR79RO40XGCqS2XS7OCtI.roa (raw, json)
Hash identifier: oteuzd/lL4PEOLIVFC8qfHmy+6hW3S3xwPt9NhndZmQ=
Subject key identifier: 5A:29:AB:0A:72:91:EF:D4:4E:E3:45:C6:0A:A4:B6:5D:2E:CE:0A:D2
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 01988442FFD96130068DAD0943E5AA9264DB
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/WimrCnKR79RO40XGCqS2XS7OCtI.roa
Signing time: Thu 07 Aug 2025 11:20:40 +0000
ROA not before: Thu 07 Aug 2025 11:20:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209847
IP address blocks: 45.142.212.0/24 maxlen: 24
45.142.213.0/24 maxlen: 24
45.142.214.0/24 maxlen: 24
45.142.215.0/24 maxlen: 24
213.226.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:42:ff:d9:61:30:06:8d:ad:09:43:e5:aa:92:64:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Aug 7 11:20:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a29ab0a7291efd44ee345c60aa4b65d2ece0ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:18:bd:10:14:72:ad:a9:5c:d2:df:14:bf:ee:
6b:c5:f5:58:6b:21:3b:e2:3c:b0:84:03:8e:74:dd:
71:03:0a:23:5f:dc:fb:39:7b:b3:f4:94:fe:83:be:
ec:a7:88:20:47:a6:70:61:3e:03:43:21:64:cd:39:
79:15:f5:dc:28:9c:d2:c7:b4:52:f2:f4:0b:49:bb:
5c:26:65:40:2e:2e:6a:ec:ce:5b:ca:18:81:17:9e:
4a:ff:57:34:dd:c2:b5:c4:74:63:bc:31:87:31:62:
9d:87:48:b8:03:3c:95:0d:5c:fe:8a:16:34:1a:5f:
a7:f6:af:72:55:1b:e1:07:9e:5d:67:78:c0:ef:b7:
8f:0c:57:c3:e9:19:d1:eb:51:0c:e6:54:85:1a:d6:
4e:9c:07:29:58:b6:61:b1:31:8a:db:16:c0:65:3b:
b9:00:6f:f7:44:ff:82:6a:de:c7:b6:e1:aa:5d:6f:
61:42:6a:78:b5:68:34:81:89:57:f2:af:5e:ea:c9:
63:ae:f3:ad:a7:47:85:bd:a3:30:a6:9e:0f:e7:6d:
ab:23:3f:74:f2:ca:6f:b4:c6:0f:89:1a:b4:e9:c3:
3b:4a:4b:69:32:b2:c8:fc:66:3d:03:a9:f3:7b:89:
29:44:3d:e8:45:c7:8c:49:1b:92:c2:96:f7:84:77:
4b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:29:AB:0A:72:91:EF:D4:4E:E3:45:C6:0A:A4:B6:5D:2E:CE:0A:D2
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/WimrCnKR79RO40XGCqS2XS7OCtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.212.0/22
213.226.100.0/24
Signature Algorithm: sha256WithRSAEncryption
54:a6:78:69:fc:6b:96:77:b4:e4:36:49:42:6d:47:50:84:f0:
ef:b0:18:90:e9:a4:a7:b5:e8:25:b4:0a:71:9c:ec:b6:1d:4d:
0d:31:69:11:26:44:36:15:38:8b:d0:d3:95:c2:99:be:08:12:
ea:23:ae:14:32:99:80:47:60:d2:ed:2a:6c:e1:87:68:d2:ab:
65:f9:4b:b6:1a:b1:f4:82:89:42:33:ce:c1:74:a0:65:be:b7:
4e:4b:ca:52:0c:4f:9a:3a:21:52:8f:b9:28:bb:ae:85:35:14:
e0:d6:f3:83:40:09:aa:c2:04:43:e6:40:b0:53:61:48:17:83:
cf:d9:de:85:77:ac:ae:1e:30:69:64:60:52:52:18:e8:fd:55:
88:57:cc:5c:66:11:34:31:a7:05:95:89:33:fe:1c:3c:6a:63:
45:1f:ea:36:c5:4d:16:47:6e:4f:a0:d6:e6:f5:7a:27:ed:52:
fc:95:40:06:bc:9e:f5:2b:24:ef:1d:9c:ab:e5:f1:3c:ea:22:
04:27:5e:be:55:74:75:03:39:3b:f2:2e:6b:e1:3a:08:4c:a4:
98:32:d7:4f:0c:ec:7a:40:60:7b:fd:3c:25:99:23:33:7e:1a:
dd:7e:9c:55:29:c1:77:45:b7:22:50:11:3d:dd:53:a4:34:9b:
9f:79:a9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:54:16 2025 by rpki-client