Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/W7PWFrX-v5SaBlQz93CvawsAR8Y.roa
File: W7PWFrX-v5SaBlQz93CvawsAR8Y.roa (raw, json)
Hash identifier: YvmisDA3cqiQerchJ4ThrZ/s4MEmdOZ55Z/X5SC6qlM=
Subject key identifier: 5B:B3:D6:16:B5:FE:BF:94:9A:06:54:33:F7:70:AF:6B:0B:00:47:C6
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 01983D194CF9A591BF12F0AC693573295F0B
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/W7PWFrX-v5SaBlQz93CvawsAR8Y.roa
Signing time: Thu 24 Jul 2025 15:42:05 +0000
ROA not before: Thu 24 Jul 2025 15:42:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208794
IP address blocks: 193.43.139.0/24 maxlen: 24
2a0e:b280::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:19:4c:f9:a5:91:bf:12:f0:ac:69:35:73:29:5f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Jul 24 15:42:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5bb3d616b5febf949a065433f770af6b0b0047c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c3:a7:8b:30:fc:10:6d:bc:a1:d9:b5:88:86:
57:6d:6b:2c:40:5f:d5:05:28:e7:6a:4c:80:2e:cc:
5b:8c:55:59:0d:89:3a:ef:27:25:61:e2:f6:65:e2:
47:a5:e3:1a:92:9d:c7:83:20:2f:58:4f:25:1f:08:
4b:a2:db:87:c9:64:a2:f7:49:2e:63:b1:55:88:5e:
07:ad:f6:ca:fd:eb:af:d5:9c:47:c7:18:c4:5b:33:
e2:20:bd:4e:ec:70:8f:db:f0:f4:35:03:53:78:5f:
90:af:71:86:e9:a5:a5:5e:bf:81:57:1b:2c:1c:43:
8f:30:71:0e:4e:aa:e7:ff:79:7d:1a:1c:34:05:d2:
ac:bc:15:a1:51:ef:03:47:96:df:03:c3:65:82:01:
0d:0d:47:ee:75:6b:7d:71:88:19:26:6c:71:85:a1:
77:1e:be:5a:57:55:91:cd:24:2e:64:8c:49:65:d6:
29:11:e2:db:ef:cb:72:c2:15:aa:c9:3a:a6:37:17:
2d:cf:c3:83:d1:34:43:84:25:a3:b0:f6:a0:c8:07:
6b:43:73:01:96:1a:76:19:e5:89:51:c4:7b:3e:a0:
68:95:22:a9:f9:9a:f9:6e:d5:19:6a:ff:5e:c6:54:
49:71:80:ca:ea:1c:1c:dd:fb:b6:2f:17:c6:f1:9c:
68:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B3:D6:16:B5:FE:BF:94:9A:06:54:33:F7:70:AF:6B:0B:00:47:C6
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/W7PWFrX-v5SaBlQz93CvawsAR8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.139.0/24
IPv6:
2a0e:b280::/29
Signature Algorithm: sha256WithRSAEncryption
84:d6:81:ec:ef:37:9b:04:74:df:26:21:74:54:26:9d:8c:e9:
e4:dc:2a:df:40:f2:78:0d:97:00:48:3f:f7:1e:fc:21:c9:e3:
17:1b:64:a8:b2:1f:4b:bc:e3:bb:67:d3:c9:1a:70:4d:19:8d:
b3:10:d2:3d:44:1e:eb:22:97:0d:f8:95:6d:e9:83:6b:ae:7f:
fd:cc:81:c4:64:ae:ab:98:43:76:01:46:a8:b5:2f:31:ee:f7:
f9:62:29:5e:7b:8b:ad:62:a0:54:9f:4f:a2:2c:5e:0a:02:5e:
0a:cc:29:dd:48:ad:42:39:25:6d:67:ed:16:7f:83:92:52:43:
64:b3:09:fa:f8:96:10:fc:de:c6:78:ed:c9:33:8b:06:36:8a:
29:bb:5b:6f:fb:ce:17:83:98:52:d6:23:34:7f:4c:66:a9:1a:
61:5a:14:39:98:74:1e:dd:eb:a4:91:2a:a6:95:6f:d5:7c:fd:
98:14:3b:86:65:bb:7a:16:06:d4:fc:6f:28:b0:42:d2:9d:42:
13:9a:97:6d:dc:fa:f4:8f:f8:f2:ba:fa:65:ed:54:f3:c1:2a:
37:91:2c:7a:6b:67:c6:87:06:e5:c4:f2:48:3c:ee:14:2b:15:
bd:78:21:c4:15:11:71:4e:95:89:2a:ca:27:4e:e9:56:d7:ae:
b2:b2:35:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:10:54 2025 by rpki-client