Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/Ib580J_-DuFQb8u1VEIfvd9TW9w.roa
File: Ib580J_-DuFQb8u1VEIfvd9TW9w.roa (raw, json)
Hash identifier: LW93slSpEAA0H/x1PZsjVdKBOLrQSbjGY+wlbwVtJJY=
Subject key identifier: 21:BE:7C:D0:9F:FE:0E:E1:50:6F:CB:B5:54:42:1F:BD:DF:53:5B:DC
Certificate issuer: /CN=c28973affaa9936d39146aa136fbcb051b9af99f
Certificate serial: 019A4F6A1420B3EB74F497C72A416C0F7AD9
Authority key identifier: C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/Ib580J_-DuFQb8u1VEIfvd9TW9w.roa
Signing time: Tue 04 Nov 2025 15:09:03 +0000
ROA not before: Tue 04 Nov 2025 15:09:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30058
IP address blocks: 82.119.208.0/23 maxlen: 23
217.22.242.0/23 maxlen: 23
217.22.246.0/23 maxlen: 23
217.22.250.0/23 maxlen: 23
217.22.254.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:6a:14:20:b3:eb:74:f4:97:c7:2a:41:6c:0f:7a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c28973affaa9936d39146aa136fbcb051b9af99f
Validity
Not Before: Nov 4 15:09:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21be7cd09ffe0ee1506fcbb554421fbddf535bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bb:8a:5f:c3:2e:25:ea:cf:1e:69:a0:c4:60:
20:bc:50:53:ed:8e:42:3f:74:80:82:e9:98:49:6b:
d7:5c:be:db:a6:4a:a8:40:61:99:71:68:8a:7d:75:
a5:e0:a1:75:26:a8:13:77:f6:ad:26:69:4a:ab:59:
82:6d:0a:05:7b:b1:3d:7c:8f:c2:d4:17:a1:7b:33:
2a:9d:a1:00:05:66:87:7c:a7:54:5f:3f:79:ba:90:
f9:8b:a7:7a:2f:0f:61:08:44:8f:a0:2a:f5:19:f5:
8a:99:79:30:98:51:2c:af:d6:76:ef:12:37:a4:62:
84:1e:a1:c6:5f:b7:57:29:54:95:5b:03:8a:52:ba:
c1:41:e1:1f:26:d4:6f:f8:65:ee:62:94:c8:6c:bf:
4b:61:b2:c2:c3:b3:e2:6b:fc:69:0f:fe:a7:c6:9d:
a5:a5:fb:e5:50:bb:63:01:03:9f:eb:12:8b:31:3f:
2b:5f:07:9f:ff:05:03:7a:3c:37:e3:aa:16:7a:ff:
b1:24:72:70:5e:2e:3f:15:40:07:75:95:c7:dd:2a:
75:f9:53:e3:f7:9c:f9:12:ee:99:bf:88:45:9f:04:
2e:b8:f4:c7:e0:45:ee:c5:cd:a8:50:23:aa:af:2a:
e9:a1:bc:42:86:6f:68:7d:ed:c3:16:ec:8d:b7:4e:
65:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BE:7C:D0:9F:FE:0E:E1:50:6F:CB:B5:54:42:1F:BD:DF:53:5B:DC
X509v3 Authority Key Identifier:
keyid:C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/Ib580J_-DuFQb8u1VEIfvd9TW9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.119.208.0/23
217.22.242.0/23
217.22.246.0/23
217.22.250.0/23
217.22.254.0/23
Signature Algorithm: sha256WithRSAEncryption
af:2f:d5:79:28:7f:76:d6:63:2f:0a:49:22:d5:12:0d:c1:46:
13:dd:d3:cf:7d:b5:7c:f2:68:e6:c7:3e:14:5d:a7:3a:a3:95:
b9:71:54:e9:58:d5:50:e2:6e:e1:e7:c1:d2:c0:b0:03:d0:80:
02:40:46:7d:fa:3c:ff:40:65:51:09:a2:c9:5c:3a:e6:ee:10:
fb:12:a0:f0:49:36:fb:43:e9:f3:1b:6a:7e:b1:bb:3a:62:71:
8d:5e:71:ee:f8:72:16:d3:47:17:88:c9:4c:2c:f9:c5:cb:86:
56:41:44:7d:b6:5b:6f:cd:96:ff:5d:70:37:e4:b5:dc:9b:d8:
79:ef:19:e7:67:71:f4:26:47:e6:20:3f:5e:dc:f6:12:7d:68:
e4:5b:59:d0:c5:aa:f4:6d:e6:5f:b4:4e:a4:33:b5:99:46:9e:
ef:ea:65:ce:ae:74:ef:18:21:6c:e8:1a:ae:b7:12:25:18:1b:
f1:3e:6e:5a:08:9c:af:92:b7:2e:4c:3c:66:5d:93:96:2a:cb:
40:ad:ca:36:00:fc:d1:8c:b8:be:cc:cc:41:a9:95:db:86:36:
90:6d:c2:3a:2c:1c:0c:bd:75:a7:f7:e7:71:ce:01:a1:2d:a8:
1a:dc:63:30:04:08:5c:b3:e0:a1:cc:76:ba:8b:90:99:92:62:
22:56:e3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:44:53 2025 by rpki-client