Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/Q7AnG09g2PozGdlVY_smEZGKack.roa
File: Q7AnG09g2PozGdlVY_smEZGKack.roa (raw, json)
Hash identifier: ysxiWuXWS9QlhqjWIfOMiLgYTcf9utS8lXqLWsqqxw4=
Subject key identifier: 43:B0:27:1B:4F:60:D8:FA:33:19:D9:55:63:FB:26:11:91:8A:69:C9
Certificate issuer: /CN=c28973affaa9936d39146aa136fbcb051b9af99f
Certificate serial: 019A2A665E33A5FA077F7D694B7E32A0D25A
Authority key identifier: C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/Q7AnG09g2PozGdlVY_smEZGKack.roa
Signing time: Tue 28 Oct 2025 10:39:03 +0000
ROA not before: Tue 28 Oct 2025 10:39:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 82.119.220.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:66:5e:33:a5:fa:07:7f:7d:69:4b:7e:32:a0:d2:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c28973affaa9936d39146aa136fbcb051b9af99f
Validity
Not Before: Oct 28 10:39:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43b0271b4f60d8fa3319d95563fb2611918a69c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fe:39:db:7f:bb:50:03:bf:c4:83:ca:37:56:
36:97:58:3d:72:fa:cd:a2:d8:0d:3b:e4:08:ab:d4:
73:c7:2f:b6:c3:0c:92:cf:dd:7d:a5:f2:43:9a:23:
27:ed:67:6c:25:4e:d8:cf:50:e8:9b:b7:e4:6b:f3:
5d:27:8f:ac:1e:ed:21:d8:9a:36:3d:5f:39:b6:72:
56:09:01:3b:da:68:25:01:8d:54:88:13:69:9e:32:
44:68:cb:ec:bc:18:26:23:ae:cb:45:8b:ac:f7:fd:
a8:ed:5a:1c:20:b5:63:96:3e:61:ee:ea:63:03:e3:
6d:0e:8e:2f:dd:7e:96:14:da:f0:f3:a6:17:6c:f7:
59:e6:77:41:fb:2a:f3:13:36:d6:45:61:1b:57:eb:
a4:57:6a:87:88:b7:42:7a:6e:3a:3e:2f:d9:a5:10:
6a:0b:5c:c5:bf:00:d3:5b:8e:9b:57:79:7d:70:0b:
d0:7a:64:bf:f6:38:d4:5d:2e:a9:0a:46:97:01:c7:
07:c3:36:58:74:ec:ed:b9:24:24:ec:83:2a:6e:b0:
6a:3a:71:ce:b0:0b:72:71:8b:49:68:c1:8a:4b:78:
9f:f3:01:7e:1d:e6:c5:12:7c:ef:ec:83:48:77:ce:
77:f0:62:73:75:c1:30:b0:c6:85:61:64:7a:d1:07:
d6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B0:27:1B:4F:60:D8:FA:33:19:D9:55:63:FB:26:11:91:8A:69:C9
X509v3 Authority Key Identifier:
keyid:C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/Q7AnG09g2PozGdlVY_smEZGKack.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.119.220.0/23
Signature Algorithm: sha256WithRSAEncryption
07:e5:57:c8:f0:97:8d:16:af:ec:ce:26:2d:77:63:b5:70:f1:
4a:1d:03:6f:33:ba:a1:3d:91:0a:08:6c:7e:d9:30:82:5a:18:
6b:23:e5:9f:4b:8d:8d:a6:e9:d8:4f:1b:38:79:9d:16:54:17:
1e:3f:eb:db:65:4c:0d:ba:ae:86:35:d6:05:4d:ad:ed:14:3f:
62:a8:ec:d0:3b:1f:83:11:32:46:69:b1:02:48:3f:a8:7f:5a:
c7:41:73:6f:a5:87:00:b8:ed:cb:b1:83:77:c3:df:07:48:39:
3e:54:16:bd:e1:45:fc:8f:54:d3:b8:ad:06:f3:1f:ff:e9:98:
0b:0a:fe:50:02:2e:e6:2f:18:ed:84:3c:fb:b4:16:a7:0a:bb:
46:da:e3:8f:b5:b2:01:d3:8f:51:61:4f:c1:57:76:32:7a:71:
9c:41:f0:c8:25:ce:aa:85:93:66:3d:cd:62:91:a4:a4:2b:3e:
d7:56:47:b5:7b:1c:68:b6:15:7f:92:16:b3:46:14:59:3f:27:
ca:aa:eb:16:01:e6:d3:60:d5:e1:14:f7:25:c5:98:ae:7a:59:
b6:ce:4f:d2:c7:32:b8:c1:9c:1e:70:c0:25:7c:27:95:7e:9d:
20:56:67:77:ad:76:f9:8b:ba:e0:bf:0f:29:b7:e1:2d:b3:2a:
9d:40:9a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:34:26 2025 by rpki-client