Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/qvwTWo8vwE0rz_fPohNW5beAGWI.roa
File: qvwTWo8vwE0rz_fPohNW5beAGWI.roa (raw, json)
Hash identifier: PNeWcvCSbFurrdLfUjVRTH5U2J/jIYTyYfXbXNGGz5Q=
Subject key identifier: AA:FC:13:5A:8F:2F:C0:4D:2B:CF:F7:CF:A2:13:56:E5:B7:80:19:62
Certificate issuer: /CN=c28973affaa9936d39146aa136fbcb051b9af99f
Certificate serial: 019A39CE359D2F4108831880FB6F4542FF4A
Authority key identifier: C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/qvwTWo8vwE0rz_fPohNW5beAGWI.roa
Signing time: Fri 31 Oct 2025 10:26:46 +0000
ROA not before: Fri 31 Oct 2025 10:26:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 812
IP address blocks: 82.119.210.0/23 maxlen: 23
82.119.212.0/23 maxlen: 23
82.119.214.0/23 maxlen: 23
82.119.218.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:09:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:39:ce:35:9d:2f:41:08:83:18:80:fb:6f:45:42:ff:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c28973affaa9936d39146aa136fbcb051b9af99f
Validity
Not Before: Oct 31 10:26:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aafc135a8f2fc04d2bcff7cfa21356e5b7801962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fe:c6:89:64:f7:11:d0:43:3a:ba:cb:06:45:
79:4d:a7:3c:4b:a8:85:a0:27:fa:ff:77:c4:fe:8a:
02:25:3e:5f:af:b3:b9:0d:67:7e:86:63:bd:d2:de:
fd:3d:61:ae:24:de:81:da:70:fa:02:ea:7c:bb:21:
94:3c:0a:25:f2:7e:8b:54:e9:10:53:5c:de:c4:3c:
4a:18:44:a2:54:06:29:18:43:11:72:9a:dc:98:30:
dc:ce:4d:0c:9d:74:44:36:bd:19:53:30:29:27:de:
60:11:61:a2:ac:b1:7d:3c:25:3a:fd:88:d0:cd:a9:
97:30:77:09:d2:47:3a:8d:b6:75:06:99:6d:c8:02:
7f:14:25:49:2a:50:cc:65:56:e6:85:97:34:27:a2:
df:20:ef:92:ea:54:8a:fb:b1:3f:13:58:e7:53:0f:
d9:48:1c:0b:d9:8e:a9:31:3e:47:0c:3a:02:1e:36:
c7:27:df:44:09:d4:32:a4:98:60:fa:e4:17:b3:87:
ca:42:ff:af:50:42:21:77:64:52:62:da:25:a4:80:
d5:74:56:cc:53:b3:9d:45:c5:23:40:15:a6:b3:9c:
e3:b1:91:6c:6a:ed:eb:fc:cf:e1:15:6c:2c:f5:90:
fc:52:56:ca:59:c2:84:d8:7c:56:ba:05:60:b7:67:
9b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FC:13:5A:8F:2F:C0:4D:2B:CF:F7:CF:A2:13:56:E5:B7:80:19:62
X509v3 Authority Key Identifier:
keyid:C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/qvwTWo8vwE0rz_fPohNW5beAGWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.119.210.0-82.119.215.255
82.119.218.0/23
Signature Algorithm: sha256WithRSAEncryption
06:24:26:fa:59:98:19:08:e9:78:38:6a:fa:f4:84:4f:d8:88:
b2:c2:36:52:45:4b:a4:8a:48:80:73:bf:71:7f:70:fc:80:ef:
11:9c:b7:c5:63:2d:a3:d5:12:25:9a:92:ee:55:77:67:b1:b2:
63:12:a3:1b:ad:8a:14:9a:79:9f:90:48:ea:06:c3:07:83:01:
b5:e3:aa:8a:e3:af:82:2f:fb:dc:bf:50:d7:99:40:ef:76:61:
52:27:da:0e:b1:62:ae:23:c5:28:4f:0b:f8:82:35:c0:f6:eb:
9f:b3:f2:8c:5f:a2:2c:0e:0f:e3:6d:e9:bd:d5:ad:0b:fe:ab:
ef:f5:08:3c:fe:d3:55:78:01:60:85:8b:24:b2:5d:b8:4e:25:
05:96:2d:d4:22:22:8a:eb:db:31:3c:46:e6:4b:38:ce:32:4a:
62:82:72:fc:6e:9c:39:db:bf:c3:2f:3b:21:d8:b2:68:a3:5e:
2d:a7:60:c6:e3:75:bb:15:bd:3e:1e:14:ff:22:88:e0:59:a4:
6c:a7:f9:fb:b6:fe:c9:db:48:f8:6c:0d:59:1d:63:06:a9:7a:
be:8a:ec:a6:a4:11:eb:79:0d:9e:f8:5a:a1:9f:a9:07:7c:66:
a8:cb:6e:1a:55:a4:b3:ce:6b:8a:18:55:72:d9:4e:6a:1f:f6:
64:13:bf:8a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:00:57 2025 by rpki-client