Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/WnOPQ0ufHKuGIGeJgpa97dMJzZI.roa
File: WnOPQ0ufHKuGIGeJgpa97dMJzZI.roa (raw, json)
Hash identifier: HZdjF63aWYiWvWoR/raQkcNq/IJsdTGCUZAkFXHzLn8=
Subject key identifier: 5A:73:8F:43:4B:9F:1C:AB:86:20:67:89:82:96:BD:ED:D3:09:CD:92
Certificate issuer: /CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Certificate serial: 01989F2209DD95450532532E4F737F5F870D
Authority key identifier: EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/WnOPQ0ufHKuGIGeJgpa97dMJzZI.roa
Signing time: Tue 12 Aug 2025 16:34:24 +0000
ROA not before: Tue 12 Aug 2025 16:34:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208024
IP address blocks: 2a07:cec0:4200::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 Aug 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:22:09:dd:95:45:05:32:53:2e:4f:73:7f:5f:87:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Validity
Not Before: Aug 12 16:34:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a738f434b9f1cab862067898296bdedd309cd92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d3:14:09:91:db:0d:ca:92:fa:81:aa:ab:b7:
7e:cc:5e:6a:fe:3b:73:10:f9:b9:4f:04:97:2e:fe:
c0:02:4b:14:4c:09:69:cf:f4:4c:54:3b:c4:64:ac:
12:84:f1:79:74:1e:82:6e:51:b2:4e:8c:04:76:3c:
a0:d5:cb:08:40:17:42:f5:d7:18:0a:bd:49:92:a7:
0b:59:7a:4d:23:f1:3b:21:44:36:64:b3:e1:c1:57:
2b:bf:5e:9a:01:85:8c:ae:1c:dc:86:1c:22:91:b4:
59:9e:93:c7:52:34:1e:67:cc:b4:5c:98:8f:7c:6d:
c5:49:d8:2f:e0:b3:13:c9:fd:12:56:4a:99:bd:df:
df:59:51:01:9a:9d:d4:d1:78:14:b4:7d:55:b0:cd:
be:c5:0c:00:2b:be:ab:4e:6e:f9:a8:b8:fe:9f:ab:
00:22:d2:8d:38:47:21:73:74:8c:b2:7a:a1:ef:15:
62:c4:13:c7:4f:fc:22:60:e7:27:c0:c3:03:a2:0f:
cf:9a:aa:91:62:b4:bb:36:96:b0:b4:d3:60:7a:16:
ac:c9:95:82:38:8d:51:9c:d7:21:28:a4:71:05:3d:
dc:63:68:e5:6e:fa:23:00:89:43:9b:f8:48:2a:04:
53:22:0f:a7:13:4e:d0:01:15:f5:47:9a:0b:cd:2e:
58:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:73:8F:43:4B:9F:1C:AB:86:20:67:89:82:96:BD:ED:D3:09:CD:92
X509v3 Authority Key Identifier:
keyid:EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/WnOPQ0ufHKuGIGeJgpa97dMJzZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:cec0:4200::/48
Signature Algorithm: sha256WithRSAEncryption
87:72:a8:45:f9:08:67:0f:76:d4:49:8d:04:fb:69:01:c5:24:
f0:86:e0:75:b0:da:66:48:93:76:0e:6c:a0:af:3f:43:7f:38:
04:f5:2a:d5:45:fd:53:6f:2e:41:32:c1:bb:00:41:fc:9c:3d:
c1:34:ee:8e:16:3d:42:58:38:62:d4:a6:b1:c4:cb:f8:f7:62:
50:94:9f:f7:a3:9f:2f:76:b7:e3:21:09:ad:02:c5:4a:24:c9:
39:3a:0f:02:78:36:fc:3f:71:63:af:2f:89:12:3d:7d:af:07:
ce:dc:cf:3d:92:a4:61:5d:f4:7c:7b:98:9e:0c:e2:c1:56:80:
af:ff:76:3d:d9:28:62:38:b2:35:3b:bf:91:ec:05:ad:a5:f6:
b3:21:06:0e:47:2d:1d:4b:d8:fe:9d:6a:c9:11:67:72:cf:0d:
ca:e5:29:55:11:1c:56:ba:41:3b:0b:4a:19:4e:43:d8:4a:00:
67:2a:74:da:59:d2:1b:90:a0:86:0b:04:52:c8:ff:16:98:78:
18:f8:4e:13:57:c2:fe:1a:01:e6:de:44:b6:54:77:01:fe:57:
96:b5:d5:ee:40:80:f4:5b:fb:06:84:d2:6e:75:26:3b:da:e9:
bf:b4:2d:0b:88:c2:4c:20:35:c2:06:86:25:2e:a1:2f:54:04:
31:15:16:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 16:03:20 2025 by rpki-client