Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/wVPQmHUPQ_QFZzNkQ1WX5ow8hB4.roa
File: wVPQmHUPQ_QFZzNkQ1WX5ow8hB4.roa (raw, json)
Hash identifier: 7apj/8AOxeqr86iIxOnYCWyPLraO0fGiPEDqacVIVqs=
Subject key identifier: C1:53:D0:98:75:0F:43:F4:05:67:33:64:43:55:97:E6:8C:3C:84:1E
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 0198611A487F3FD2A66F79C16DF00698449B
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/wVPQmHUPQ_QFZzNkQ1WX5ow8hB4.roa
Signing time: Thu 31 Jul 2025 15:29:28 +0000
ROA not before: Thu 31 Jul 2025 15:29:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215158
IP address blocks: 170.168.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:61:1a:48:7f:3f:d2:a6:6f:79:c1:6d:f0:06:98:44:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Jul 31 15:29:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c153d098750f43f405673364435597e68c3c841e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2f:77:bf:d6:15:b8:26:85:49:ba:d8:6d:de:
7e:ac:c0:b9:07:de:51:c5:c1:8f:1a:e3:53:8a:6a:
25:e1:c1:64:0a:8a:bb:9f:1f:94:7b:a4:b9:79:73:
56:76:e8:05:1f:32:d0:ce:0b:25:88:2e:97:dd:7c:
22:c3:f7:f1:f0:cf:e7:e3:e5:f5:d6:f1:c8:a5:54:
2a:51:f8:6a:16:6f:86:8c:0d:e0:5a:59:dd:dd:67:
99:9a:0d:56:4f:c6:2a:24:a0:83:64:47:c9:17:da:
6c:d5:90:18:ff:b4:7f:95:c4:5a:6d:8f:13:23:a1:
9c:1a:4b:cd:ca:7a:53:f1:bc:f4:41:81:95:62:88:
88:cc:e1:48:40:cf:0a:c8:ef:24:2b:84:cf:f8:80:
b8:9c:1d:2e:62:5d:8f:43:aa:2d:c2:d1:62:cf:1d:
f9:59:f3:77:2c:c2:f8:6b:00:ef:82:ce:77:98:f1:
cf:3a:a0:e1:f6:c7:e0:22:89:bd:ad:b5:e2:18:ce:
1c:c9:29:22:2b:00:39:20:f8:d0:2c:93:80:28:b4:
ff:72:36:7b:07:55:09:36:44:9e:5d:46:4b:b5:d3:
c9:17:59:05:6c:2b:01:27:3d:a2:74:6a:e5:94:25:
d6:50:32:cc:2b:dd:9d:bb:e7:38:59:ab:25:b2:bd:
c6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:53:D0:98:75:0F:43:F4:05:67:33:64:43:55:97:E6:8C:3C:84:1E
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/wVPQmHUPQ_QFZzNkQ1WX5ow8hB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.168.27.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:75:fa:91:b5:f8:c2:ad:2d:17:5f:99:0a:df:19:bd:d3:59:
8a:78:90:5d:66:c7:e7:a0:b4:10:9f:0f:e3:63:80:b1:e7:4d:
8c:39:2c:d2:3c:d1:77:d0:eb:35:c4:9a:29:ff:a1:5c:3e:39:
0b:41:47:0d:08:4e:4a:ff:b7:5e:7e:fc:6e:74:cd:1b:d0:0d:
19:23:90:7a:05:d1:75:5d:8b:47:6c:34:4a:d8:a5:a5:c8:ee:
83:13:87:f9:cb:41:23:d5:b3:09:58:fb:a1:be:4a:2e:dc:c6:
18:0b:ce:b0:45:13:44:ce:c2:eb:68:36:82:95:b3:6a:03:82:
bd:62:a3:82:f0:1c:37:62:9d:9e:c1:a9:90:ef:a4:dd:a3:fd:
6a:73:50:fa:e0:6a:58:e2:02:a7:05:78:92:10:26:e0:e7:60:
75:d1:98:13:2f:52:1b:55:b7:30:ef:31:79:c9:ec:01:b9:ba:
bb:a9:c7:59:86:ae:7a:63:57:86:0b:21:b9:0a:c3:5e:0e:21:
d4:f4:05:90:7b:82:cc:81:45:aa:c8:ef:01:f2:fd:6c:c0:e9:
03:24:dd:93:b7:55:9a:95:08:01:be:a3:db:86:e1:31:32:6a:
57:d3:d8:fe:56:1e:82:1e:25:22:9f:d5:a4:fd:de:a3:e0:18:
c3:5b:9a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:31:36 2025 by rpki-client