Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/wXXAD_TyqBdv5vaAj_pQz1GWWlU.roa
File: wXXAD_TyqBdv5vaAj_pQz1GWWlU.roa (raw, json)
Hash identifier: GfLTAqdfsJ+yFS4SQ6f/WdbpdvQB7dB1M6QZsmMRZ0Y=
Subject key identifier: C1:75:C0:0F:F4:F2:A8:17:6F:E6:F6:80:8F:FA:50:CF:51:96:5A:55
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 019A4FC2E1A15ACEDC4090CE0783A1ACD0EE
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/wXXAD_TyqBdv5vaAj_pQz1GWWlU.roa
Signing time: Tue 04 Nov 2025 16:46:03 +0000
ROA not before: Tue 04 Nov 2025 16:46:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204069
IP address blocks: 2a14:c380:c50::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:c2:e1:a1:5a:ce:dc:40:90:ce:07:83:a1:ac:d0:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Nov 4 16:46:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c175c00ff4f2a8176fe6f6808ffa50cf51965a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:40:5d:a0:10:11:bb:84:36:36:d5:dc:b9:a4:
80:69:1f:13:5c:9d:2a:09:86:7b:f0:91:34:f8:c4:
74:11:94:c8:9c:eb:13:c1:c5:90:5a:7a:75:85:04:
f7:1f:32:e9:c0:11:df:84:3a:24:7a:f7:5c:70:17:
a9:31:85:6d:9c:07:f5:f5:db:35:9d:81:5a:41:67:
5c:73:26:bb:43:47:4d:b4:bf:61:f7:a6:36:9e:db:
27:89:63:fb:7a:fb:a8:b8:e7:2f:7b:20:b4:3f:e2:
cb:8a:65:5d:67:52:d3:d3:bd:94:a1:a8:4e:8d:ec:
65:99:4b:9a:57:5b:62:b6:8e:8d:3b:24:2c:49:3c:
29:b8:ba:30:b4:53:9b:bb:f4:87:6d:28:c0:29:3c:
75:00:65:0f:64:ac:d1:14:54:2d:de:47:08:56:33:
2d:b6:06:a9:39:dd:16:49:11:78:4a:d6:42:6d:ff:
f5:dd:4a:e5:9d:c3:5e:8c:90:69:4c:2e:7c:f8:2c:
f8:64:58:65:6f:e2:d0:40:d6:13:49:27:cd:77:88:
98:63:93:44:49:10:d8:fc:08:61:06:6d:22:16:46:
c6:cb:5f:1b:66:3f:62:5d:89:4c:c8:bd:be:ab:35:
95:21:4d:ec:38:45:dc:18:38:2d:de:b1:31:dd:ce:
e4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:75:C0:0F:F4:F2:A8:17:6F:E6:F6:80:8F:FA:50:CF:51:96:5A:55
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/wXXAD_TyqBdv5vaAj_pQz1GWWlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:c50::/44
Signature Algorithm: sha256WithRSAEncryption
83:db:05:a0:4a:12:ae:46:ef:82:5a:9f:68:a5:5a:f6:57:a0:
d4:2f:d9:8a:d0:3c:ed:7f:5b:75:50:86:34:5c:3a:af:43:58:
3e:63:4d:3e:c2:eb:c5:65:8e:ed:b8:7b:8e:3e:b0:1f:d6:f2:
0b:30:b9:35:33:47:e9:62:f0:9d:7f:7e:3b:a8:2c:bc:a5:8c:
08:12:14:73:59:66:1a:e7:68:39:df:07:0c:7d:56:7d:78:f5:
56:e1:ab:0f:58:6e:bf:d8:85:1d:90:04:bd:ba:ed:89:f8:02:
b2:01:8e:08:41:9f:3f:db:f1:e3:e5:39:5a:87:2e:0c:43:68:
81:68:b1:1f:ae:67:54:df:95:8f:be:22:83:44:75:2a:52:f7:
85:f2:49:09:4c:c1:34:e7:69:aa:d3:7d:d9:7f:69:ca:b6:a8:
fa:08:06:c1:8a:7a:a5:c8:6c:a6:29:0a:f5:ea:e1:02:ae:27:
15:4d:58:54:2c:ab:4f:50:7e:71:db:68:c8:86:a9:5d:d5:8e:
75:8b:4c:d7:9e:87:6f:ff:66:8c:a5:b0:1e:5c:78:64:d5:06:
c9:ff:c1:43:5f:cd:1e:1f:e1:b3:1a:47:f1:d4:ac:ba:f3:16:
ef:67:ee:03:f3:81:5e:44:e7:d5:c7:23:eb:bd:e1:f8:ac:f7:
30:a2:83:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:25:49 2025 by rpki-client