Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/WM6_PiLJimZu3-ntno5nf1L2TeI.roa
File: WM6_PiLJimZu3-ntno5nf1L2TeI.roa (raw, json)
Hash identifier: e9e0PlmYtdK9jnTu2i/jKOaMfxsR3gJ7UU2ch7hTNjU=
Subject key identifier: 58:CE:BF:3E:22:C9:8A:66:6E:DF:E9:ED:9E:8E:67:7F:52:F6:4D:E2
Certificate issuer: /CN=42f9a96952777f1074338303ecb65025c4e2b8b5
Certificate serial: 019A2F55CB3F97D3DC778FFB548DE1DBC918
Authority key identifier: 42:F9:A9:69:52:77:7F:10:74:33:83:03:EC:B6:50:25:C4:E2:B8:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/WM6_PiLJimZu3-ntno5nf1L2TeI.roa
Signing time: Wed 29 Oct 2025 09:39:02 +0000
ROA not before: Wed 29 Oct 2025 09:39:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206260
IP address blocks: 83.223.208.0/20 maxlen: 24
83.223.216.0/22 maxlen: 24
141.0.128.0/20 maxlen: 24
143.110.96.0/19 maxlen: 24
185.13.124.0/22 maxlen: 24
195.18.0.0/22 maxlen: 22
2a02:f300::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2f:55:cb:3f:97:d3:dc:77:8f:fb:54:8d:e1:db:c9:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f9a96952777f1074338303ecb65025c4e2b8b5
Validity
Not Before: Oct 29 09:39:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58cebf3e22c98a666edfe9ed9e8e677f52f64de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:66:7f:cc:38:08:f7:ed:1e:3d:c0:09:78:9f:
0c:04:a1:13:2c:cc:31:91:01:3b:23:02:63:ce:5d:
39:03:93:3b:92:b4:4f:ac:00:c6:b4:52:33:42:1e:
1a:df:80:a0:17:ad:32:c8:9a:38:d4:7a:9b:42:e6:
05:f6:00:2d:44:a4:d0:d2:e3:13:a9:61:68:45:c3:
b7:bf:ac:21:82:c8:5c:77:15:0d:9e:a6:a1:39:50:
3a:30:b3:18:11:9b:51:3a:83:1f:b7:b6:f3:16:3e:
ee:f9:a7:1f:87:77:04:c7:b2:7d:30:23:24:64:fa:
43:8d:02:f1:ba:d3:08:df:1a:b7:fe:58:f0:94:f7:
60:b0:df:ad:9c:5b:64:a8:b6:89:fa:62:3a:64:a6:
2b:68:37:ce:5d:c8:34:e4:a4:a5:50:d0:32:5b:30:
02:bd:d0:b3:a6:01:ad:00:d7:8e:36:d6:f5:71:f5:
ff:1e:aa:c7:1a:3a:ef:00:22:07:ed:bb:ec:44:ed:
89:9c:fb:87:a3:c7:a6:55:5e:a1:88:11:c4:98:77:
a7:bb:35:86:57:e0:e5:9e:f3:2e:bc:80:9b:75:2c:
23:26:30:9f:6f:c8:cc:52:47:41:d1:99:dc:39:8b:
9d:c6:47:93:e5:49:cf:6a:3a:cd:e0:e2:19:c3:4e:
b3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CE:BF:3E:22:C9:8A:66:6E:DF:E9:ED:9E:8E:67:7F:52:F6:4D:E2
X509v3 Authority Key Identifier:
keyid:42:F9:A9:69:52:77:7F:10:74:33:83:03:EC:B6:50:25:C4:E2:B8:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/WM6_PiLJimZu3-ntno5nf1L2TeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.223.208.0/20
141.0.128.0/20
143.110.96.0/19
185.13.124.0/22
195.18.0.0/22
IPv6:
2a02:f300::/29
Signature Algorithm: sha256WithRSAEncryption
87:9c:56:d4:ae:c3:70:55:12:62:30:e6:c2:a7:6c:7d:b8:da:
b4:46:ec:8c:3b:57:9f:67:e9:50:17:42:66:09:03:43:c5:66:
02:4c:d9:a5:8c:c2:fb:ae:23:44:04:13:de:f2:77:e3:e3:79:
b1:6e:2d:31:9c:8b:17:23:9b:f1:98:73:de:5d:84:a1:18:6c:
86:44:e7:36:b2:a6:f4:4d:80:64:3c:02:64:50:61:08:c7:0d:
09:e8:54:e4:76:9a:d5:8f:30:a3:c7:4e:8a:6e:6e:3b:77:67:
52:6b:c5:80:d8:64:a8:0e:74:6c:bf:45:11:a9:72:40:3e:3d:
58:45:e0:11:2f:82:02:38:66:ae:da:96:19:d3:88:ba:f8:83:
09:be:a6:34:c4:38:b3:d4:f7:37:96:ec:2d:c1:cb:b1:7f:45:
03:1f:80:6d:3c:10:b1:17:f9:81:36:8c:74:f2:92:d9:a0:3e:
c1:a3:69:18:24:85:d2:3e:78:1a:71:0b:3c:d0:10:40:5f:e4:
38:20:8d:94:a8:70:5d:33:fe:7a:32:5f:de:31:77:08:a3:77:
b4:87:a4:2c:3f:cb:fb:47:84:89:25:b7:ad:4f:f6:63:f8:27:
ad:f9:97:12:ae:38:e9:fa:d8:62:ca:70:93:34:fc:07:5b:d0:
96:90:67:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 05:55:02 2025 by rpki-client