Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/pWlJ1Zyagt-EAsBQLPfXMgXtTKU.roa
File: pWlJ1Zyagt-EAsBQLPfXMgXtTKU.roa (raw, json)
Hash identifier: /iFO5Q2CWXoYbsdsqiARGyGI0bzDMxUuOB7fdJEKKMw=
Subject key identifier: A5:69:49:D5:9C:9A:82:DF:84:02:C0:50:2C:F7:D7:32:05:ED:4C:A5
Certificate issuer: /CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84
Certificate serial: 019A4FC94ACF09DD74B7FDB5A7283280F31F
Authority key identifier: 33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/pWlJ1Zyagt-EAsBQLPfXMgXtTKU.roa
Signing time: Tue 04 Nov 2025 16:53:03 +0000
ROA not before: Tue 04 Nov 2025 16:53:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200665
IP address blocks: 185.135.134.0/23 maxlen: 23
185.154.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:c9:4a:cf:09:dd:74:b7:fd:b5:a7:28:32:80:f3:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84
Validity
Not Before: Nov 4 16:53:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a56949d59c9a82df8402c0502cf7d73205ed4ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:91:d4:2b:48:0f:4e:19:4d:5c:5d:7f:d9:d7:
9d:be:a4:c6:b6:c4:7d:2e:b8:00:d9:13:8d:6d:62:
be:3d:34:e2:bf:bb:eb:40:83:72:f7:cf:73:0f:99:
a4:63:9d:b6:9a:a8:40:c2:c2:94:a4:eb:6c:1b:a5:
a3:a8:cc:6a:70:c9:55:db:b1:77:c4:32:82:ef:93:
11:00:54:ed:cc:4c:01:49:94:1e:90:46:12:18:9c:
75:8e:0c:54:0c:44:ae:f3:72:8c:18:66:e1:b4:9a:
fb:41:f5:8b:03:a0:ab:15:a3:7f:48:cd:d9:50:9a:
26:6d:b0:9e:3b:48:59:46:e4:3f:60:89:cd:4e:ad:
42:e7:1e:5b:e1:44:cb:a4:5e:75:49:23:68:55:35:
76:13:51:40:ed:a4:20:5f:7e:c1:5d:86:d9:5e:41:
a9:93:6e:52:a1:b0:19:c9:7e:bf:ef:61:0d:ed:9a:
0f:39:5a:b5:67:24:f5:59:b5:cc:40:9d:47:6c:0d:
f7:e1:2c:2b:cb:3d:d6:aa:e3:4d:b5:8d:44:a0:ef:
c6:dc:d3:6f:f4:58:e3:af:b4:b5:61:5f:47:0f:48:
33:27:1f:3a:a2:b4:2b:fb:1c:4b:64:56:f9:18:3b:
31:30:18:df:9c:39:26:f5:7b:ea:81:90:5a:69:f6:
72:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:69:49:D5:9C:9A:82:DF:84:02:C0:50:2C:F7:D7:32:05:ED:4C:A5
X509v3 Authority Key Identifier:
keyid:33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/pWlJ1Zyagt-EAsBQLPfXMgXtTKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.134.0/23
185.154.16.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:12:c2:6d:f0:2d:66:01:d1:a7:d6:35:21:0e:61:b2:8e:b0:
b3:68:11:5b:f7:27:ba:ea:d2:8b:d2:0e:c6:80:e4:72:20:5a:
ae:59:08:9a:e3:bf:48:a4:fc:fe:f6:05:85:2a:f4:1a:d5:23:
b0:27:7f:70:ff:f7:4a:b3:05:d2:16:9d:d1:5b:df:ce:a9:03:
11:ce:37:72:fa:4e:a0:58:85:d9:d7:6f:f1:49:a5:6e:7b:8b:
50:12:d3:18:b7:e4:f4:45:b8:39:cf:5d:e1:ad:11:5b:61:22:
05:e8:51:5c:5e:a9:0a:71:e0:9d:a8:1a:f7:b4:f9:3e:2d:58:
e7:70:25:fd:69:02:f5:09:a2:f9:4e:82:cc:b7:1b:f7:4c:5b:
b3:b7:10:55:29:0b:88:99:8b:8c:e2:ca:d6:f3:58:a8:ad:ab:
e5:9a:56:12:13:2b:5d:94:22:93:15:38:2a:3a:2d:71:06:56:
eb:53:fc:70:24:42:72:db:8d:f8:77:67:9a:f7:23:5f:83:c0:
8b:fc:7b:85:50:e2:c5:68:c4:c3:65:11:01:41:59:e2:58:91:
96:d6:e3:6f:dd:98:12:68:81:56:d8:77:87:9f:56:1a:a6:e6:
26:64:6b:50:67:6f:63:da:6f:e2:c3:8c:ec:e5:08:05:a4:2a:
ef:6e:03:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:57:02 2025 by rpki-client