Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/WgOigIedPI5hLOwdjTe3Z3-PVxY.roa
File: WgOigIedPI5hLOwdjTe3Z3-PVxY.roa (raw, json)
Hash identifier: QirQcFrndDfr4R4q4Jjbh18lvBI5DTpTmYIiUAARetM=
Subject key identifier: 5A:03:A2:80:87:9D:3C:8E:61:2C:EC:1D:8D:37:B7:67:7F:8F:57:16
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 019A30BE83C72677C65AB107BBBD2D4DA623
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/WgOigIedPI5hLOwdjTe3Z3-PVxY.roa
Signing time: Wed 29 Oct 2025 16:13:03 +0000
ROA not before: Wed 29 Oct 2025 16:13:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 128.0.118.0/24 maxlen: 32
185.115.206.0/24 maxlen: 32
185.146.195.0/24 maxlen: 32
185.205.68.0/24 maxlen: 32
185.207.212.0/24 maxlen: 32
194.113.164.0/24 maxlen: 32
194.113.169.0/24 maxlen: 32
194.113.170.0/24 maxlen: 32
194.113.172.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:be:83:c7:26:77:c6:5a:b1:07:bb:bd:2d:4d:a6:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Oct 29 16:13:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a03a280879d3c8e612cec1d8d37b7677f8f5716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:80:1f:f9:c0:06:91:15:64:c9:fe:30:b5:5d:
55:14:90:f3:02:bc:1e:05:ba:23:de:9e:ce:ff:07:
56:61:8f:45:42:d1:44:24:cd:80:2d:5e:ad:03:c7:
e9:e3:d5:fd:64:45:be:5d:b3:a1:41:19:dd:69:0a:
a9:59:a1:22:33:72:ad:2c:9e:8e:c3:f7:56:e8:9a:
db:76:42:19:33:d8:40:15:8c:3b:31:c3:f0:15:a3:
ae:66:72:11:09:4c:d0:97:d7:bb:dd:ad:9e:70:b7:
22:e1:ff:67:76:f1:4d:01:a1:6d:85:2c:79:ed:1c:
8c:f4:b2:f4:64:d7:b3:f6:94:84:26:81:13:60:b9:
92:b5:0a:e3:52:c1:d7:51:d2:db:0b:fc:46:ef:93:
b9:54:9d:e5:8b:35:61:04:c1:8f:2d:2f:39:38:b3:
74:3b:aa:89:2f:af:b4:15:f0:7a:43:4c:58:32:ea:
08:1d:bf:aa:59:47:d2:be:5e:46:a5:9c:ba:d2:fa:
0f:5f:c5:c0:f1:48:67:b1:d7:1c:1f:f1:4b:87:a4:
f9:be:63:d3:25:0b:b1:ec:5a:e6:71:f5:f2:9f:55:
06:7e:40:b6:29:31:47:11:67:5e:b1:52:8c:02:b9:
f7:00:7f:a1:73:ec:1d:76:c1:ea:f1:34:a9:3a:cf:
7d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:03:A2:80:87:9D:3C:8E:61:2C:EC:1D:8D:37:B7:67:7F:8F:57:16
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/WgOigIedPI5hLOwdjTe3Z3-PVxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.0.118.0/24
185.115.206.0/24
185.146.195.0/24
185.205.68.0/24
185.207.212.0/24
194.113.164.0/24
194.113.169.0-194.113.170.255
194.113.172.0/24
Signature Algorithm: sha256WithRSAEncryption
10:11:4b:da:8f:05:1f:b1:be:fe:b4:a8:1e:5f:05:77:cf:81:
0c:12:78:7c:fc:08:9c:0a:1e:9a:e6:e6:2e:78:19:8e:db:53:
80:dc:49:e3:d9:d9:e8:f9:48:2f:e3:59:4c:45:fc:c5:e7:5c:
c7:cb:80:4a:f1:d0:48:c5:f1:54:84:86:c2:35:43:45:af:9f:
7a:61:18:bd:24:78:22:a0:24:df:57:60:6f:f0:30:47:4e:d9:
c6:8b:0f:ca:e7:e0:d5:4b:41:5f:2e:b1:f2:94:5f:2a:83:c3:
0f:79:97:c2:df:29:b7:17:f7:6d:64:b3:5f:82:1c:6c:21:a1:
93:3c:06:5e:62:84:5d:90:b1:bb:fd:d9:84:43:91:55:f5:39:
f4:7c:e0:74:9e:d0:60:e5:bc:69:db:81:f0:54:6a:75:e8:67:
61:07:78:52:7e:5a:46:b3:97:db:db:13:da:fb:0e:bf:67:ee:
31:db:19:81:f1:46:0f:22:ac:70:0e:61:6a:97:82:84:ea:a2:
45:19:ea:66:ba:dc:9b:5f:c4:91:c9:49:13:88:be:30:4c:86:
be:da:e4:33:de:a5:45:5c:6b:ad:9b:24:60:76:db:79:56:40:
fe:3a:83:11:60:0b:ca:9c:5c:49:06:99:71:23:4f:5d:9a:7c:
79:8e:46:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:35:02 2025 by rpki-client