Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Wz2w8eQionsF4RK_PtUGWqoKASM.roa
File: Wz2w8eQionsF4RK_PtUGWqoKASM.roa (raw, json)
Hash identifier: YoLacGzeZ9AHP2Sn3Y2Omo1dgPEcrwmz49lUEj4UUBc=
Subject key identifier: 5B:3D:B0:F1:E4:22:A2:7B:05:E1:12:BF:3E:D5:06:5A:AA:0A:01:23
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01982DFE6EBDA3D839982F67C0CA65B451A0
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Wz2w8eQionsF4RK_PtUGWqoKASM.roa
Signing time: Mon 21 Jul 2025 17:18:25 +0000
ROA not before: Mon 21 Jul 2025 17:18:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214168
IP address blocks: 2a12:d40::/29 maxlen: 29
2a12:8580::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2d:fe:6e:bd:a3:d8:39:98:2f:67:c0:ca:65:b4:51:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jul 21 17:18:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b3db0f1e422a27b05e112bf3ed5065aaa0a0123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:72:f8:bb:74:b6:b6:6d:19:cf:d3:9d:39:a4:
72:da:a2:df:e4:0e:ba:12:26:1e:c6:6b:a5:2e:f1:
84:81:e5:56:39:6c:e4:eb:7f:8b:ec:93:6b:6e:24:
1d:2f:b2:77:1b:1a:8f:b3:7f:a6:62:b8:de:bc:b3:
c4:11:ad:e6:39:11:17:6f:d5:c5:6b:70:48:e6:d0:
18:f7:95:62:85:bd:50:5c:73:1b:98:c7:4e:48:65:
a2:49:da:87:d6:96:26:fc:7d:dd:72:02:83:31:8a:
b7:aa:44:f0:07:23:96:de:9b:58:52:70:be:44:fb:
e4:f2:78:00:54:81:24:c5:b6:17:9e:a2:c5:b1:9f:
f6:1b:79:7a:1b:12:fc:97:08:24:5f:44:be:ea:16:
8a:66:3c:9a:e2:17:98:1a:45:01:30:5f:8f:d0:8d:
91:06:22:15:55:fd:e1:ac:59:6c:5f:25:43:e7:28:
d0:3f:14:c1:f0:01:c2:94:ff:8c:fb:72:a9:74:13:
65:5b:8b:02:37:81:9b:99:37:f5:d2:0c:db:7e:79:
e1:34:51:85:71:b0:e5:00:de:b8:5f:b7:32:c2:d5:
6b:c5:bd:f8:4c:42:cd:00:5b:bd:af:bc:a1:97:a2:
60:9e:54:2a:0c:1e:4e:e1:89:66:eb:36:18:6c:d7:
24:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3D:B0:F1:E4:22:A2:7B:05:E1:12:BF:3E:D5:06:5A:AA:0A:01:23
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Wz2w8eQionsF4RK_PtUGWqoKASM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:d40::/29
2a12:8580::/29
Signature Algorithm: sha256WithRSAEncryption
10:d4:35:b4:2e:17:7e:31:c2:8b:fe:ce:cf:22:3d:02:61:50:
f9:0e:84:84:eb:ff:52:c6:41:86:28:5d:eb:13:69:c1:44:3d:
bd:3d:2c:b1:7a:15:f3:69:31:1c:79:23:4f:09:1d:10:17:98:
c5:12:d9:a2:60:77:ca:5d:e7:07:eb:ae:04:fa:bb:79:ae:4c:
a6:97:4d:e6:50:ef:71:e1:c6:05:97:81:df:de:75:af:23:dd:
be:f3:bd:74:d8:c9:58:47:9d:b4:a6:90:39:cb:71:65:b1:22:
c9:b3:ae:60:be:b4:4a:cf:72:69:77:4a:a9:64:06:23:c0:28:
b1:9b:d7:9c:ee:be:b7:3e:8b:62:36:eb:81:cd:88:42:4b:e6:
99:d6:06:14:da:85:f7:33:6f:a5:0c:42:4b:5e:a1:fc:1d:bb:
66:59:ca:3b:f4:77:55:0f:6b:67:e9:5d:67:6b:0a:c2:bf:30:
35:d9:c9:31:04:23:90:fd:49:a8:ec:d1:53:6b:5b:59:ef:89:
9c:bb:cc:d1:8a:3e:e6:40:d1:2f:52:0a:9d:39:8c:a7:72:2e:
34:9f:28:92:12:7f:d6:16:42:b4:1d:ab:c0:24:05:c1:26:2c:
ba:62:1b:23:bf:7f:06:a8:50:34:e9:b3:f4:2b:85:29:20:dd:
ed:5b:df:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:26:17 2025 by rpki-client