Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/wPGbhSOTVO3W6IHlbrSy3bcGNLc.roa
File: wPGbhSOTVO3W6IHlbrSy3bcGNLc.roa (raw, json)
Hash identifier: JCi40r9Uzz4ur2p29IZ7AQpEQaCcaPWxmQf31vmLka0=
Subject key identifier: C0:F1:9B:85:23:93:54:ED:D6:E8:81:E5:6E:B4:B2:DD:B7:06:34:B7
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019913F59032DFCAD157559FF4A261C81F9B
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/wPGbhSOTVO3W6IHlbrSy3bcGNLc.roa
Signing time: Thu 04 Sep 2025 09:01:24 +0000
ROA not before: Thu 04 Sep 2025 09:01:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213529
IP address blocks: 2a0d:d940:9006::/48 maxlen: 48
2a0d:d940:900e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 18:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:13:f5:90:32:df:ca:d1:57:55:9f:f4:a2:61:c8:1f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Sep 4 09:01:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0f19b85239354edd6e881e56eb4b2ddb70634b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:14:2f:51:e0:e4:2a:8c:b6:df:9d:25:4f:14:
c5:32:8b:81:64:79:6f:52:da:b2:c2:d8:6f:70:50:
5a:85:82:70:16:71:40:5e:4f:53:09:9c:fc:db:51:
59:c0:7f:09:63:96:b0:45:20:89:76:a4:35:04:4e:
dd:f1:32:35:f8:8c:70:6d:74:27:b6:ad:7a:a6:e8:
5b:07:f9:c9:0c:e5:14:49:5b:6d:10:95:5d:bc:7d:
f3:35:df:79:62:88:18:cc:c8:ad:c6:86:d8:88:5d:
27:b1:15:1a:39:f0:c4:cc:bb:d9:58:4a:a0:60:c7:
53:e0:3e:83:f0:38:de:ea:30:c2:b9:4c:13:9f:c9:
b5:2e:56:37:d9:45:d6:72:66:09:2c:08:99:e9:99:
4e:71:97:99:7c:ec:47:e7:fc:3e:fb:27:bd:33:72:
50:55:2c:84:a7:eb:0a:9d:94:c1:29:df:ac:7b:99:
f6:91:03:1e:85:71:72:22:01:a6:27:e4:da:c8:22:
a7:1c:60:bc:94:e1:cb:db:93:bb:71:52:0f:41:a6:
25:1f:65:30:46:3b:bc:80:dc:39:94:cc:d7:d1:70:
93:f5:02:73:db:c6:12:e1:36:ae:e9:9d:7d:dc:2b:
c8:6b:4c:b9:1b:42:4f:ba:b3:20:a6:2f:28:ca:2c:
d7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F1:9B:85:23:93:54:ED:D6:E8:81:E5:6E:B4:B2:DD:B7:06:34:B7
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/wPGbhSOTVO3W6IHlbrSy3bcGNLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:9006::/48
2a0d:d940:900e::/48
Signature Algorithm: sha256WithRSAEncryption
95:ac:32:80:26:9d:b6:30:be:b6:37:79:19:2f:52:e2:72:ab:
c5:9c:c6:b3:c8:88:77:87:e5:44:1f:8f:e0:df:ce:b8:f0:d7:
9d:64:55:f0:8d:8e:94:0b:47:19:00:08:5d:78:83:19:6d:b3:
99:a1:78:bd:0c:e0:ac:a4:2f:bf:49:33:17:6e:ef:84:0c:1c:
29:b5:36:27:e2:4e:57:d9:76:0a:72:9c:27:e5:64:8f:bc:25:
a2:43:9a:e5:30:fb:87:4e:f4:a5:2a:fa:bb:7d:04:19:dd:2d:
f0:e8:00:77:01:b1:25:0e:b5:ed:8f:a6:5c:b3:e1:84:4d:f0:
19:c9:f7:4d:73:75:29:b0:3e:9a:b7:50:4f:12:f5:a7:69:72:
0b:0a:43:a9:90:60:ff:32:b5:45:58:89:90:ac:2c:ad:b5:1d:
c1:91:3c:67:a4:4e:22:f1:4e:51:70:67:4f:6b:6a:f1:72:dc:
54:b5:72:29:6d:90:a9:19:14:30:f7:8d:d8:4d:ee:ca:c2:94:
e4:c9:55:28:4a:9f:81:2e:b7:d0:54:57:52:47:ec:40:e1:06:
60:6d:25:c9:81:87:9a:3f:98:f2:29:8b:61:a8:76:c2:28:3e:
43:b3:19:f3:94:89:03:29:dc:f6:a4:78:3d:14:ca:ac:4d:ca:
29:ec:98:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 04:16:54 2025 by rpki-client