Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/WV3wJ054DqgqOzpI_2XKdDcPomg.roa
File: WV3wJ054DqgqOzpI_2XKdDcPomg.roa (raw, json)
Hash identifier: +3uL+VLv6U5NEQYtqpD+UI1PU2Xnoxk1shVobc3zl/Y=
Subject key identifier: 59:5D:F0:27:4E:78:0E:A8:2A:3B:3A:48:FF:65:CA:74:37:0F:A2:68
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 019A6EA8A7260A7267E2401CEA98C1F23D74
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/WV3wJ054DqgqOzpI_2XKdDcPomg.roa
Signing time: Mon 10 Nov 2025 16:45:37 +0000
ROA not before: Mon 10 Nov 2025 16:45:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210187
IP address blocks: 2a0e:8f02:f079::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Nov 2025 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:6e:a8:a7:26:0a:72:67:e2:40:1c:ea:98:c1:f2:3d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Nov 10 16:45:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=595df0274e780ea82a3b3a48ff65ca74370fa268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fb:17:5b:9f:8f:19:43:1d:f7:0d:9d:3d:d8:
3c:73:5c:d5:2e:36:f0:d2:44:30:81:2a:43:ae:ca:
83:d2:19:db:d7:ae:11:2c:c6:7f:70:34:0b:25:f7:
c7:b7:04:7c:9c:6c:a0:9b:bc:b1:5a:5c:a2:8e:71:
2d:32:51:c2:61:5a:e2:80:fe:45:e8:f2:53:a2:16:
15:5d:c2:d5:67:41:a2:4e:5b:4b:ce:14:a1:84:63:
50:74:46:c4:e7:8f:93:c2:7d:1f:71:93:e6:48:62:
4b:b2:52:da:65:5f:cd:f0:0f:83:5d:29:ee:6c:35:
48:1e:64:3b:62:6d:a5:a8:a6:0b:f0:cc:a6:65:11:
51:0d:73:ac:1c:be:80:ea:49:c1:b4:52:f7:2b:63:
09:91:19:13:2e:ba:60:2c:4e:bd:4c:53:03:e8:20:
fc:41:cd:1f:1b:66:88:8d:d2:e7:a6:d8:5f:c3:07:
c6:67:05:9b:71:a8:43:76:57:c9:a7:e3:ed:a8:b6:
d0:ee:b2:a6:0c:d3:5f:1d:71:af:ec:43:48:f1:4d:
10:ea:a6:70:19:e7:86:e0:a2:27:3f:93:91:c1:9c:
44:77:25:ff:dc:fb:60:84:b6:a3:42:0f:1d:0e:53:
c4:67:d3:c8:34:cb:f3:7b:61:48:9f:85:e4:bc:29:
8a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5D:F0:27:4E:78:0E:A8:2A:3B:3A:48:FF:65:CA:74:37:0F:A2:68
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/WV3wJ054DqgqOzpI_2XKdDcPomg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f079::/48
Signature Algorithm: sha256WithRSAEncryption
8c:63:f1:76:84:85:36:4e:94:48:ec:9e:51:02:b0:82:d5:9b:
81:05:40:e3:c4:02:e7:f0:70:37:22:59:8c:7d:3c:12:0a:65:
49:99:4d:b3:20:fa:97:43:4b:fc:ea:06:6a:56:92:b1:32:11:
89:40:5c:73:64:95:83:e1:02:bd:a2:1a:a8:3b:27:13:59:21:
34:02:64:3d:20:f4:5f:5f:4e:a9:6c:06:13:a3:44:23:19:62:
d1:d3:43:87:63:45:5f:1c:48:ca:11:5d:65:2c:27:a4:70:5b:
cc:18:f1:fa:73:e7:8a:d5:03:f3:db:e2:f2:c2:46:68:00:c5:
d5:ec:21:f6:30:9c:d4:ea:dd:da:63:44:70:d3:75:5a:64:30:
8c:45:66:c7:94:a8:29:ab:9a:12:04:74:a4:9c:4f:12:a3:1d:
03:b1:8b:e0:1d:68:b5:3a:8c:e4:7e:15:62:dd:39:61:c2:0a:
5e:85:2e:f2:94:ba:c5:82:8e:1f:04:b8:44:3e:a7:2b:a3:5a:
ac:24:28:1d:2d:f9:c3:5b:ed:92:5f:90:a2:cf:c6:f0:be:c4:
1b:34:01:13:b1:ee:09:83:8a:47:fe:4a:18:57:a9:3e:c7:c9:
86:f8:26:14:df:4b:84:21:da:78:f2:96:46:40:52:89:53:1d:
39:db:02:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 15 11:52:19 2025 by rpki-client