Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/g_wgb-s-Bn7AvfleNDqiZO0HYUY.roa
File: g_wgb-s-Bn7AvfleNDqiZO0HYUY.roa (raw, json)
Hash identifier: gKgbc3EAIdkKPgBXpLSPpmlWJ4IY5zZnN+q+TcMufCY=
Subject key identifier: 83:FC:20:6F:EB:3E:06:7E:C0:BD:F9:5E:34:3A:A2:64:ED:07:61:46
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019914671C10602B782AC7EFE34191BB912D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/g_wgb-s-Bn7AvfleNDqiZO0HYUY.roa
Signing time: Thu 04 Sep 2025 11:05:25 +0000
ROA not before: Thu 04 Sep 2025 11:05:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215051
IP address blocks: 2a0e:97c0:c49::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:14:67:1c:10:60:2b:78:2a:c7:ef:e3:41:91:bb:91:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 4 11:05:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83fc206feb3e067ec0bdf95e343aa264ed076146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:07:c2:a3:23:8a:5d:50:02:94:c9:e3:03:36:
27:8e:a3:98:e2:54:3a:9b:da:e8:f5:e0:19:de:a2:
93:55:17:66:68:17:b7:fc:dc:2d:c9:f2:da:ba:90:
3e:93:50:98:e2:d2:34:4b:12:12:a2:85:6d:a4:ec:
01:d9:5b:9f:ee:68:a4:7d:0e:37:98:0b:3f:8e:da:
61:71:92:49:b6:de:4e:74:9c:da:f2:94:b5:6c:eb:
0a:7b:d9:50:71:6a:3f:78:c4:8c:cc:1b:2b:f9:f9:
76:80:3f:35:d3:c9:b2:86:fa:df:21:14:f0:ab:54:
60:6b:97:1d:d6:2c:76:50:34:66:08:78:c6:77:94:
03:c2:26:8c:6b:3a:fa:11:57:da:0d:1b:fa:3e:82:
5b:24:6c:b3:b6:34:d7:84:2a:e6:23:14:99:eb:22:
67:4b:a2:23:89:57:08:4d:a8:46:aa:86:fc:17:7d:
ff:1d:4d:1c:a7:fa:fd:c1:df:e7:db:83:d8:06:75:
54:71:4c:2f:d3:8e:1f:62:93:e2:d2:b1:f1:6f:86:
f0:41:c9:df:9b:f1:ce:fa:1d:04:26:d2:cf:2a:52:
0e:73:f5:c4:c8:7c:3c:95:c2:e0:23:75:16:8b:61:
fe:c9:2a:0a:c8:55:75:26:34:51:b1:20:e1:e0:ea:
43:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:FC:20:6F:EB:3E:06:7E:C0:BD:F9:5E:34:3A:A2:64:ED:07:61:46
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/g_wgb-s-Bn7AvfleNDqiZO0HYUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:c49::/48
Signature Algorithm: sha256WithRSAEncryption
8e:3e:8c:43:a6:cf:17:d1:84:2c:a3:f8:24:e3:1b:59:b2:69:
8f:5f:01:95:a8:51:74:37:e5:8b:06:ef:6c:f6:77:18:97:cc:
c5:92:a8:b3:87:2f:69:34:03:70:11:3e:1d:5b:ac:6b:a7:e7:
c3:00:76:f8:eb:13:88:9c:79:f2:90:7a:03:c2:4a:5d:0d:cd:
dd:60:ce:e2:e7:9d:17:28:ed:e9:2c:f4:12:a8:cf:92:4e:28:
23:ad:d5:ee:b7:5f:84:23:ae:b5:96:9b:d8:59:ff:52:3e:39:
e2:26:ec:bc:3b:12:5c:18:b9:52:19:03:45:c4:4b:10:93:e7:
eb:82:5e:50:b6:fc:7d:1b:57:a5:bb:ec:60:ef:7e:ed:08:3f:
9d:e4:dd:56:88:03:75:cf:36:38:38:35:2e:72:ee:7e:0a:43:
df:8f:09:f0:ec:61:b4:3f:03:5f:54:31:00:fb:91:f0:52:a7:
88:aa:9d:2b:1b:09:57:66:b6:57:7f:38:46:05:49:86:7f:38:
8c:2e:f1:ac:40:2a:11:81:b9:ac:64:d2:c4:af:88:1f:3f:9e:
c5:35:c4:72:57:03:90:65:55:88:1e:64:9f:f8:b7:9f:d3:df:
5d:e0:4e:03:1f:a5:14:a1:71:a2:1f:50:a8:5d:1b:8c:76:c9:
ed:64:72:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 16:58:12 2025 by rpki-client