Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/wmzktH16uEfmYs7Ckc3dao51MRc.roa
File: wmzktH16uEfmYs7Ckc3dao51MRc.roa (raw, json)
Hash identifier: zS1KTekpI17HXhBWLbwC9k96nIyI57xYUz2t6mQxVEg=
Subject key identifier: C2:6C:E4:B4:7D:7A:B8:47:E6:62:CE:C2:91:CD:DD:6A:8E:75:31:17
Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial: 01992844D68908DBA9AC261CF85D5D56E83F
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/wmzktH16uEfmYs7Ckc3dao51MRc.roa
Signing time: Mon 08 Sep 2025 07:40:23 +0000
ROA not before: Mon 08 Sep 2025 07:40:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 185.1.160.0/23 maxlen: 24
2001:7f8:10f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:44:d6:89:08:db:a9:ac:26:1c:f8:5d:5d:56:e8:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Validity
Not Before: Sep 8 07:40:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c26ce4b47d7ab847e662cec291cddd6a8e753117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bb:98:3b:85:1c:29:ba:54:7c:1d:1c:4e:81:
dd:73:a4:d5:99:93:c5:80:f5:97:18:f7:67:ac:a2:
4f:12:e1:a9:3c:26:73:1c:60:7b:03:69:a6:dd:30:
dc:d4:d0:35:c0:bb:08:73:f0:4c:84:63:62:01:ef:
57:7d:d4:f3:c8:a1:1e:b7:5e:e2:5d:10:ee:1f:74:
bd:1b:5b:64:97:19:fa:2e:5e:45:71:49:5d:32:40:
84:05:b3:0a:b1:f5:ae:05:b4:72:e2:42:aa:2c:7c:
b3:b1:45:39:27:28:95:a7:6e:16:6d:9a:a3:27:29:
8e:60:7f:18:9b:ba:97:3b:72:17:ef:86:b5:c6:90:
59:f1:9c:33:df:53:fd:bb:91:a9:13:d2:60:ba:8c:
23:1f:07:40:c0:e2:69:0c:0b:43:61:15:12:bc:45:
bf:6b:91:f3:ca:6d:96:f1:20:09:12:f8:97:6a:4e:
5c:51:94:e3:df:b1:1a:f2:13:93:05:67:71:e2:82:
b8:fd:9d:52:fa:df:be:48:6f:f9:57:c7:7e:9d:60:
e1:64:e0:62:67:4b:16:ec:d8:32:1d:a4:5d:d8:24:
a9:27:e2:c7:4f:9d:cf:b5:fa:d4:a1:27:78:b7:20:
e9:e1:53:70:21:a3:10:0c:93:30:26:18:43:c1:7e:
70:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6C:E4:B4:7D:7A:B8:47:E6:62:CE:C2:91:CD:DD:6A:8E:75:31:17
X509v3 Authority Key Identifier:
keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/wmzktH16uEfmYs7Ckc3dao51MRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.160.0/23
IPv6:
2001:7f8:10f::/48
Signature Algorithm: sha256WithRSAEncryption
22:af:91:21:45:f3:a3:cd:5a:a6:55:e1:9a:32:58:e4:12:00:
12:d2:ca:96:62:62:28:a2:3a:b3:4d:cd:4c:5d:d5:16:90:25:
dd:b4:a6:84:cb:08:15:95:1a:76:d9:51:9d:6d:ed:18:ba:cd:
31:03:24:18:b7:8c:91:38:89:1e:17:60:db:e9:ed:48:75:e7:
f9:9c:c2:fc:8b:f1:87:f4:94:9b:21:cf:ea:9f:9f:7f:e5:99:
fd:2c:03:ea:05:59:91:14:a9:2a:0e:27:7c:a9:e1:f3:13:a3:
4f:90:eb:61:20:6a:43:75:1b:43:13:3b:e7:77:77:72:11:cd:
50:7b:15:f3:36:6c:77:7d:55:52:d8:a4:5f:09:65:2a:d9:2f:
87:09:16:2f:5e:5f:55:f8:49:c9:92:34:8c:1b:fb:8d:af:08:
8a:54:6e:0f:fa:c1:c1:c1:3a:f9:18:46:44:a0:56:4f:2b:9e:
66:6d:e1:19:d0:95:c3:52:a0:3f:6e:e9:81:37:da:63:06:30:
0c:84:00:f5:22:db:d1:8d:bf:8a:6c:38:64:07:8e:25:bd:6f:
a5:c6:28:cc:bd:0e:c6:3c:19:b3:1b:52:55:f3:d3:7a:21:9a:
73:af:9e:28:e2:71:fd:3c:61:c6:5e:ed:5b:fe:87:3f:32:36:
07:10:85:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 22:50:55 2025 by rpki-client