Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/wlrDNqUnqUmmTYGmXbzC14oo_bE.roa
File: wlrDNqUnqUmmTYGmXbzC14oo_bE.roa (raw, json)
Hash identifier: l0cPMm9AaYNzGdZ4Sbd7mhVrwvyb06PQKB3ZfkcvkmY=
Subject key identifier: C2:5A:C3:36:A5:27:A9:49:A6:4D:81:A6:5D:BC:C2:D7:8A:28:FD:B1
Certificate issuer: /CN=43206c3e568db78a76cbab142e0e5bf4f682efe6
Certificate serial: 019A6990A3DC16282C23D812A96912E3DE48
Authority key identifier: 43:20:6C:3E:56:8D:B7:8A:76:CB:AB:14:2E:0E:5B:F4:F6:82:EF:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QyBsPlaNt4p2y6sULg5b9PaC7-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/wlrDNqUnqUmmTYGmXbzC14oo_bE.roa
Signing time: Sun 09 Nov 2025 17:01:18 +0000
ROA not before: Sun 09 Nov 2025 17:01:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 680
IP address blocks: 141.65.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/QyBsPlaNt4p2y6sULg5b9PaC7-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:69:90:a3:dc:16:28:2c:23:d8:12:a9:69:12:e3:de:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43206c3e568db78a76cbab142e0e5bf4f682efe6
Validity
Not Before: Nov 9 17:01:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c25ac336a527a949a64d81a65dbcc2d78a28fdb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3f:c4:cf:c8:4f:de:35:0b:09:85:f4:33:8e:
46:c4:af:b0:db:c5:73:bd:d6:23:b7:8a:f4:a9:2c:
a7:b2:a5:5c:5b:84:a3:07:f1:d0:89:aa:d1:cc:9a:
84:a6:1e:d0:81:77:96:50:f9:41:e3:a5:75:99:31:
fa:4f:19:b6:a5:04:00:02:85:e9:30:4d:8d:fd:7f:
b5:5e:4c:45:81:75:3c:7b:ce:2a:05:f9:1f:7c:76:
9f:ea:9f:34:f9:5a:0f:05:be:2b:d7:fe:39:c9:22:
d1:d9:61:e2:92:e5:26:06:80:d5:67:71:18:76:e6:
58:42:40:a2:df:e0:b0:fb:e6:06:44:cd:cb:fe:35:
69:8e:12:74:06:13:ec:1e:48:fa:76:7d:0b:6a:80:
96:91:ec:6f:07:aa:5e:6a:b7:e2:68:06:cd:0c:51:
8e:52:4e:9a:dd:0a:c0:1e:3b:bd:e6:7b:8c:39:48:
02:24:f4:d1:6b:00:7e:b0:e8:85:ec:4b:1d:f7:ed:
fb:dc:e8:3d:54:f2:14:bf:69:b4:79:7b:46:d9:a0:
37:2c:bf:ed:15:5c:67:5c:08:6f:75:a9:42:a3:0a:
a4:59:17:ad:44:5d:38:ca:d1:b9:1a:a5:75:52:68:
69:27:f8:8d:0e:5b:5a:fe:05:7c:27:d5:21:59:58:
06:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:5A:C3:36:A5:27:A9:49:A6:4D:81:A6:5D:BC:C2:D7:8A:28:FD:B1
X509v3 Authority Key Identifier:
keyid:43:20:6C:3E:56:8D:B7:8A:76:CB:AB:14:2E:0E:5B:F4:F6:82:EF:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QyBsPlaNt4p2y6sULg5b9PaC7-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/wlrDNqUnqUmmTYGmXbzC14oo_bE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.65.0.0/16
Signature Algorithm: sha256WithRSAEncryption
71:a3:49:ce:de:22:15:3e:7f:5a:f5:28:61:57:26:aa:a6:21:
81:9f:7e:0d:5f:54:39:a6:f1:fc:20:44:06:ec:a8:7d:85:79:
1f:cc:4b:61:5a:c4:2a:5d:a9:20:2f:06:f9:00:30:3f:63:45:
1e:77:df:b3:8a:be:76:5a:c7:79:f9:f4:4e:c2:f2:e0:d9:84:
a4:11:98:43:a0:f7:0a:db:9f:31:61:08:6c:ef:a2:e7:78:66:
c4:c0:0e:66:8c:29:6a:e9:36:c9:fa:7e:c3:8e:3c:f4:8a:5e:
0e:9e:8a:86:ad:ea:01:3c:b1:c8:df:ad:b1:35:11:1e:4c:f0:
e9:04:87:b5:3e:12:77:da:dc:7a:1a:26:3c:14:8a:23:e0:00:
2a:3b:df:31:4f:2e:a3:2a:99:7d:11:f0:0a:94:42:9b:59:51:
02:e0:70:17:1e:46:1e:0e:c4:85:c0:17:ec:a7:6b:97:8c:39:
84:8e:45:55:5c:ca:20:cb:ae:ba:2d:e7:6a:ba:49:09:0a:2a:
f2:6e:7d:20:99:f4:f0:45:7c:30:f4:61:e7:cd:67:d7:9a:62:
32:8d:34:49:b6:9d:40:f2:93:99:99:5a:1d:cc:51:91:7b:ca:
32:f1:75:0f:b3:74:f2:50:74:4a:00:ba:24:6d:d2:e6:d8:23:
96:ee:22:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:56:41 2025 by rpki-client