Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/WaxKXINg6Xzu68JR5Ej0coeSnt4.roa
File: WaxKXINg6Xzu68JR5Ej0coeSnt4.roa (raw, json)
Hash identifier: 8hb9mqxCqUPFStkJaBiVs6WkeU0jBGoseYjkpGSrCHQ=
Subject key identifier: 59:AC:4A:5C:83:60:E9:7C:EE:EB:C2:51:E4:48:F4:72:87:92:9E:DE
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 019A018B51C5DCA92A7B2A2ACE5C40BD1B6A
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/WaxKXINg6Xzu68JR5Ej0coeSnt4.roa
Signing time: Mon 20 Oct 2025 12:14:58 +0000
ROA not before: Mon 20 Oct 2025 12:14:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 82.206.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 21:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:8b:51:c5:dc:a9:2a:7b:2a:2a:ce:5c:40:bd:1b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Oct 20 12:14:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59ac4a5c8360e97ceeebc251e448f47287929ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e9:4d:1d:85:d0:74:17:86:69:4f:d2:6d:e9:
cb:a8:3b:35:af:4a:d5:09:7d:2c:6d:12:f7:02:68:
16:f2:2a:96:bb:e3:be:ac:9a:9c:4c:e5:fb:b8:91:
f3:79:b5:a1:01:c2:21:c9:a6:ae:7d:9e:fe:b7:9b:
58:61:74:b2:5a:b6:a6:1e:65:23:69:8b:94:97:e4:
16:cc:14:61:5e:b4:f9:e1:aa:e8:e7:04:4e:3f:24:
ff:d0:b8:f3:bc:65:89:7f:a1:90:4e:bf:19:42:25:
47:fa:c7:e9:03:98:8c:85:54:7c:f5:f6:59:c5:0b:
4d:4e:a2:20:43:d8:70:97:1c:09:77:11:05:de:b8:
16:ef:f1:a5:b4:5d:f0:c2:95:fb:13:2e:75:89:a0:
a2:98:46:36:ec:f8:f1:b0:c8:17:9d:6e:7e:db:2e:
cf:75:8e:c7:5f:2f:f0:58:77:78:3a:ab:cc:2b:9d:
d0:20:22:54:b7:ff:1d:80:9b:1d:ae:9c:61:6d:50:
06:67:84:19:4a:3e:b8:ed:5b:ad:3c:68:2a:bb:c9:
26:c4:c4:f7:f0:1d:92:8e:77:c4:22:f0:93:44:0c:
a8:f9:16:c1:a1:1c:d0:b6:a1:59:5a:98:0f:b7:2d:
42:10:21:0f:76:8a:3b:ef:4d:35:d5:54:da:29:9e:
9f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AC:4A:5C:83:60:E9:7C:EE:EB:C2:51:E4:48:F4:72:87:92:9E:DE
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/WaxKXINg6Xzu68JR5Ej0coeSnt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.80.0/24
Signature Algorithm: sha256WithRSAEncryption
61:6c:ba:30:86:bf:8c:37:45:d4:9d:84:c0:bc:da:60:45:7d:
6e:9a:8c:9d:15:ad:9a:e1:0f:b7:22:a6:db:b9:59:c5:f1:54:
f6:c9:7c:03:10:2c:ba:6e:91:22:f8:eb:a7:a4:ad:41:eb:11:
e1:e1:70:3b:a1:8c:15:9c:e3:92:2f:b1:f2:7b:60:3f:3d:1a:
30:57:f7:e4:59:99:c2:9e:e2:0a:43:a4:ce:82:da:5e:52:c4:
cc:f1:84:ac:91:a4:19:6a:00:40:f3:1e:ae:c6:27:82:1a:d8:
70:82:d6:81:7b:5b:21:63:93:c2:63:f2:f7:cf:2c:ff:dc:e6:
8d:61:a1:03:d8:13:a1:7b:c4:8f:c3:5a:0b:3e:be:c4:67:e0:
d6:c2:ef:08:e0:71:5c:f3:cb:04:70:28:bc:de:67:8c:fb:e7:
7d:93:7d:f0:b0:21:48:e2:a9:3b:b9:f0:6e:09:e3:62:eb:a0:
f4:f3:97:e8:8e:34:09:9a:b4:91:5c:7a:be:81:1d:26:78:bb:
14:7b:f7:62:e3:10:13:bd:db:98:44:6b:03:b1:f9:34:04:d8:
e7:41:18:c8:be:37:47:24:40:77:76:b2:eb:0c:bf:12:ba:e1:
48:7e:2f:b1:50:f2:eb:53:f0:d0:9c:45:98:69:4f:3e:01:2f:
e4:9f:12:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:26:41 2025 by rpki-client