Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/wlc5hEcuRqMaEpK6PWNM0NO0m_A.roa
File: wlc5hEcuRqMaEpK6PWNM0NO0m_A.roa (raw, json)
Hash identifier: 9bR4hDmeDetPAoZmduXgUPQ+b3hX532n5Q8Q3WDRU4o=
Subject key identifier: C2:57:39:84:47:2E:46:A3:1A:12:92:BA:3D:63:4C:D0:D3:B4:9B:F0
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 01990B842F48D8A0E30AF8D5D23CC83A5D48
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/wlc5hEcuRqMaEpK6PWNM0NO0m_A.roa
Signing time: Tue 02 Sep 2025 17:40:36 +0000
ROA not before: Tue 02 Sep 2025 17:40:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214411
IP address blocks: 2a14:72c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0b:84:2f:48:d8:a0:e3:0a:f8:d5:d2:3c:c8:3a:5d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Sep 2 17:40:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2573984472e46a31a1292ba3d634cd0d3b49bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:52:5a:f6:73:4b:cb:55:1b:89:2e:4d:7e:90:
69:15:f9:2a:a6:c3:a6:9c:30:db:de:bf:d4:93:1a:
cd:c3:ff:b4:25:09:0d:75:75:af:62:83:72:6d:35:
36:04:a9:b9:12:a8:ca:ec:f8:15:47:58:58:dc:64:
28:b6:08:4b:63:69:f3:43:82:bd:fe:24:e1:96:6f:
33:a2:df:dc:54:76:58:42:d1:95:da:bb:39:05:00:
7a:4e:7f:7c:74:61:15:97:84:b5:6f:8a:0c:6d:39:
3b:04:29:de:02:73:d0:4a:59:41:ca:b4:33:c1:1c:
0f:71:0e:6b:84:c3:06:c9:87:d7:02:18:78:59:95:
b7:ab:89:6f:8c:5c:a1:cb:35:1b:7f:29:5e:fe:3c:
d0:5d:db:b3:ee:4c:4f:25:5b:4a:27:f3:eb:9a:c3:
9f:d2:a9:ce:70:c5:7e:4d:f2:cf:24:46:52:9a:21:
42:db:f9:3d:08:c3:01:66:63:5a:09:2e:f9:64:bb:
10:9a:93:62:33:a4:73:02:50:f1:3f:72:cc:b9:0b:
56:94:60:a0:67:98:c8:55:44:d2:12:7c:71:4a:9b:
3e:25:7f:88:22:8f:7e:10:b3:c2:9e:ca:72:4e:bf:
f6:c8:33:61:5f:ca:91:bd:a2:51:3e:44:2c:c4:ca:
4b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:57:39:84:47:2E:46:A3:1A:12:92:BA:3D:63:4C:D0:D3:B4:9B:F0
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/wlc5hEcuRqMaEpK6PWNM0NO0m_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:72c0::/29
Signature Algorithm: sha256WithRSAEncryption
8c:7c:79:95:29:a9:a6:63:96:71:c8:3f:57:df:64:54:79:d4:
14:d3:39:b7:f6:e9:0f:07:00:97:07:c9:03:fd:fa:30:5a:66:
56:c1:fb:5c:85:36:4b:0c:92:78:eb:d4:58:20:3f:1b:45:50:
52:bd:e9:41:85:63:9d:8e:70:13:c1:83:0d:0f:e5:2b:2f:7f:
a5:fc:bb:a8:ad:d8:7e:d4:29:db:3a:d4:45:f0:bb:7e:39:fd:
ea:f4:98:33:eb:3d:34:f6:9c:b8:4c:cc:0a:95:e7:05:e0:75:
79:b0:5f:29:64:9d:11:ed:45:b2:56:0e:9e:d2:c5:bd:1c:57:
ce:41:c6:f1:16:7b:f7:1b:04:96:48:6f:19:a9:b0:4a:27:db:
49:7e:f6:b3:3a:ba:75:3a:94:2d:0d:17:52:4d:2a:b7:34:ae:
b0:53:de:9f:47:4b:97:20:52:f6:57:41:f5:b3:a3:ef:59:a1:
ff:10:4f:11:2e:a8:fe:c6:5c:e8:68:a0:26:4f:d7:ff:ef:b6:
1f:bb:74:54:40:44:1e:84:f0:a3:58:02:8f:09:48:63:dd:b2:
52:1d:aa:50:6e:66:4e:5d:7a:d8:3b:54:71:5c:1f:04:8f:76:
c4:b0:d4:b5:de:22:ef:ce:3c:ac:c8:7b:9d:e6:7e:8b:76:93:
ad:50:59:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 06:59:52 2025 by rpki-client