Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/WKY8IJ34Pbfhdm-TZgLrK7Wwk2E.roa
File: WKY8IJ34Pbfhdm-TZgLrK7Wwk2E.roa (raw, json)
Hash identifier: m4nX6fR1ByJGmNzYI3M0epwulBV88QVdzsVjHWx5K0w=
Subject key identifier: 58:A6:3C:20:9D:F8:3D:B7:E1:76:6F:93:66:02:EB:2B:B5:B0:93:61
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 01990AE139B4C15CE0DA6D0FB4E3FA6F7F91
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/WKY8IJ34Pbfhdm-TZgLrK7Wwk2E.roa
Signing time: Tue 02 Sep 2025 14:42:36 +0000
ROA not before: Tue 02 Sep 2025 14:42:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205886
IP address blocks: 88.80.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0a:e1:39:b4:c1:5c:e0:da:6d:0f:b4:e3:fa:6f:7f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Sep 2 14:42:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58a63c209df83db7e1766f936602eb2bb5b09361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:26:0e:a5:fe:84:a9:b4:90:41:f0:65:ed:e1:
b2:91:b0:1f:3b:c0:77:7a:be:e8:bc:f8:25:27:c8:
66:8b:e1:ae:18:96:13:fb:e2:0d:59:d8:11:a5:0e:
b3:8f:79:5b:de:70:47:d4:2b:f2:f0:52:16:55:59:
1b:20:39:88:ce:8c:56:07:c8:4a:07:d8:24:ac:14:
94:c7:b3:ab:56:cc:84:0c:55:82:f9:a5:3d:30:1c:
3c:7d:a6:38:38:97:cb:09:25:16:18:8d:9b:d2:08:
4f:d3:5f:c7:20:05:d4:2e:bc:f9:8b:63:20:ae:8b:
6a:78:4c:56:10:7c:2e:b2:7e:c3:13:2e:2e:de:f3:
b1:7e:b4:67:b3:b5:4f:7d:22:81:f7:29:cf:71:84:
a4:ae:cd:64:3f:2e:f3:bb:e3:c8:7a:c3:d4:6a:10:
ff:60:18:e4:38:eb:9a:0c:06:86:48:bf:fc:ac:17:
b7:9d:fd:d2:22:bc:ef:fd:c9:22:b5:85:8a:b2:de:
37:3b:dd:ed:9d:e2:65:6f:ba:18:36:3a:81:64:de:
d3:41:ed:94:38:a4:85:b8:ee:da:fc:de:b2:0f:20:
7d:ff:8e:69:37:68:19:ec:7f:ac:f4:f4:e6:31:b9:
4c:7a:12:a0:62:a5:4e:5d:02:bc:39:47:ae:cf:a9:
b7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A6:3C:20:9D:F8:3D:B7:E1:76:6F:93:66:02:EB:2B:B5:B0:93:61
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/WKY8IJ34Pbfhdm-TZgLrK7Wwk2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.139.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:4e:fd:35:fd:7b:24:f6:a3:88:e8:8e:c8:77:c3:97:d6:08:
38:b9:57:8f:74:e9:8b:fa:42:79:d8:7b:9e:26:f4:74:1e:17:
78:5b:3e:92:a4:9a:3d:ab:22:10:ce:8f:b8:ad:7b:98:bb:a8:
a3:da:47:e7:4d:9f:24:f0:19:8d:63:02:05:62:ad:01:f3:30:
a0:54:73:b6:ac:ed:07:a5:aa:57:26:19:22:ca:0e:2e:c9:27:
e2:39:8d:94:a7:bb:f2:9a:d6:b4:2f:ca:e0:8f:a2:04:98:f6:
f2:3d:b3:91:1f:e1:75:7f:7c:d8:f2:bf:ae:e1:5f:ef:77:71:
c4:e2:0c:e3:94:df:c3:29:53:04:f2:fa:ab:f2:b9:d8:25:71:
e2:9b:d4:46:5f:e9:0d:51:bd:f5:7c:b6:01:5e:c5:87:85:0c:
58:88:7d:69:05:51:d8:5f:f1:9b:9c:a8:1f:ea:13:36:43:97:
72:07:67:11:73:a0:27:0a:90:f0:71:78:12:d5:d4:3c:af:1b:
16:a5:9b:fd:e7:18:93:c2:41:ed:7c:47:d6:b1:b2:59:eb:97:
53:11:a6:ca:78:f2:13:b6:be:d2:19:53:e4:0d:f5:ef:8a:e9:
a5:3f:ec:78:55:16:35:c4:7f:94:c1:8b:02:a8:6d:cd:38:fb:
c7:fe:09:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:31:47 2025 by rpki-client