Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/wXTew-TPkdjNUtvmxaEVQj6UdWw.roa
File: wXTew-TPkdjNUtvmxaEVQj6UdWw.roa (raw, json)
Hash identifier: jAc59kyNNQm0JY9/5rcxdM0o5XwY1mg3VOw5oLtisLk=
Subject key identifier: C1:74:DE:C3:E4:CF:91:D8:CD:52:DB:E6:C5:A1:15:42:3E:94:75:6C
Certificate issuer: /CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Certificate serial: 0198C3FEFBE936B4A748349EA0A3450A1310
Authority key identifier: 05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/wXTew-TPkdjNUtvmxaEVQj6UdWw.roa
Signing time: Tue 19 Aug 2025 20:22:04 +0000
ROA not before: Tue 19 Aug 2025 20:22:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206174
IP address blocks: 2a0e:8085::/32 maxlen: 32
2a0e:b1c0::/32 maxlen: 32
2a0e:ffc7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c3:fe:fb:e9:36:b4:a7:48:34:9e:a0:a3:45:0a:13:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Validity
Not Before: Aug 19 20:22:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c174dec3e4cf91d8cd52dbe6c5a115423e94756c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:32:a8:55:74:05:6d:a8:d3:d6:8a:76:74:c0:
b0:f9:1f:24:9c:3b:a1:77:59:a0:6f:42:b0:28:13:
b1:3e:ab:4c:78:d8:03:1f:7a:39:8f:eb:c9:67:0d:
22:53:53:00:5e:c0:4c:f2:f1:90:4f:cc:74:3e:13:
26:6f:ab:77:c4:47:be:95:8b:ae:5f:b5:0f:c1:30:
7e:5b:05:ae:e9:bb:4d:88:e1:d1:03:0e:46:fc:96:
5a:39:93:81:8f:d0:38:1b:22:74:9e:0c:98:66:de:
b3:65:e0:07:1d:b2:52:5a:c6:c1:9b:ce:14:9d:41:
28:c2:09:5a:f4:d2:c5:57:b1:9f:4d:71:f3:aa:ab:
64:1d:f1:97:70:77:27:33:8c:51:51:27:5b:72:c7:
10:64:a9:00:27:6a:86:dc:0c:4b:06:ba:7d:dd:c0:
b8:e3:bd:2b:55:fe:34:cd:86:26:78:ed:f8:9a:f3:
b6:12:78:1e:9d:58:2c:43:4a:1f:ab:57:3e:6b:21:
21:61:bc:2d:e2:3e:58:0a:5c:09:0f:28:1c:d7:8e:
f7:7f:c9:90:e4:54:1c:a3:1e:96:c4:87:0e:cc:33:
3b:88:ee:4d:79:a7:f2:98:b0:ee:59:94:3c:8c:55:
c6:40:8d:82:78:52:8f:5e:9b:ec:d9:22:ea:e3:b5:
37:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:74:DE:C3:E4:CF:91:D8:CD:52:DB:E6:C5:A1:15:42:3E:94:75:6C
X509v3 Authority Key Identifier:
keyid:05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/wXTew-TPkdjNUtvmxaEVQj6UdWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8085::/32
2a0e:b1c0::/32
2a0e:ffc7::/32
Signature Algorithm: sha256WithRSAEncryption
03:10:f8:39:9b:52:83:85:20:57:2b:fe:e7:a4:d8:41:eb:c7:
42:fb:52:d2:5b:a4:06:6d:97:12:99:de:94:a8:0d:f5:3e:a0:
4f:eb:01:c7:12:8d:f7:1d:2e:d0:23:2d:35:2d:84:54:69:e3:
45:f5:9e:26:dd:d4:94:64:48:b3:25:fb:ef:6d:f9:e5:7a:45:
ca:d3:86:76:b3:41:93:8d:a1:e3:b4:a1:7b:90:d3:3d:c6:fd:
83:62:57:bf:b0:fc:a3:9f:b9:7f:dd:8f:a3:37:dc:22:35:40:
64:bf:15:2f:12:2c:1e:6c:08:1c:0d:08:8c:96:3a:a9:25:94:
d0:6d:d3:e7:54:74:78:e6:e0:95:fa:1f:83:5a:87:c8:42:30:
5c:e3:d2:25:04:cb:9b:00:e9:cb:53:89:f1:6f:63:61:7d:bd:
8c:8e:28:e5:80:38:28:f1:58:17:b3:94:d3:b9:28:82:b4:ce:
48:a4:c4:b6:4c:87:6f:f0:28:bb:1f:4b:fb:ef:87:48:2e:a9:
c2:f6:e1:68:07:ab:ed:9c:44:72:f2:a6:4b:6b:ff:95:81:94:
d4:a4:cd:34:db:8d:7e:26:4b:cb:9a:a7:32:13:a3:4b:50:5d:
a2:25:cd:00:9a:cc:ad:e3:ff:00:ef:c0:2d:51:f2:83:41:91:
bd:03:68:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:02:31 2025 by rpki-client