Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/WjcSjh6POY6LWkWYqO1bxe4QWMo.roa
File: WjcSjh6POY6LWkWYqO1bxe4QWMo.roa (raw, json)
Hash identifier: EMKQU+NBxhwDeLKKNuWDe+hRPzEsX0tK8R9e3SjV4E0=
Subject key identifier: 5A:37:12:8E:1E:8F:39:8E:8B:5A:45:98:A8:ED:5B:C5:EE:10:58:CA
Certificate issuer: /CN=6c03d22478ec86b8544dfb98addeac226f8f07e0
Certificate serial: 0199F1BF6F1F53D808B8885008CDDD04BD8E
Authority key identifier: 6C:03:D2:24:78:EC:86:B8:54:4D:FB:98:AD:DE:AC:22:6F:8F:07:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAPSJHjshrhUTfuYrd6sIm-PB-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/WjcSjh6POY6LWkWYqO1bxe4QWMo.roa
Signing time: Fri 17 Oct 2025 10:37:58 +0000
ROA not before: Fri 17 Oct 2025 10:37:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207983
IP address blocks: 2a0e:5e44::/31 maxlen: 31
2a0e:5e46::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAPSJHjshrhUTfuYrd6sIm-PB-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f1:bf:6f:1f:53:d8:08:b8:88:50:08:cd:dd:04:bd:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c03d22478ec86b8544dfb98addeac226f8f07e0
Validity
Not Before: Oct 17 10:37:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a37128e1e8f398e8b5a4598a8ed5bc5ee1058ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:dd:49:ce:85:59:57:ed:d5:ee:f2:17:16:2b:
bc:1d:3d:8d:a5:c4:af:6d:b7:f1:b3:37:14:43:69:
da:62:f1:27:b3:23:f6:c8:1e:0a:a5:bf:03:45:4e:
2d:92:9b:db:86:e5:cb:b3:65:ab:fd:f0:d0:32:dc:
4a:ea:29:9a:60:7e:0c:06:ff:a5:67:37:cf:4d:1e:
45:6e:cd:e4:c7:50:eb:e6:43:2a:e4:b5:45:da:9f:
a9:03:b8:04:a4:63:67:c9:00:d4:d9:74:6a:15:ed:
2f:83:8f:1b:23:e5:ed:7f:46:f9:f2:a8:07:a3:d7:
cc:5d:9b:b6:05:14:e7:0c:6c:eb:f4:9b:d6:21:dd:
e6:25:2d:ec:7c:00:4b:f3:fb:12:72:9b:cc:60:f7:
f9:85:c2:83:fb:24:a7:42:06:ca:ad:85:d2:0b:c8:
68:4c:75:72:e9:83:ee:9f:c3:2d:af:f8:de:36:e6:
e8:5a:bc:c5:ba:6d:7e:a8:91:68:68:02:09:44:a1:
09:0a:38:88:92:4a:71:e5:e1:49:d3:1a:e1:0c:b7:
d1:a4:8d:40:34:d0:9a:2c:cf:53:52:94:d1:81:79:
3e:a8:1a:7e:6a:7c:9c:c9:3a:36:e5:e2:2d:8b:f3:
8d:a9:d3:3a:e7:d4:91:54:7d:43:77:6c:6f:81:77:
1f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:37:12:8E:1E:8F:39:8E:8B:5A:45:98:A8:ED:5B:C5:EE:10:58:CA
X509v3 Authority Key Identifier:
keyid:6C:03:D2:24:78:EC:86:B8:54:4D:FB:98:AD:DE:AC:22:6F:8F:07:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAPSJHjshrhUTfuYrd6sIm-PB-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/WjcSjh6POY6LWkWYqO1bxe4QWMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:5e44::-2a0e:5e46:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
23:25:21:db:a5:e5:01:a6:1c:fd:5f:55:45:43:10:23:ba:03:
af:a7:8d:bf:f4:f3:c2:b6:5d:04:28:5a:75:ef:d3:bf:d0:fa:
54:4c:ec:da:94:36:51:53:25:15:64:31:4d:67:0b:32:01:3a:
01:09:fd:79:76:9a:72:14:2f:7b:d0:5c:32:fa:aa:8b:74:b1:
87:0b:09:a6:4b:29:60:11:e0:f9:f6:ac:cb:70:95:ff:79:f9:
ce:f9:11:42:74:35:b7:37:6c:63:78:07:1c:aa:b9:1e:af:7c:
7a:e9:86:b5:3f:70:e1:59:80:e1:88:13:2c:d9:1f:ed:27:23:
9b:86:f6:43:5b:3a:77:05:f2:3a:17:c2:ec:d6:54:a2:89:ec:
36:dc:fc:48:2d:d7:6f:4e:c4:e7:40:12:83:65:06:85:e4:f6:
8c:c5:d9:8d:d1:aa:52:15:fa:06:2a:2b:be:d1:59:ec:6a:36:
54:cb:68:b5:18:ab:9b:8c:17:5d:d1:26:b5:ce:88:7a:49:bf:
79:6b:b7:79:91:5a:08:f8:bf:4e:91:7b:f4:05:cf:6c:b9:07:
38:d5:a2:67:cc:fc:05:84:72:b8:04:ff:ea:bd:1d:d3:20:80:
9c:c7:16:14:4f:74:d0:e5:fc:75:58:ff:96:89:6b:b0:e0:ee:
57:ec:b4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:13:12 2025 by rpki-client