Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/WA8uP_bOWezCzKXq9ZUN4orCVjw.roa
File: WA8uP_bOWezCzKXq9ZUN4orCVjw.roa (raw, json)
Hash identifier: rl53XJ9RakCyWqzOi8U9JX5WoO2P/xY4FpYY/oeCwW0=
Subject key identifier: 58:0F:2E:3F:F6:CE:59:EC:C2:CC:A5:EA:F5:95:0D:E2:8A:C2:56:3C
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 0199E8AEBD78446F11FDD77FC41927358251
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/WA8uP_bOWezCzKXq9ZUN4orCVjw.roa
Signing time: Wed 15 Oct 2025 16:23:09 +0000
ROA not before: Wed 15 Oct 2025 16:23:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63023
IP address blocks: 170.168.61.0/24 maxlen: 24
170.168.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e8:ae:bd:78:44:6f:11:fd:d7:7f:c4:19:27:35:82:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Oct 15 16:23:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=580f2e3ff6ce59ecc2cca5eaf5950de28ac2563c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e1:95:57:38:89:32:22:43:eb:bd:a7:ed:75:
5f:59:47:57:cb:14:b1:fd:95:3d:c7:29:68:80:70:
3f:31:81:c4:13:45:fc:8e:17:49:84:82:c9:4c:49:
95:8d:91:d4:5e:b9:70:5c:3e:93:33:26:f6:8e:b9:
8f:03:f7:59:cb:98:c9:97:94:b2:b0:cf:b9:71:e9:
b5:58:e3:f5:56:97:e7:10:32:3f:18:76:5a:3e:1f:
6d:87:2d:60:7d:be:71:85:a0:b0:97:e4:7d:e4:49:
be:43:33:a6:7c:7c:42:e3:d2:a6:06:bc:13:53:d2:
b0:ab:44:24:66:23:32:b4:60:cb:09:5f:c2:91:0a:
db:1d:f1:1a:11:d4:da:4c:d5:9d:55:2b:2e:21:d3:
f2:8b:c0:60:be:75:cb:6c:6e:74:05:13:fa:85:da:
5e:10:42:36:d5:2d:ba:bf:52:19:e2:85:0e:11:4e:
cf:28:19:de:55:e9:7f:77:84:ce:91:74:e6:e1:ec:
85:8f:8a:68:c9:88:df:2c:a4:4c:54:ac:b6:b3:57:
94:43:59:2c:1c:f8:0c:d9:86:8e:0e:31:90:9a:42:
ca:b5:ae:b1:00:fa:5e:eb:e6:fb:01:e1:42:36:b2:
e8:eb:a4:81:e1:e6:e2:66:5f:8b:20:88:7e:f2:76:
0c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:0F:2E:3F:F6:CE:59:EC:C2:CC:A5:EA:F5:95:0D:E2:8A:C2:56:3C
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/WA8uP_bOWezCzKXq9ZUN4orCVjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.168.61.0-170.168.62.255
Signature Algorithm: sha256WithRSAEncryption
13:fc:8a:bf:e1:38:c9:7c:c2:3b:76:b8:53:1c:f5:69:00:bc:
78:b4:f7:2d:e2:30:6c:84:28:67:b7:c3:16:f1:c9:2b:23:2a:
f5:21:f4:ce:d3:95:3a:f9:b0:4b:5f:d4:61:8e:57:29:4e:b7:
5b:7e:8c:81:78:28:81:a9:f5:2d:c6:f9:a2:48:ed:a0:64:1a:
26:b2:be:b8:68:9e:31:05:74:4e:aa:82:c6:ac:97:c0:98:b7:
bd:81:65:27:da:8c:4f:5d:20:1e:54:34:72:20:a3:91:40:6c:
84:22:18:cf:2a:ec:99:3a:75:f6:6f:53:14:b2:12:79:fa:60:
08:a3:66:80:75:69:33:05:44:58:5c:fc:2a:25:9a:3f:33:49:
6d:60:7d:ce:42:36:40:af:21:a5:bb:ee:62:1b:c2:c5:ea:8e:
eb:18:06:02:3c:47:6d:36:78:e8:50:19:3f:98:22:b2:00:8b:
ef:9f:f2:78:21:72:f9:a2:98:f6:96:94:ec:fe:30:3d:18:b2:
f4:94:96:0d:24:58:2c:a7:80:97:57:4b:ca:c8:db:74:b9:78:
ae:94:5d:ee:1e:9c:14:98:9a:9e:95:7d:fd:89:02:58:a0:73:
e0:c4:70:fd:b8:b2:00:ed:35:e5:6f:f1:31:d9:d3:d9:d3:ca:
f9:a8:59:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:49:20 2025 by rpki-client