Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/wqBO6BWlzfH_2H8niSBLpjOhxuU.roa
File: wqBO6BWlzfH_2H8niSBLpjOhxuU.roa (raw, json)
Hash identifier: 5SSaQkHwuEWAOjr3+WUmjpF1re5YywGBgiTcg/L5BcI=
Subject key identifier: C2:A0:4E:E8:15:A5:CD:F1:FF:D8:7F:27:89:20:4B:A6:33:A1:C6:E5
Certificate issuer: /CN=5da5ac3bba260538c333e6c860f236012c98675d
Certificate serial: 01989ACD54CEC174678D7E033BF0A05DD678
Authority key identifier: 5D:A5:AC:3B:BA:26:05:38:C3:33:E6:C8:60:F2:36:01:2C:98:67:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaWsO7omBTjDM-bIYPI2ASyYZ10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/wqBO6BWlzfH_2H8niSBLpjOhxuU.roa
Signing time: Mon 11 Aug 2025 20:23:24 +0000
ROA not before: Mon 11 Aug 2025 20:23:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30081
IP address blocks: 45.88.132.0/22 maxlen: 24
2a07:9a40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.mft
rsync://rpki.ripe.net/repository/DEFAULT/XaWsO7omBTjDM-bIYPI2ASyYZ10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9a:cd:54:ce:c1:74:67:8d:7e:03:3b:f0:a0:5d:d6:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da5ac3bba260538c333e6c860f236012c98675d
Validity
Not Before: Aug 11 20:23:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2a04ee815a5cdf1ffd87f2789204ba633a1c6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3f:1e:86:45:5e:30:84:ea:3d:f5:4a:45:4a:
76:7e:b8:f5:dc:79:24:15:38:76:44:b3:d1:01:de:
1d:4f:06:98:09:54:ed:94:c4:4a:49:aa:9a:2e:fe:
6f:46:7c:8e:6f:6c:d5:9f:ef:dc:dd:50:70:e8:76:
4f:71:96:33:27:05:0f:7d:06:43:e7:60:2e:59:16:
92:7c:36:bd:d9:e7:65:8a:04:5f:1d:20:35:82:8e:
df:58:42:c8:6c:df:29:ce:a3:3c:97:97:65:96:bb:
97:bd:36:d5:f6:83:ef:1f:72:75:a4:9e:9b:55:63:
47:ed:3c:01:39:20:7f:ec:b2:75:8a:39:cb:0b:b9:
cb:cd:46:00:cb:d9:27:8f:f5:c9:d2:45:1b:64:6e:
7e:7f:72:66:f1:68:44:1e:c8:a6:84:05:e5:dd:15:
7c:27:fa:56:a5:74:d7:21:83:6f:8e:d1:44:85:c2:
9f:5b:43:29:ae:8e:bf:a1:32:14:bc:fd:26:b9:73:
9c:e0:89:5c:eb:4b:1b:79:64:d5:e1:c6:dc:a4:22:
7c:7e:fc:bd:5f:33:c8:2c:f0:3a:d8:e0:b8:6e:c4:
7a:0e:cb:c1:9d:a9:23:fe:1d:8b:f1:52:6a:17:fb:
ed:74:4a:46:39:c4:0d:05:96:7a:e3:07:d9:40:88:
ce:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A0:4E:E8:15:A5:CD:F1:FF:D8:7F:27:89:20:4B:A6:33:A1:C6:E5
X509v3 Authority Key Identifier:
keyid:5D:A5:AC:3B:BA:26:05:38:C3:33:E6:C8:60:F2:36:01:2C:98:67:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaWsO7omBTjDM-bIYPI2ASyYZ10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/wqBO6BWlzfH_2H8niSBLpjOhxuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.132.0/22
IPv6:
2a07:9a40::/29
Signature Algorithm: sha256WithRSAEncryption
30:69:e9:94:05:b0:32:c1:94:a2:65:dc:55:20:53:c7:6c:b6:
ee:79:7b:8c:05:6a:8d:f5:97:5d:92:45:74:b0:5e:49:27:ee:
7d:e1:9f:40:e8:0d:25:64:1a:d7:d5:a8:79:cd:b1:35:61:26:
98:6a:a0:b8:73:8c:86:04:4e:f9:c3:c0:e7:f8:e5:4e:2e:92:
92:65:ea:af:87:06:33:36:7e:b5:61:c1:aa:43:2e:40:02:bc:
f2:a5:51:63:45:ea:e2:db:89:0c:9e:c7:f2:df:3a:db:dd:58:
1e:12:28:c5:f2:87:df:80:51:3a:d1:2e:a9:01:f9:7f:f7:d6:
4e:02:9e:82:15:66:d7:4e:70:9d:a2:1d:a8:c3:23:fc:13:43:
c1:f0:aa:7e:43:ed:15:14:e1:3c:fe:2c:e5:28:41:c4:de:cf:
b6:69:c7:4f:e7:20:89:6f:74:38:67:bf:60:eb:b4:12:b4:82:
e0:f0:da:55:17:85:e3:e8:7c:a9:1c:b1:b9:de:50:0d:0d:90:
81:45:63:99:ed:a4:3e:c1:f4:b5:56:ce:1f:f1:b2:ea:21:9d:
a9:0d:d6:88:07:e0:58:65:54:c4:3d:9b:23:9c:60:ef:b7:8e:
37:12:66:09:6f:9b:49:d5:20:55:e4:b2:0b:c7:2b:20:4c:b7:
c0:a1:d0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:16:16 2025 by rpki-client