Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/WZzhEpaA95Ez0phxnjpQh59XWdg.roa
File: WZzhEpaA95Ez0phxnjpQh59XWdg.roa (raw, json)
Hash identifier: rNbkHKD1F2pmZbtIEu+jRxIqu+6kK3Eh8JznaVaKxmM=
Subject key identifier: 59:9C:E1:12:96:80:F7:91:33:D2:98:71:9E:3A:50:87:9F:57:59:D8
Certificate issuer: /CN=08e754c3a3db2ed14aa6c06a99d797291702001c
Certificate serial: 0198748DD5287F9508FAFD28656CEC6A382D
Authority key identifier: 08:E7:54:C3:A3:DB:2E:D1:4A:A6:C0:6A:99:D7:97:29:17:02:00:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/WZzhEpaA95Ez0phxnjpQh59XWdg.roa
Signing time: Mon 04 Aug 2025 10:08:28 +0000
ROA not before: Mon 04 Aug 2025 10:08:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49433
IP address blocks: 2a14:1dc0::/48 maxlen: 48
2a14:1dc0:1::/48 maxlen: 48
2a14:1dc0:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:8d:d5:28:7f:95:08:fa:fd:28:65:6c:ec:6a:38:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08e754c3a3db2ed14aa6c06a99d797291702001c
Validity
Not Before: Aug 4 10:08:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=599ce1129680f79133d298719e3a50879f5759d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bb:75:69:38:be:1b:a5:09:f5:bb:6e:a6:50:
33:8d:d3:12:61:e1:7c:08:ec:19:16:63:73:d6:33:
b5:94:e6:db:1f:fa:5b:e9:05:f2:1b:96:fd:c6:a1:
c2:4e:b1:e8:56:77:e9:a3:05:dc:47:a0:f3:1c:4f:
66:f5:4a:04:a8:61:41:fb:3f:86:e9:58:0e:ca:45:
06:4f:fd:9a:7a:b8:ea:c5:a2:94:3c:14:7d:c7:93:
ba:d5:89:45:c2:e9:06:3d:2b:ee:5b:eb:87:58:8b:
27:d0:c2:0d:14:28:60:d3:d9:00:ef:46:cb:42:fc:
ab:5f:8a:18:7a:ca:bc:b2:b2:d9:2b:51:d2:7e:32:
a0:8d:53:17:41:30:a1:ff:d7:4c:46:77:61:9a:e5:
23:de:7c:f5:9a:d3:e6:34:38:45:7f:60:e7:ea:0e:
aa:e5:b7:55:75:fd:72:fa:0e:75:32:ea:35:d6:ec:
db:02:56:18:64:cc:2a:07:ec:14:df:5e:40:de:ca:
a7:0a:41:7e:4c:20:30:bd:1b:af:24:f0:95:45:e1:
23:47:36:d7:ca:b2:5f:bf:9d:fb:1a:2a:f6:49:50:
f6:b4:2f:6a:ae:11:17:01:8c:8f:22:e9:63:52:23:
30:53:a9:97:40:6b:dc:b0:02:96:b4:2a:32:9f:01:
a1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9C:E1:12:96:80:F7:91:33:D2:98:71:9E:3A:50:87:9F:57:59:D8
X509v3 Authority Key Identifier:
keyid:08:E7:54:C3:A3:DB:2E:D1:4A:A6:C0:6A:99:D7:97:29:17:02:00:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/WZzhEpaA95Ez0phxnjpQh59XWdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1dc0::-2a14:1dc0:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
00:cb:33:46:1d:65:41:f6:5a:e7:d3:c5:70:f5:97:0d:d4:f6:
c7:53:b7:37:fe:69:15:13:8c:79:2d:de:71:81:4b:9c:e1:31:
e7:b5:f0:05:3c:a0:f9:d4:d1:ee:92:8a:e9:5d:99:01:db:eb:
53:60:bf:3f:3d:51:c2:96:e5:2a:55:1e:df:7f:35:6e:8d:25:
8f:7b:fb:4d:34:ae:0c:6f:c1:36:e3:04:5a:7a:71:3d:ea:01:
c2:7c:af:cd:0a:34:54:55:f7:31:fe:90:99:79:fe:1a:f0:d0:
bf:74:b6:9d:09:29:94:83:f3:49:75:da:24:6e:79:72:bc:cd:
e2:0c:b4:3b:17:17:47:d0:98:94:80:24:b4:2c:7c:c8:65:49:
fb:28:f5:af:a7:88:5b:f6:7c:fb:b4:28:39:a1:1b:fb:24:c0:
29:09:61:01:5d:16:d3:b3:67:ad:ec:4f:94:a2:02:ea:8c:76:
29:0c:f6:9f:a1:58:fb:48:b4:d2:84:a0:41:15:36:0c:8d:66:
b5:c9:59:ed:cc:a9:64:d2:5a:97:fb:88:cf:b1:cc:a6:d7:3a:
aa:8a:5d:d6:b9:86:e3:9a:c5:ac:90:f1:50:50:40:8a:dd:c2:
8d:85:51:4b:6b:fb:65:df:67:5f:6f:f3:77:1d:b0:b4:f2:c1:
01:38:a8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:37:33 2025 by rpki-client