Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/WppkWIxYDl7yRokwyQv6w_qkTkM.roa
File: WppkWIxYDl7yRokwyQv6w_qkTkM.roa (raw, json)
Hash identifier: pMxyfIHw8b62QMs/8crKL+TvmHlR2BI1fy3D9pIMtBI=
Subject key identifier: 5A:9A:64:58:8C:58:0E:5E:F2:46:89:30:C9:0B:FA:C3:FA:A4:4E:43
Certificate issuer: /CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Certificate serial: 0198CC65823BD3E2FF1E31B65B895B039C57
Authority key identifier: C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/WppkWIxYDl7yRokwyQv6w_qkTkM.roa
Signing time: Thu 21 Aug 2025 11:31:01 +0000
ROA not before: Thu 21 Aug 2025 11:31:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31019
IP address blocks: 185.82.184.0/23 maxlen: 23
2a05:9280::/29 maxlen: 29
2a05:9280::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cc:65:82:3b:d3:e2:ff:1e:31:b6:5b:89:5b:03:9c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Validity
Not Before: Aug 21 11:31:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a9a64588c580e5ef2468930c90bfac3faa44e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:36:2e:1b:16:59:5b:0d:45:ca:a8:6f:24:60:
7a:dc:24:21:0a:9c:ff:56:06:07:75:11:28:c8:c2:
f8:9a:a6:b3:56:3a:d0:f0:0b:43:43:51:43:b4:72:
1a:8b:8c:6e:58:31:cc:ea:88:d3:17:03:4c:0a:4b:
8e:24:73:83:c2:d5:0e:0c:69:c9:fc:e6:52:80:5a:
d0:71:0c:db:da:45:11:90:15:4f:16:70:55:81:e8:
57:8b:88:9c:61:ad:c2:29:97:b6:d9:58:5a:16:a4:
52:4c:ad:8e:4b:54:30:b5:d8:f2:bd:a1:66:a3:ef:
e0:60:5c:00:c3:7a:21:80:be:1e:78:7e:88:ee:4d:
c0:b1:e7:cd:72:cb:a4:f9:58:db:e9:c5:03:d3:38:
a5:8a:a5:88:37:62:ad:4c:e4:b5:17:42:e4:e2:c8:
a2:36:c7:a1:3c:b2:91:32:a6:81:1b:ca:06:82:41:
8b:5d:65:86:00:94:29:0e:5b:b8:d9:9f:42:da:e5:
83:e9:ee:19:6e:04:03:13:f7:66:ab:9a:04:91:68:
07:4c:3c:04:1f:e2:7f:cd:c7:62:5a:94:b2:bb:c3:
b7:24:87:fa:ec:27:75:50:60:a2:81:e4:14:3d:8d:
99:a0:bc:6c:b3:27:58:d5:ad:d3:f4:b5:5b:14:c1:
0d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9A:64:58:8C:58:0E:5E:F2:46:89:30:C9:0B:FA:C3:FA:A4:4E:43
X509v3 Authority Key Identifier:
keyid:C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/WppkWIxYDl7yRokwyQv6w_qkTkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.184.0/23
IPv6:
2a05:9280::/29
Signature Algorithm: sha256WithRSAEncryption
6e:ac:4f:d2:59:44:6b:3e:4e:23:52:bf:23:92:64:99:54:51:
8f:7f:b9:a4:20:f2:bb:5c:0e:7f:ad:f1:52:25:ce:58:69:2b:
d4:eb:d8:a4:28:cb:7c:6d:36:cc:56:55:f0:b1:d9:d9:de:ef:
80:e1:bf:a4:5a:5c:23:cb:92:11:7e:79:3d:1d:22:35:05:b0:
32:0d:fd:ad:82:b9:93:24:65:87:29:46:0a:e8:48:d7:70:49:
24:b9:1f:2c:c5:e3:74:3e:db:a4:35:36:82:04:61:bb:b9:47:
6e:86:73:0c:0a:ee:93:56:6c:10:34:96:f9:e5:76:73:d8:48:
d7:2f:d0:a7:7c:7c:49:33:39:2a:9f:95:42:d1:a1:0f:56:0c:
b5:11:cf:9f:c6:90:3b:ec:cd:03:37:ef:a3:51:6c:cc:18:27:
67:5f:15:f0:28:d1:6e:34:96:00:5c:24:af:39:96:4d:88:6d:
b4:fd:7b:0e:3c:51:62:a5:e8:71:42:ef:db:f0:3d:a3:a0:a1:
83:5b:d0:31:61:13:77:90:06:98:91:2f:96:24:23:60:30:6a:
35:0f:f9:14:e5:cd:4d:80:a9:c4:ed:5b:4c:57:43:ca:08:60:
53:00:a8:ca:80:7e:81:d7:08:46:58:fc:6e:74:ee:e0:8f:21:
08:6a:98:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:42:02 2025 by rpki-client