
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/WCk-xfRuVI_PDUs7_RW97jtHPbo.roa
File: WCk-xfRuVI_PDUs7_RW97jtHPbo.roa (raw, json)
Hash identifier: FTKPDp/dp7bSFFzQ95nQyoArI9ZwAhqlWawJed2N9pQ=
Subject key identifier: 58:29:3E:C5:F4:6E:54:8F:CF:0D:4B:3B:FD:15:BD:EE:3B:47:3D:BA
Certificate issuer: /CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
Certificate serial: 0199E1713A14C1C705761570981E3AB0E993
Authority key identifier: 2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/WCk-xfRuVI_PDUs7_RW97jtHPbo.roa
Signing time: Tue 14 Oct 2025 06:38:38 +0000
ROA not before: Tue 14 Oct 2025 06:38:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212077
IP address blocks: 193.24.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e1:71:3a:14:c1:c7:05:76:15:70:98:1e:3a:b0:e9:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
Validity
Not Before: Oct 14 06:38:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58293ec5f46e548fcf0d4b3bfd15bdee3b473dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b0:e2:87:53:85:95:1d:ee:ad:23:9d:14:8f:
b4:13:74:f9:5a:f2:21:88:bd:51:aa:68:03:1d:3b:
d5:5a:56:f6:2f:57:ca:af:e8:19:46:b4:e9:22:50:
bd:66:6c:96:3f:d3:99:b1:d5:65:ed:c3:45:94:16:
d7:57:32:6b:4e:e2:7e:c8:5c:77:c0:48:a1:2b:1e:
13:f9:c0:ea:08:bf:a3:34:f1:f2:22:25:b9:35:ca:
11:42:ee:68:21:ec:4d:a8:f5:6b:aa:9d:13:9e:d1:
b8:aa:d5:2a:09:74:5a:6f:5c:4e:42:52:62:75:73:
19:a6:9b:02:a9:2a:d6:0f:19:de:2a:c4:a2:de:31:
4c:e3:8f:6c:f7:7b:3c:5b:e8:3f:5a:77:2a:c6:f0:
60:f8:94:f4:bc:0a:5e:7b:db:b2:f7:85:3e:cd:12:
c0:3d:38:a2:56:12:20:6e:eb:b4:84:b6:34:2d:91:
c7:94:c3:ed:2d:8d:20:f4:c3:71:56:4c:79:1a:7c:
65:6d:32:e7:67:56:b2:76:48:44:0f:24:30:e8:41:
d4:4e:e3:6b:82:53:51:5f:58:ed:78:93:f3:f6:20:
16:2a:f6:f3:77:02:0b:03:3f:ff:d0:e6:ff:04:39:
3d:fe:b3:b5:04:19:97:47:fd:cb:97:68:4b:2c:ad:
6f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:29:3E:C5:F4:6E:54:8F:CF:0D:4B:3B:FD:15:BD:EE:3B:47:3D:BA
X509v3 Authority Key Identifier:
keyid:2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/WCk-xfRuVI_PDUs7_RW97jtHPbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.121.0/24
Signature Algorithm: sha256WithRSAEncryption
41:9b:14:6d:72:97:ca:39:82:ba:ed:fa:cb:5c:dc:02:d8:4b:
7c:64:3f:78:a4:da:68:67:84:8c:70:7b:5b:da:b8:43:4b:25:
91:4d:34:21:18:9e:45:7d:41:54:16:b1:44:ef:4f:6e:aa:88:
a2:ba:c1:99:cd:ba:03:dd:da:a1:eb:1a:a8:74:de:1c:13:51:
33:e0:c3:59:ba:51:20:14:4b:a6:df:7c:82:04:63:a7:0e:47:
d8:78:29:af:12:c1:5a:a0:f4:44:92:f6:7d:ea:20:0a:7e:7d:
cf:1a:b4:be:47:7d:3c:70:f7:21:ea:76:fe:90:ed:83:ac:e1:
c6:ae:40:a3:e0:12:63:cb:e0:92:b7:6c:3a:fb:6f:07:32:26:
4f:35:5f:bc:26:9d:fd:7b:a6:75:15:38:01:7f:5e:ab:ff:ee:
b4:d2:ff:a1:95:a8:c9:70:e1:9e:e1:2a:5d:8e:43:55:64:b0:
9f:f0:e8:f1:44:77:56:0e:bf:d6:22:4c:d7:49:7a:07:d1:86:
70:6f:9e:7a:ac:28:02:e0:0a:80:30:3d:8f:88:b2:da:7b:4f:
97:b5:71:05:12:3f:48:26:29:8b:fc:cd:89:4b:9a:e4:92:f9:
6d:7b:47:0a:61:1c:4f:66:2a:bd:03:60:0b:38:39:55:a9:92:
de:6a:d7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:48 2025 by rpki-client