Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/RWWdJqy3jK-ISH3sfQC3iT5H1KQ.roa
File: RWWdJqy3jK-ISH3sfQC3iT5H1KQ.roa (raw, json)
Hash identifier: MEnMERbhTk4wCvz0VNBtZYXqswYw82sxJ5Aq4n77gig=
Subject key identifier: 45:65:9D:26:AC:B7:8C:AF:88:48:7D:EC:7D:00:B7:89:3E:47:D4:A4
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 0198A27664FFF96B03A988ADBE768397E4AC
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/RWWdJqy3jK-ISH3sfQC3iT5H1KQ.roa
Signing time: Wed 13 Aug 2025 08:05:24 +0000
ROA not before: Wed 13 Aug 2025 08:05:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401838
IP address blocks: 159.148.131.0/24 maxlen: 24
159.148.245.0/24 maxlen: 24
159.148.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a2:76:64:ff:f9:6b:03:a9:88:ad:be:76:83:97:e4:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Aug 13 08:05:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45659d26acb78caf88487dec7d00b7893e47d4a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3a:b9:15:49:33:f8:a8:19:24:2c:55:3f:7d:
95:8d:7a:db:fc:8d:35:6a:73:6f:5b:49:9e:5e:85:
cb:4e:9e:18:bf:bd:8f:32:48:98:b9:b6:c0:6c:2f:
f9:25:29:1b:d6:0e:3d:04:37:2e:3c:27:6b:2c:d7:
f6:59:80:8d:b5:37:83:65:ac:4a:2a:07:93:9a:3d:
ec:e6:43:ec:b1:aa:84:ba:5c:8b:eb:ab:07:bb:78:
f7:3a:07:c8:50:2e:68:f5:a4:e4:65:b1:f1:61:f7:
75:f3:3a:14:b1:3d:f5:bf:0b:07:2c:4e:ba:94:50:
04:fb:d0:dd:68:c5:2e:84:94:1e:c6:e6:77:c6:e2:
49:91:82:7b:63:88:d9:67:f7:92:c2:c7:32:0b:fb:
7e:c2:b6:2f:ce:fa:36:e8:7b:02:75:4b:17:99:db:
3b:6b:04:57:ee:d4:c5:c3:5a:0d:0b:e0:e3:e3:3e:
25:ca:05:d9:74:8e:1f:74:5b:9b:50:ce:25:67:75:
61:2c:b7:b5:f2:91:87:1f:65:28:c2:86:19:ca:35:
4d:3c:5f:49:e3:ad:59:7e:16:89:29:ba:70:9a:65:
66:d5:78:24:1e:a6:40:8f:c5:7c:70:d6:f7:b0:ba:
38:e6:cc:d5:69:ea:e1:50:3c:7e:e2:ff:30:e6:c0:
7e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:65:9D:26:AC:B7:8C:AF:88:48:7D:EC:7D:00:B7:89:3E:47:D4:A4
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/RWWdJqy3jK-ISH3sfQC3iT5H1KQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.131.0/24
159.148.245.0/24
159.148.255.0/24
Signature Algorithm: sha256WithRSAEncryption
23:ec:dd:28:ae:89:33:71:29:d5:26:15:4e:8f:82:8a:1c:4f:
15:5a:30:a2:fa:5d:75:c4:b0:b7:15:5d:73:1c:91:37:76:b4:
93:4a:26:ec:ce:24:c6:e4:ba:d4:df:83:4a:66:d7:7c:0d:43:
31:5d:dc:62:f7:13:0b:24:02:9c:ae:e6:2a:61:eb:c7:cd:5a:
d0:32:1a:cf:28:09:30:e0:a4:e4:fb:58:81:23:29:81:aa:1c:
1c:25:9c:98:d3:21:67:3d:91:46:b5:c3:2b:64:8c:3d:1f:0d:
0e:6d:28:de:c2:83:e2:58:56:82:a2:41:0f:50:d6:77:88:ea:
55:41:72:e6:0f:e0:b9:18:46:76:ad:ad:57:30:2a:b0:09:34:
32:94:e8:24:68:6c:dd:3e:cf:d4:4f:fa:38:aa:3a:21:99:4b:
02:71:b3:ea:48:9a:ba:dd:64:b7:7d:20:31:f3:ed:e2:f3:1e:
af:3e:db:12:c0:e0:4b:3d:9c:19:88:43:da:4c:b1:97:54:09:
76:5e:db:41:ba:0e:cc:46:f4:15:d2:0c:ed:0a:f4:04:1e:1a:
1e:6e:ee:e0:94:ab:ee:65:02:88:ac:b8:d1:81:36:60:d7:59:
2d:a0:08:e6:cc:63:6d:92:9f:1a:6e:37:4b:ea:fc:38:4a:b3:
67:aa:ec:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:37:26 2025 by rpki-client