Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ww9dfCq4QYsLVzmPCGLXJc6rmZI.roa
File: ww9dfCq4QYsLVzmPCGLXJc6rmZI.roa (raw, json)
Hash identifier: RUkNLSQ3sQD7rMFwl4nnLZPwgsqjaf2mmg9pwV/MujU=
Subject key identifier: C3:0F:5D:7C:2A:B8:41:8B:0B:57:39:8F:08:62:D7:25:CE:AB:99:92
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01994DBCB21374784B1E1A7DCE8048C4D57E
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ww9dfCq4QYsLVzmPCGLXJc6rmZI.roa
Signing time: Mon 15 Sep 2025 14:17:15 +0000
ROA not before: Mon 15 Sep 2025 14:17:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47690
IP address blocks: 81.180.205.0/24 maxlen: 24
81.181.132.0/22 maxlen: 24
81.181.174.0/24 maxlen: 24
85.120.45.0/24 maxlen: 24
85.120.185.0/24 maxlen: 24
194.153.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4d:bc:b2:13:74:78:4b:1e:1a:7d:ce:80:48:c4:d5:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Sep 15 14:17:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c30f5d7c2ab8418b0b57398f0862d725ceab9992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:42:14:2e:c1:98:a6:d3:07:f3:ea:00:6a:5d:
36:e4:cc:70:dd:0d:0a:77:31:38:17:ac:41:69:06:
8c:42:fd:d3:70:34:d5:c3:b2:4a:f2:2b:25:b5:40:
52:96:29:87:85:e7:cb:a4:6f:06:8d:e7:51:4a:69:
a8:14:a4:24:44:ef:26:ed:04:45:1c:6e:7b:7c:62:
b8:d1:3c:3c:90:41:43:ab:5a:b5:56:ee:d6:f0:61:
79:66:36:db:99:bb:42:73:af:2f:5b:4c:09:f0:17:
04:33:b8:b6:57:5d:a2:19:4d:82:33:b1:3c:6f:88:
f0:0b:0b:67:2a:48:b1:12:24:53:ca:e6:98:2b:64:
e9:19:8d:93:30:d2:91:5e:89:8e:d5:d8:70:da:f2:
a5:03:f2:c0:9b:82:c1:16:86:da:08:76:cf:0b:27:
ce:89:54:5b:04:b0:7d:6e:4c:88:a2:7f:84:e4:bb:
da:1b:9c:fa:b8:42:05:00:6f:c4:f8:8a:a5:ac:8e:
42:fc:fd:47:15:c4:c4:ec:76:76:62:8f:3b:32:fc:
fe:30:7e:1a:f5:7f:7f:db:29:94:50:7a:f1:17:b0:
8b:2a:5b:5e:ad:b8:71:33:4f:20:bd:a7:73:3b:98:
1c:10:2c:1e:cf:73:ff:4f:af:01:da:21:d4:d7:62:
53:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0F:5D:7C:2A:B8:41:8B:0B:57:39:8F:08:62:D7:25:CE:AB:99:92
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ww9dfCq4QYsLVzmPCGLXJc6rmZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.180.205.0/24
81.181.132.0/22
81.181.174.0/24
85.120.45.0/24
85.120.185.0/24
194.153.252.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:14:d1:d6:90:6e:c0:00:0b:22:bd:bf:56:af:d1:dd:b5:a5:
90:77:6c:ad:a1:c2:11:f1:94:10:09:ac:e7:37:1d:f4:b1:60:
4f:52:13:24:f8:17:5a:5f:93:f2:7a:9a:71:9a:4c:f0:ce:7e:
8b:4e:f4:13:8d:e8:d6:1b:80:61:20:18:86:8b:5e:4a:57:30:
be:3b:78:e2:5d:e9:9f:1d:4e:bc:dd:f1:9a:c1:3d:03:62:91:
16:bb:e9:e4:36:e7:a3:0f:ce:aa:7f:b8:74:d7:fd:18:5e:1a:
7b:00:a9:cd:e3:73:2d:94:26:e3:51:3e:2f:18:09:19:e4:db:
ae:ea:0c:ee:37:9d:98:94:2e:06:65:ed:93:4e:76:09:f4:6f:
72:15:66:da:bb:68:14:5e:58:eb:d8:77:c7:f2:8f:d0:b8:84:
30:f3:db:ab:e5:ab:77:bc:66:95:cd:9b:da:bc:01:fc:91:7b:
a2:79:5a:28:63:93:e7:52:ca:cc:d6:85:29:0a:24:2c:eb:db:
a1:40:bb:50:95:72:68:d7:75:09:e9:12:c8:88:2c:e7:b8:3e:
97:ff:8b:66:24:c9:8b:ed:92:b0:87:d4:76:c7:88:a6:be:fd:
f3:c1:fd:cf:0c:fb:10:29:00:26:00:64:4e:21:e0:c1:c8:5a:
89:9c:7e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:43:16 2025 by rpki-client