Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/WAuBnGMhuxsO8vXCsbZzoLQ3gQk.roa
File: WAuBnGMhuxsO8vXCsbZzoLQ3gQk.roa (raw, json)
Hash identifier: gADQSWZqGHhg7PtjhX8G70BBtVzMY0cZgwhnQtQ2lTY=
Subject key identifier: 58:0B:81:9C:63:21:BB:1B:0E:F2:F5:C2:B1:B6:73:A0:B4:37:81:09
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01997C0850EB5360CE3F7A7F76B7AC518410
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/WAuBnGMhuxsO8vXCsbZzoLQ3gQk.roa
Signing time: Wed 24 Sep 2025 14:02:23 +0000
ROA not before: Wed 24 Sep 2025 14:02:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207695
IP address blocks: 45.142.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 09:31:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:7c:08:50:eb:53:60:ce:3f:7a:7f:76:b7:ac:51:84:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Sep 24 14:02:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=580b819c6321bb1b0ef2f5c2b1b673a0b4378109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5b:09:57:fe:fb:e6:dd:86:15:71:0d:2b:b7:
80:8e:ba:61:cb:ac:91:98:e0:7c:c9:a6:e2:97:19:
c9:8c:7c:ae:16:d9:a7:7d:7a:85:4b:16:22:6b:9b:
78:33:a3:3d:a6:95:89:85:62:2d:f8:05:7a:7e:c8:
d6:84:eb:65:16:87:dd:d1:76:b1:1e:b9:89:ba:38:
ed:bb:8b:55:9d:4a:30:74:6c:52:5f:75:5a:e2:07:
64:de:e2:f7:3b:7d:31:24:d1:c3:f7:fc:9e:e1:67:
cc:ce:04:09:97:df:ca:b0:5b:a2:d5:8f:8c:90:57:
0c:be:10:c5:3e:d6:f9:72:2f:f0:3c:7a:4d:df:ec:
0c:8e:f3:8c:df:3b:ce:a4:96:e6:42:25:e4:6d:ff:
0d:7b:3b:d0:12:f1:00:9c:9a:79:4b:7f:61:b8:49:
8f:73:73:81:36:d8:1f:8f:82:9f:3d:8d:d1:ee:47:
98:43:2d:72:86:1d:4a:f1:0a:8a:a1:6a:a4:48:f1:
9f:b6:be:15:9f:64:0a:50:47:22:fa:5b:89:29:78:
1d:e3:d6:da:cd:a6:58:dd:62:2b:13:cc:87:ec:fb:
9b:b0:21:b7:e9:5b:1a:9c:5d:3b:1f:22:b5:57:6f:
7d:60:15:30:50:8a:49:ce:58:18:3c:8c:79:62:d3:
09:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:0B:81:9C:63:21:BB:1B:0E:F2:F5:C2:B1:B6:73:A0:B4:37:81:09
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/WAuBnGMhuxsO8vXCsbZzoLQ3gQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.106.0/24
Signature Algorithm: sha256WithRSAEncryption
17:65:c6:17:3c:ed:4a:9e:29:a1:69:97:99:3d:d1:85:52:0d:
10:6b:f1:08:87:db:30:d9:a1:14:9e:7e:a9:0a:ed:58:62:d8:
46:0e:3e:00:ef:50:68:74:f2:ca:36:96:f8:91:20:75:9e:3e:
05:df:3c:de:14:21:c6:52:27:98:a8:c1:cf:c7:d6:d3:75:fe:
46:d6:ca:19:95:c2:86:42:9e:cd:99:bb:3c:5d:57:f5:55:b4:
52:b1:66:a9:59:af:d5:e4:1c:22:43:00:eb:11:fb:56:e2:d2:
ba:f7:9f:27:21:db:52:66:23:1f:7e:e9:ad:83:c7:f5:54:8b:
f9:45:9f:1e:1b:20:a0:27:8d:02:65:13:1f:f5:4e:fd:6e:8c:
04:a0:40:ef:62:b2:3d:76:2c:d0:18:c5:96:91:9f:33:3d:eb:
fd:af:53:89:7f:e8:e5:29:74:26:a0:d2:4b:87:34:2a:ee:15:
a0:6b:29:f6:9e:c4:e8:a1:c3:42:ff:af:e9:fd:cb:fd:12:90:
14:80:47:c5:64:09:0a:31:24:8f:89:3e:ee:d4:b2:25:5e:24:
f8:dc:8d:77:5f:e1:9d:67:f7:a7:b9:2b:5d:98:3e:17:d0:7a:
ee:a1:36:0a:09:49:b7:2c:4b:02:af:db:32:cd:bc:fe:26:34:
11:92:29:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:08:53 2025 by rpki-client