Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/W2LOXnkwWgxvGhUG_1pvs4ZQjtE.roa
File: W2LOXnkwWgxvGhUG_1pvs4ZQjtE.roa (raw, json)
Hash identifier: hyVJsdvO7Td5puNouToTZP/3+bQMF1Nu98RpgkEYhV4=
Subject key identifier: 5B:62:CE:5E:79:30:5A:0C:6F:1A:15:06:FF:5A:6F:B3:86:50:8E:D1
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01998FAC12548855A1A9EAD1C830714DF750
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/W2LOXnkwWgxvGhUG_1pvs4ZQjtE.roa
Signing time: Sun 28 Sep 2025 09:34:02 +0000
ROA not before: Sun 28 Sep 2025 09:34:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212298
IP address blocks: 45.81.20.0/24 maxlen: 24
193.105.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:8f:ac:12:54:88:55:a1:a9:ea:d1:c8:30:71:4d:f7:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Sep 28 09:34:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b62ce5e79305a0c6f1a1506ff5a6fb386508ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a5:a2:8d:3f:71:49:33:51:04:b5:2e:0d:72:
db:00:ce:65:43:18:0b:07:31:81:bf:19:8d:5d:69:
de:88:a3:bc:44:67:94:6b:ee:ed:6e:a5:02:bc:05:
dd:e3:9b:ac:24:75:6e:d5:26:09:12:a8:b1:98:57:
a4:0c:10:89:81:87:2d:dc:c4:5e:bf:f8:2f:f4:c8:
82:0d:b5:43:f1:c3:36:04:82:64:30:1f:63:a6:47:
ca:f7:e3:f8:9e:c5:06:b0:06:dd:1e:ea:83:d7:88:
ec:9e:d8:bf:c9:29:86:5e:46:9e:00:44:c5:8b:5b:
b8:cd:ca:e3:4f:f6:8d:7a:d8:97:27:42:44:25:27:
6e:e9:bc:1b:2a:7e:5e:03:d6:f3:94:e3:db:7d:ac:
41:53:9d:db:9a:e2:0f:96:6c:8b:ab:e0:53:61:e1:
6c:a5:a8:3f:c7:c3:09:3e:74:f5:9a:7b:6a:61:13:
7e:fb:7d:f4:d2:77:e6:fb:89:12:be:4c:d5:86:87:
dd:25:ea:c2:b5:0f:c1:27:e6:b9:1e:4a:53:3c:6e:
5b:6c:43:03:f3:91:7f:a9:e5:b6:9d:c6:14:e2:5a:
bc:82:c3:03:8e:20:45:a8:c4:60:62:e2:e2:d8:58:
d6:79:00:09:94:fa:3b:82:79:14:c2:0f:b7:53:c5:
6b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:62:CE:5E:79:30:5A:0C:6F:1A:15:06:FF:5A:6F:B3:86:50:8E:D1
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/W2LOXnkwWgxvGhUG_1pvs4ZQjtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.20.0/24
193.105.165.0/24
Signature Algorithm: sha256WithRSAEncryption
37:6e:06:1a:95:c9:0a:f6:83:56:ac:58:53:64:4d:47:7d:b0:
b2:f0:9f:09:75:64:e9:e1:ad:be:7d:8c:2d:fd:b4:d1:c7:9f:
ac:84:f3:5c:0b:63:33:7f:58:66:c0:c6:6a:83:a6:95:78:d2:
11:d9:60:c7:76:d4:4e:9f:a3:60:cf:9e:ff:4a:ac:b9:15:24:
e8:ea:74:70:82:08:fd:0c:23:31:47:73:03:74:5d:8b:b6:fc:
86:ce:ab:de:e0:75:eb:a6:9c:60:a8:ce:07:cf:21:5e:52:34:
48:13:e0:76:68:4a:71:66:4a:4e:74:df:ae:16:52:f1:45:4a:
37:ee:20:68:75:56:53:5f:f7:31:73:5d:7b:57:cf:ca:7f:aa:
f6:56:e1:d0:8c:4e:0d:05:63:b4:b8:e0:5c:10:f3:8c:78:95:
62:19:5d:b5:86:d0:7c:46:5d:c4:0e:d5:90:da:bd:93:d2:ca:
86:2a:46:3c:c1:79:3d:ed:00:cf:8d:d7:45:2c:76:50:bc:eb:
f1:22:a6:2f:25:78:2b:7a:1b:ee:3f:96:2e:fb:fb:b6:96:7b:
ae:1a:dc:5a:3b:f5:d3:09:b1:30:4b:b0:16:65:b7:62:5c:02:
91:ff:40:45:44:34:9e:1b:bc:f5:0b:3b:b0:68:a0:e4:03:ad:
f9:5d:5d:8e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZmPrBJUiFWhqerRyDBxTfdQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz
YjUwMzQwHhcNMjUwOTI4MDkzNDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjYyY2U1ZTc5MzA1YTBjNmYxYTE1MDZmZjVhNmZiMzg2NTA4ZWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKWijT9xSTNRBLUuDXLbAM5lQxgL
BzGBvxmNXWneiKO8RGeUa+7tbqUCvAXd45usJHVu1SYJEqixmFekDBCJgYct3MRe
v/gv9MiCDbVD8cM2BIJkMB9jpkfK9+P4nsUGsAbdHuqD14jsnti/ySmGXkaeAETF
i1u4zcrjT/aNetiXJ0JEJSdu6bwbKn5eA9bzlOPbfaxBU53bmuIPlmyLq+BTYeFs
pag/x8MJPnT1mntqYRN++3300nfm+4kSvkzVhofdJerCtQ/BJ+a5HkpTPG5bbEMD
85F/qeW2ncYU4lq8gsMDjiBFqMRgYuLi2FjWeQAJlPo7gnkUwg+3U8Vr3wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFtizl55MFoMbxoVBv9ab7OGUI7RMB8GA1UdIwQY
MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It
Mzk0YWNkMjFmMzliLzEvVzJMT1hua3dXZ3h2R2hVR18xcHZzNFpRanRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli
LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVEUAwQA
wWmlMA0GCSqGSIb3DQEBCwUAA4IBAQA3bgYalckK9oNWrFhTZE1HfbCy8J8JdWTp
4a2+fYwt/bTRx5+shPNcC2Mzf1hmwMZqg6aVeNIR2WDHdtROn6Ngz57/Sqy5FSTo
6nRwggj9DCMxR3MDdF2LtvyGzqve4HXrppxgqM4HzyFeUjRIE+B2aEpxZkpOdN+u
FlLxRUo37iBodVZTX/cxc117V8/Kf6r2VuHQjE4NBWO0uOBcEPOMeJViGV21htB8
Rl3EDtWQ2r2T0sqGKkY8wXk97QDPjddFLHZQvOvxIqYvJXgrehvuP5Yu+/u2lnuu
GtxaO/XTCbEwS7AWZbdiXAKR/0BFRDSeG7z1CzuwaKDkA635XV2O
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:22:51 2025 by rpki-client