Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Ww82CpK3618R5iICUhfNvUo1Yjk.roa
File: Ww82CpK3618R5iICUhfNvUo1Yjk.roa (raw, json)
Hash identifier: pxv8agggCi6pQ1v5X3T7pV4M4wFfORRt8aloR/uBbUY=
Subject key identifier: 5B:0F:36:0A:92:B7:EB:5F:11:E6:22:02:52:17:CD:BD:4A:35:62:39
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 0197ABF2739406EE94F9499DFFA02E8DF383
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Ww82CpK3618R5iICUhfNvUo1Yjk.roa
Signing time: Thu 26 Jun 2025 11:14:42 +0000
ROA not before: Thu 26 Jun 2025 11:14:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209290
IP address blocks: 45.132.49.0/24 maxlen: 24
217.119.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ab:f2:73:94:06:ee:94:f9:49:9d:ff:a0:2e:8d:f3:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jun 26 11:14:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b0f360a92b7eb5f11e622025217cdbd4a356239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0d:4a:1b:4f:17:90:b3:1a:30:4b:ac:1c:ba:
cb:0e:e3:77:49:06:de:31:13:40:2a:eb:33:61:47:
53:a7:d6:08:2b:47:0d:2e:4a:da:d9:0d:84:a9:93:
89:81:32:bd:7e:c9:30:76:32:a9:4e:ed:e9:6c:b3:
3d:71:76:b3:f0:93:88:4e:c0:54:3d:7e:6e:f2:90:
2a:9b:6c:41:a0:e4:17:2b:1f:b3:07:6b:9a:9a:04:
f8:5e:3c:c1:ef:61:a3:0c:b1:34:ab:af:93:4a:11:
9a:fa:54:24:6d:2d:65:e3:d5:f9:20:b0:6d:b7:a3:
96:9a:d7:26:43:13:de:f5:4b:0f:28:f4:c6:1d:6c:
5d:f4:a8:ca:df:26:bb:9d:4f:99:1b:42:21:30:2c:
87:4a:b6:a9:d9:c6:b2:13:09:c1:b9:22:91:a5:cd:
ff:d9:18:70:cd:01:5e:34:eb:7c:7a:3b:f1:09:b9:
ae:5a:9f:aa:b9:ac:43:8f:f8:29:e3:49:3a:74:13:
3e:3a:8a:e9:67:6f:5d:ac:48:59:83:d6:88:a0:5d:
e7:d1:5f:99:56:37:d7:fe:44:80:4a:6a:ec:85:06:
b1:68:76:41:1a:46:9b:fa:cb:66:62:1e:48:15:92:
8c:60:53:33:e9:e1:de:cf:50:3a:1d:74:fa:85:e1:
d5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0F:36:0A:92:B7:EB:5F:11:E6:22:02:52:17:CD:BD:4A:35:62:39
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Ww82CpK3618R5iICUhfNvUo1Yjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.49.0/24
217.119.139.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:d0:de:9d:6c:f6:ed:50:f9:bf:0c:80:1d:71:ad:ca:e7:c4:
76:be:80:b6:fc:bf:84:95:24:1c:78:02:c8:7b:23:0f:8e:af:
fb:a1:50:36:84:a3:76:3a:7f:78:f0:89:03:70:ca:51:86:51:
af:d3:b3:de:f5:6b:47:10:68:a2:09:ea:ca:aa:01:bd:b2:5c:
58:78:9d:9c:b2:21:28:0b:d7:dd:95:39:b1:19:7c:38:db:50:
34:82:6a:19:80:52:d4:e9:96:66:96:2e:c3:f1:90:29:da:e6:
60:dc:56:c1:e9:68:4c:8a:fd:99:8b:fe:fb:8d:47:95:7e:1f:
86:15:2f:97:d1:84:65:15:6d:4d:d7:b6:38:bd:5d:13:2c:5c:
21:c6:f3:1a:64:55:7f:4a:bf:09:e6:44:29:07:bd:44:0e:66:
6b:7e:e9:de:b0:a9:1d:cc:8d:61:8d:2a:0e:3e:8f:b0:3a:15:
2b:76:ca:5c:00:48:09:cb:55:77:63:cc:ac:f9:a4:d1:00:ab:
0d:61:84:de:08:fb:84:73:b4:13:0f:47:0d:ff:c1:47:89:10:
8f:be:e4:33:20:85:f3:45:12:c6:bb:b3:59:8e:db:7b:76:f1:
39:9f:a3:33:c0:25:1e:37:5f:c1:57:d8:5c:d0:90:0d:69:3b:
22:91:0d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:32:54 2025 by rpki-client