Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/wIe6y-xhft1TNnBWr7Su-n2xjBo.roa
File: wIe6y-xhft1TNnBWr7Su-n2xjBo.roa (raw, json)
Hash identifier: T53OpL9cXnVFh0krC5fya+LW/c2SnhtIkuElbS+NfiM=
Subject key identifier: C0:87:BA:CB:EC:61:7E:DD:53:36:70:56:AF:B4:AE:FA:7D:B1:8C:1A
Certificate issuer: /CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
Certificate serial: 01977890B1189A45F9ABF867153F185A6C03
Authority key identifier: E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/wIe6y-xhft1TNnBWr7Su-n2xjBo.roa
Signing time: Mon 16 Jun 2025 11:47:17 +0000
ROA not before: Mon 16 Jun 2025 11:47:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12301
IP address blocks: 46.31.180.0/23 maxlen: 23
46.31.182.0/24 maxlen: 24
77.243.208.0/20 maxlen: 20
185.91.140.0/24 maxlen: 24
185.91.141.0/24 maxlen: 24
185.91.142.0/24 maxlen: 24
185.91.143.0/24 maxlen: 24
2a00:df80::/48 maxlen: 48
2a00:df80:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 20:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:90:b1:18:9a:45:f9:ab:f8:67:15:3f:18:5a:6c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
Validity
Not Before: Jun 16 11:47:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c087bacbec617edd53367056afb4aefa7db18c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7b:23:d4:42:c3:0c:2b:c2:3e:37:84:1f:d6:
84:39:6b:95:4c:92:2c:2c:33:c1:df:f9:63:21:fa:
36:0b:fc:b8:35:13:99:62:da:6c:11:4a:cc:12:08:
73:95:21:78:ba:a3:c3:45:e8:48:8d:bf:e1:11:28:
10:36:67:ee:c5:9f:27:84:c3:e1:0b:c2:a3:d6:15:
36:d4:e5:7b:45:39:7f:7e:3f:4a:19:76:f2:c6:31:
cc:10:25:eb:b4:0f:a6:0b:4c:c2:85:82:b5:61:4c:
88:8c:2b:31:c4:36:33:ef:31:db:4b:79:0c:ca:c7:
bc:b5:2a:17:d3:2b:ec:d4:95:85:8e:b1:02:8d:9f:
19:14:b0:69:25:13:0c:1a:2c:2c:12:b6:12:b7:70:
94:69:d5:e5:98:3d:cc:73:e4:b8:49:74:bf:9c:79:
90:df:de:52:93:66:9a:7f:30:ac:fe:34:e2:58:00:
3a:dc:59:92:d4:05:41:3e:78:88:d3:57:dd:b7:05:
df:66:89:4d:b0:2d:5f:dc:8f:9b:03:51:01:4b:7a:
65:87:e9:84:1f:6f:d9:f5:b7:fc:03:e6:85:2a:c7:
f0:1a:e0:75:b4:ee:8e:89:47:f0:fd:8f:26:92:2a:
22:ac:64:08:f2:8e:de:d1:e7:4a:4c:a2:73:4b:a8:
ff:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:87:BA:CB:EC:61:7E:DD:53:36:70:56:AF:B4:AE:FA:7D:B1:8C:1A
X509v3 Authority Key Identifier:
keyid:E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/wIe6y-xhft1TNnBWr7Su-n2xjBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.180.0-46.31.182.255
77.243.208.0/20
185.91.140.0/22
IPv6:
2a00:df80::/47
Signature Algorithm: sha256WithRSAEncryption
82:10:bf:dc:99:dd:79:f2:7d:10:37:1d:45:58:c7:94:c8:1c:
e8:ba:f2:38:4f:a0:45:bd:36:03:d8:f9:04:ee:85:ce:eb:52:
9b:56:d2:2f:ac:da:44:4b:83:87:d9:5b:f7:47:ad:3a:4b:bf:
c2:93:26:f8:8d:c5:c0:88:da:c8:74:52:ea:75:43:60:0f:d3:
08:66:0e:5b:f4:2e:09:99:76:5c:b0:01:fa:8b:5d:01:61:39:
4d:28:43:b8:50:27:7d:91:ec:69:85:b6:ce:1f:bb:c8:23:71:
d9:3f:a2:f8:7b:6a:35:3d:c9:6a:9c:d8:a7:96:4e:d3:04:bc:
c2:9e:36:55:21:49:97:91:75:ad:01:29:2e:ad:63:4e:0c:aa:
e1:1c:c0:94:e0:06:20:65:ea:1b:c0:76:38:31:65:ea:66:17:
30:a9:bd:27:67:f4:14:6b:03:fd:5f:19:85:04:65:62:28:66:
d5:85:44:03:ac:bb:d4:2f:bb:4b:12:da:a1:cc:3c:a4:c8:f9:
36:87:af:5c:70:07:1f:5b:ec:7a:49:df:66:3a:3b:20:c9:ff:
8b:4b:12:9e:ac:de:9a:ec:25:88:b4:38:03:39:d4:ee:65:f8:
f9:16:38:61:3e:05:16:01:f8:15:a9:0c:bb:c9:32:35:fa:a0:
26:6d:44:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:33:29 2025 by rpki-client