Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/fwGs4NKWy2qwwFHvzAhS_0HSwWc.roa
File: fwGs4NKWy2qwwFHvzAhS_0HSwWc.roa (raw, json)
Hash identifier: xpyUK/0mWO28W5ZFHD9SD69xhudYUF35PPRLXFMXs6I=
Subject key identifier: 7F:01:AC:E0:D2:96:CB:6A:B0:C0:51:EF:CC:08:52:FF:41:D2:C1:67
Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial: 0198B67A49E85465BB62FE6B03AF6B5E3FE3
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/fwGs4NKWy2qwwFHvzAhS_0HSwWc.roa
Signing time: Sun 17 Aug 2025 05:22:04 +0000
ROA not before: Sun 17 Aug 2025 05:22:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 45.78.90.0/23 maxlen: 24
45.78.92.0/22 maxlen: 24
62.3.6.0/24 maxlen: 24
91.216.138.0/24 maxlen: 24
91.229.228.0/24 maxlen: 24
93.180.208.0/22 maxlen: 24
94.139.40.0/21 maxlen: 32
119.13.224.0/20 maxlen: 20
134.199.64.0/19 maxlen: 32
136.227.160.0/19 maxlen: 32
146.19.100.0/24 maxlen: 24
193.37.136.0/24 maxlen: 24
193.105.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:b6:7a:49:e8:54:65:bb:62:fe:6b:03:af:6b:5e:3f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
Validity
Not Before: Aug 17 05:22:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f01ace0d296cb6ab0c051efcc0852ff41d2c167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:15:2f:8a:d6:29:35:f6:73:12:a4:fb:33:c6:
ee:96:c6:bf:f0:e9:a2:c8:f5:70:8a:6e:48:3e:29:
07:e3:26:8b:2d:9e:e0:23:c9:59:25:0b:92:ec:cb:
92:14:f2:86:b8:1e:58:5b:c3:0d:ad:48:9f:d8:77:
d9:0a:cd:4e:1a:01:49:c1:b3:b9:1e:6a:40:ee:34:
3b:fd:cd:39:9b:e3:30:80:19:8f:55:33:4b:84:ae:
43:61:9f:79:18:71:d6:c8:e8:61:cf:52:9a:c1:55:
18:05:69:8b:8d:ea:8c:56:da:8a:51:af:4f:82:bc:
88:16:53:c0:66:19:a8:6c:05:18:68:7f:63:2d:3b:
57:c9:a8:04:f2:90:a5:39:ce:3d:7a:fb:cd:a8:48:
37:36:e6:2a:8f:39:9a:66:d5:a9:2e:16:6d:88:c7:
73:32:c1:2f:63:c8:de:02:5e:2d:6f:7f:04:3c:c1:
2b:c8:bf:a4:d2:35:cc:28:0f:a3:28:91:c2:8e:ae:
a4:7d:2b:99:26:18:75:c7:e5:23:c7:f2:f8:0c:bf:
98:a8:e9:74:4c:13:a0:1f:d0:bb:5f:b1:3c:6c:79:
9d:27:a7:70:77:da:da:24:96:dc:37:e8:16:dd:db:
fb:87:6f:fc:3a:12:34:87:43:c5:56:db:64:ca:24:
13:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:01:AC:E0:D2:96:CB:6A:B0:C0:51:EF:CC:08:52:FF:41:D2:C1:67
X509v3 Authority Key Identifier:
keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/fwGs4NKWy2qwwFHvzAhS_0HSwWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.78.90.0-45.78.95.255
62.3.6.0/24
91.216.138.0/24
91.229.228.0/24
93.180.208.0/22
94.139.40.0/21
119.13.224.0/20
134.199.64.0/19
136.227.160.0/19
146.19.100.0/24
193.37.136.0/24
193.105.176.0/24
Signature Algorithm: sha256WithRSAEncryption
47:39:f0:dc:72:3b:2d:cb:eb:4f:37:12:11:b5:42:9f:56:78:
52:19:74:0b:11:ae:5f:8d:26:f8:28:3c:c9:6f:d9:b0:96:7c:
02:d8:d2:bf:74:38:89:60:39:64:3a:e7:82:11:6b:c2:8f:83:
50:08:a3:cb:03:d6:65:28:97:e0:24:0b:b4:c6:e8:40:ac:8b:
30:ac:23:5b:70:58:3f:4e:b2:ff:f6:cc:51:66:47:09:f5:cd:
ac:60:ff:f9:cb:27:71:7c:cc:61:cc:bf:de:98:05:b4:54:15:
56:c8:5a:fa:82:9b:93:04:db:8b:10:8c:0a:99:a1:18:57:db:
75:f4:78:e6:08:28:72:f7:8e:e6:70:4b:65:2e:fb:cb:50:aa:
33:89:39:a7:ce:3d:a9:1f:01:b4:8f:d7:9c:80:eb:4e:47:07:
59:58:b6:0c:1f:40:6f:69:d9:5c:32:ef:9a:41:a0:10:50:60:
da:4a:10:df:9c:02:b8:72:82:87:f5:35:05:28:0b:f6:3e:0e:
70:a7:8b:dd:40:36:0f:df:2f:9e:7f:8b:8c:82:2c:e5:58:e9:
f2:b7:85:59:f3:fa:ed:33:02:e8:04:cc:b6:42:e9:a3:d4:26:
7d:04:02:e8:8c:99:b4:76:cd:30:91:27:a5:d0:6a:1c:99:e6:
2d:1f:48:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:21:51 2025 by rpki-client