Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/NwHwb-7MFQuc1e19RuLlv1ldRHM.roa
File: NwHwb-7MFQuc1e19RuLlv1ldRHM.roa (raw, json)
Hash identifier: t6CyxCnhuVOh2vGqsSgA10KLmmrgajakvreoDDCeC9k=
Subject key identifier: 37:01:F0:6F:EE:CC:15:0B:9C:D5:ED:7D:46:E2:E5:BF:59:5D:44:73
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 0199D2BD7F53570D37E27995A23166F1A99E
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/NwHwb-7MFQuc1e19RuLlv1ldRHM.roa
Signing time: Sat 11 Oct 2025 10:07:38 +0000
ROA not before: Sat 11 Oct 2025 10:07:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39855
IP address blocks: 45.144.197.0/24 maxlen: 24
46.244.18.0/24 maxlen: 24
46.244.19.0/24 maxlen: 24
46.244.97.0/24 maxlen: 24
46.244.108.0/23 maxlen: 24
46.244.110.0/24 maxlen: 24
46.244.114.0/24 maxlen: 24
46.244.115.0/24 maxlen: 24
92.240.144.0/22 maxlen: 24
92.240.149.0/24 maxlen: 24
92.240.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d2:bd:7f:53:57:0d:37:e2:79:95:a2:31:66:f1:a9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Oct 11 10:07:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3701f06feecc150b9cd5ed7d46e2e5bf595d4473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:55:bf:76:86:9b:ca:38:6e:ea:9d:94:88:9b:
12:f5:95:88:4b:16:98:71:53:f0:a8:c1:75:8d:ff:
2f:7d:87:8d:ef:14:d9:6f:61:d4:6b:b5:84:c7:44:
14:7b:c3:b8:0f:c7:bd:52:59:33:d3:6e:a4:15:c3:
8f:63:51:62:96:5f:c5:e0:61:68:5d:bf:1a:1a:d1:
77:a5:ff:d9:b9:a5:53:9d:cc:ac:35:ae:1e:e5:8d:
8f:26:f3:ec:6a:fe:ca:12:2b:fa:56:51:c5:f0:bc:
6a:79:cb:ae:e4:60:71:61:49:14:e0:52:16:c8:f3:
c8:4d:16:c6:7d:e1:a9:13:4c:47:a6:cc:a5:86:e4:
b4:a2:fc:90:12:a7:b2:d3:a7:15:5d:d7:18:aa:7c:
4b:65:87:cd:ba:b4:93:a1:13:bc:1c:30:bb:e0:30:
38:5e:78:b5:73:4c:13:1f:53:a7:ff:54:5b:0b:f7:
ed:d3:69:3a:fb:e3:ae:ab:22:eb:62:25:31:e0:7a:
cf:70:74:b9:28:02:0e:b8:a7:09:6b:da:d1:81:e0:
54:e8:39:7d:cc:69:3a:aa:d4:97:2a:ed:ad:b7:b1:
94:49:e7:8c:3a:a8:75:57:ff:6b:d9:24:79:d0:43:
4f:3a:67:f9:44:61:4f:a2:d0:49:e1:2d:46:09:08:
90:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:01:F0:6F:EE:CC:15:0B:9C:D5:ED:7D:46:E2:E5:BF:59:5D:44:73
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/NwHwb-7MFQuc1e19RuLlv1ldRHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.197.0/24
46.244.18.0/23
46.244.97.0/24
46.244.108.0-46.244.110.255
46.244.114.0/23
92.240.144.0/22
92.240.149.0/24
92.240.151.0/24
Signature Algorithm: sha256WithRSAEncryption
73:54:32:5c:2f:94:02:92:bc:7f:e4:f6:4f:a5:60:3b:5a:50:
84:55:8f:11:93:0b:7d:21:ee:78:09:fd:49:5b:fc:66:43:37:
33:00:52:aa:8e:9d:b9:14:c7:51:bb:77:c1:a9:f6:d6:6d:03:
ec:62:bd:d6:85:12:a2:63:93:91:10:ff:46:ea:ab:e1:9b:62:
8d:38:12:95:61:cc:24:b4:a5:a8:d6:da:1f:03:be:a6:63:00:
6d:37:f2:7b:85:9e:8b:4f:b8:14:3e:23:b0:1a:37:8d:66:8e:
6e:03:e8:6b:c4:3b:27:a2:61:9b:91:f2:cf:5e:80:78:33:7f:
5d:e3:80:c2:94:90:33:23:fe:2e:9a:43:e6:98:47:31:b7:7b:
b5:20:16:4b:1e:23:e6:a5:ff:0a:b2:94:17:1f:5c:2f:6c:8e:
aa:70:0f:a7:36:d1:6b:5c:c0:cf:92:1b:ad:c2:4b:58:d9:d1:
b0:1e:b3:32:c2:ae:e5:1f:a2:03:3f:ec:c7:00:ac:10:ea:26:
97:e8:9f:1e:3d:e7:4c:1d:59:d1:4f:ef:b7:7d:34:d5:7d:e5:
8e:39:9f:2b:1e:4f:0d:79:8e:b5:e3:41:67:cf:ae:5f:5c:db:
4d:9d:f7:90:14:01:27:fb:8c:c0:fd:6c:ab:25:b4:b1:2e:f4:
dd:38:b1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:55:41 2025 by rpki-client