
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/WwnQjZHfQd7jpQ3w-rjD8ELh9H8.roa
File: WwnQjZHfQd7jpQ3w-rjD8ELh9H8.roa (raw, json)
Hash identifier: LKvq+h+ej0Xor9qooWGo0fEuCR2qrW0Kl6JJl/tm/SI=
Subject key identifier: 5B:09:D0:8D:91:DF:41:DE:E3:A5:0D:F0:FA:B8:C3:F0:42:E1:F4:7F
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019975AD6C4583C1FBC692E75E6FE01FADC6
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/WwnQjZHfQd7jpQ3w-rjD8ELh9H8.roa
Signing time: Tue 23 Sep 2025 08:25:23 +0000
ROA not before: Tue 23 Sep 2025 08:25:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 167.17.56.0/21 maxlen: 21
206.245.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:75:ad:6c:45:83:c1:fb:c6:92:e7:5e:6f:e0:1f:ad:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 23 08:25:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b09d08d91df41dee3a50df0fab8c3f042e1f47f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e1:32:55:61:02:46:ef:a0:51:93:8d:12:dc:
41:21:6b:05:14:c8:9f:81:33:1c:49:80:6c:28:58:
e3:f4:54:49:3a:d7:70:e2:f3:3b:9c:e1:b2:c7:ba:
f2:18:fb:3d:2c:b5:31:98:ce:e1:88:c7:db:65:c8:
56:4b:79:45:d3:6d:cd:b1:7c:f3:f1:7e:f9:e1:13:
7b:5b:a6:07:7c:25:e1:19:be:a6:f0:27:11:e1:53:
20:2c:f9:d9:ac:eb:a9:ba:f9:a1:ad:48:00:d5:0b:
69:2f:72:de:0e:7a:b0:01:e0:f7:16:f1:28:5b:ed:
a0:a2:4e:66:3b:cb:3a:33:83:99:94:0f:74:b6:43:
ac:1b:1f:79:83:d4:25:ee:13:03:4e:72:6f:54:64:
b5:52:4e:a4:53:67:89:b0:93:9e:07:29:5e:90:87:
1c:cb:68:9f:79:ba:b8:4f:0d:ae:ee:b0:80:c3:77:
a0:42:bd:ee:d1:c8:84:08:5e:a9:c0:5b:00:e9:d3:
6e:ed:2c:13:b6:c2:5c:c5:af:68:ca:a8:39:1d:d9:
4c:be:62:ad:79:b4:b2:d5:81:94:b0:c0:7f:d2:6b:
e4:e6:44:1e:31:4a:1a:96:d5:73:d3:cf:1d:1b:a8:
4d:9d:6d:ee:35:01:bf:7f:bd:44:fe:b6:ba:32:9c:
23:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:09:D0:8D:91:DF:41:DE:E3:A5:0D:F0:FA:B8:C3:F0:42:E1:F4:7F
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/WwnQjZHfQd7jpQ3w-rjD8ELh9H8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.17.56.0/21
206.245.158.0/24
Signature Algorithm: sha256WithRSAEncryption
69:c9:e2:1a:58:3b:4a:44:ef:3b:07:b1:32:ed:59:3b:88:09:
bd:1e:3f:96:0e:36:2d:b5:7f:b3:2d:33:6d:4a:c4:e2:6d:49:
79:53:bc:b6:dd:1e:27:ff:03:50:b7:d3:cd:30:48:fb:7f:8e:
83:d5:8c:46:1c:40:92:d3:99:ed:9c:e0:d0:2a:e6:77:6f:6d:
36:e5:80:19:98:c7:89:de:ee:10:df:35:72:e1:f5:e4:78:3c:
80:6e:92:5f:e5:9e:03:32:12:43:cc:49:f1:24:8f:5a:4f:9c:
9f:25:98:e5:66:d2:11:ce:dc:1e:46:fe:21:2e:1c:07:a1:e2:
9e:47:fd:67:b1:b5:62:9c:42:3f:37:85:b6:e9:e8:58:2a:82:
63:ac:b6:91:a9:14:67:93:77:18:25:87:d1:c4:4f:28:f5:de:
fd:ba:10:a1:eb:25:7e:a4:4e:a4:07:8a:c8:16:43:3b:41:3e:
ce:a1:2e:bb:c9:0e:7c:3d:d2:a5:d2:34:66:a9:05:54:b2:84:
48:f3:4c:18:55:da:05:ac:60:66:c2:1e:f4:59:44:00:89:d8:
a3:7c:b4:35:c3:ce:bb:9e:b2:23:b8:53:a6:e3:33:ef:38:31:
53:a1:26:e9:e1:18:30:a7:db:0c:a3:e0:be:c0:2b:5e:23:00:
f6:ad:d2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:48 2025 by rpki-client