Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/1-W1_UeTbDC50o0jTYZ8yBoxQPdY.roa
File: 1-W1_UeTbDC50o0jTYZ8yBoxQPdY.roa (raw, json)
Hash identifier: zcnuSd/PmMr2gSUfQ+mkKddLfhOo0bd5lqzsC6o7tNQ=
Subject key identifier: F9:6D:7F:51:E4:DB:0C:2E:74:A3:48:D3:61:9F:32:06:8C:50:3D:D6
Certificate issuer: /CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
Certificate serial: 0198A307F64E4E9C7F9D0D1F779F5C5F0182
Authority key identifier: E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/1-W1_UeTbDC50o0jTYZ8yBoxQPdY.roa
Signing time: Wed 13 Aug 2025 10:44:24 +0000
ROA not before: Wed 13 Aug 2025 10:44:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216129
IP address blocks: 107.161.154.0/24 maxlen: 24
148.253.208.0/24 maxlen: 24
148.253.209.0/24 maxlen: 24
148.253.210.0/24 maxlen: 24
185.28.84.0/24 maxlen: 24
199.83.103.0/24 maxlen: 24
202.181.188.0/24 maxlen: 24
2a13:d200::/32 maxlen: 32
2a13:d200:6::/48 maxlen: 48
2a13:d200:7::/48 maxlen: 48
2a13:d200:8::/48 maxlen: 48
2a13:d200:9::/48 maxlen: 48
2a13:d200:10::/48 maxlen: 48
2a13:d200:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a3:07:f6:4e:4e:9c:7f:9d:0d:1f:77:9f:5c:5f:01:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
Validity
Not Before: Aug 13 10:44:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f96d7f51e4db0c2e74a348d3619f32068c503dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7f:25:1a:e1:42:23:86:0c:72:6f:b8:e7:12:
41:fc:5d:f3:d5:c0:17:56:c9:d4:09:c2:c4:c6:7b:
f6:67:f8:4b:f4:58:89:cc:c8:60:b7:9b:c7:21:e7:
98:d0:ac:3c:c4:f3:a8:b4:32:0c:6d:9d:ed:a2:b2:
55:dd:3c:fc:2d:ed:3e:80:2c:f9:5e:32:a1:00:84:
e0:e8:7b:fa:5b:20:27:54:ff:44:dc:42:55:38:3a:
1c:40:e8:df:d0:29:a8:9d:59:9f:6d:86:d8:36:62:
2f:56:c6:7e:64:bc:02:44:30:01:df:44:75:53:84:
d4:40:2e:06:57:f2:a6:4d:67:a7:c0:ae:c3:56:6e:
e2:cc:e7:7e:dc:4e:59:29:3e:24:8c:55:bc:b8:8c:
61:e1:56:60:c4:83:e7:58:6a:3c:4c:51:a1:82:44:
7c:06:23:29:60:7a:fc:78:d4:cf:3f:03:23:e8:ed:
86:82:56:53:c1:20:5b:97:c2:ea:73:af:7b:da:cd:
d2:b6:5a:5a:da:89:39:0b:08:e0:98:ec:66:69:b0:
c6:21:80:c0:5c:42:47:49:d3:9e:42:dd:74:00:fa:
3a:5b:03:32:74:07:28:76:e6:7b:89:f9:8f:8e:c0:
cf:d0:3e:3c:40:11:3c:c6:a9:f8:9e:aa:90:2d:62:
07:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6D:7F:51:E4:DB:0C:2E:74:A3:48:D3:61:9F:32:06:8C:50:3D:D6
X509v3 Authority Key Identifier:
keyid:E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/1-W1_UeTbDC50o0jTYZ8yBoxQPdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.161.154.0/24
148.253.208.0-148.253.210.255
185.28.84.0/24
199.83.103.0/24
202.181.188.0/24
IPv6:
2a13:d200::/32
Signature Algorithm: sha256WithRSAEncryption
25:a3:42:50:6f:64:e6:ba:66:e2:f9:6d:6d:5c:18:fd:77:65:
b2:88:6d:ce:d0:dd:c6:b2:83:3e:cd:24:0c:42:8a:0c:92:27:
51:10:15:ad:82:a5:e2:a9:12:a8:17:49:17:aa:f5:ae:35:e4:
bf:91:57:e8:99:38:0b:43:63:19:be:c7:2a:08:f3:ec:bd:14:
f1:ad:0d:e6:f9:fe:9f:9e:f9:c4:af:c1:b4:40:7b:22:cd:9a:
3c:0d:ca:ef:b3:5e:c9:d1:90:a5:d1:83:d2:97:bc:17:45:32:
a8:1e:63:58:d7:b1:26:30:1a:df:a9:12:ea:cf:c3:15:d2:1e:
ff:1a:20:f5:2e:91:d1:ca:68:1b:65:e1:9c:a5:1b:3d:81:4e:
c1:65:f6:6a:05:bf:e1:d2:52:d2:11:03:4d:2a:6f:b0:e1:33:
dd:50:ab:9b:bb:e4:e0:fc:b4:f7:07:38:7b:04:1f:ef:dd:9e:
6d:2c:3f:f4:ec:31:e7:0f:f1:ba:ca:88:4c:ff:dc:38:28:21:
59:fd:7a:e9:15:6b:f5:b0:28:22:25:68:f2:d0:34:e2:c2:bb:
5b:0c:75:f4:93:5c:7a:95:26:4f:6d:2f:30:c2:45:58:c1:69:
7e:15:b8:c1:27:61:24:34:a9:e1:dc:9f:fc:5a:06:08:57:49:
9d:09:96:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:53:47 2025 by rpki-client