Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/WtL3j531HxUhA5hDbA_ciB44aC8.roa
File: WtL3j531HxUhA5hDbA_ciB44aC8.roa (raw, json)
Hash identifier: nm/tNc8Z15cbID3eGQXbl/kKPLx9g+rJQAV2ndB0ufY=
Subject key identifier: 5A:D2:F7:8F:9D:F5:1F:15:21:03:98:43:6C:0F:DC:88:1E:38:68:2F
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0197A8070085514DB888E02F0867CF3AB1B5
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/WtL3j531HxUhA5hDbA_ciB44aC8.roa
Signing time: Wed 25 Jun 2025 16:58:40 +0000
ROA not before: Wed 25 Jun 2025 16:58:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201446
IP address blocks: 45.13.185.0/24 maxlen: 24
45.154.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 13:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a8:07:00:85:51:4d:b8:88:e0:2f:08:67:cf:3a:b1:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 25 16:58:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ad2f78f9df51f15210398436c0fdc881e38682f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4f:87:98:98:d0:c2:4b:94:fc:81:64:0e:e3:
b3:5a:4b:4f:c1:bc:50:4f:39:ef:f7:5d:53:ee:a1:
58:8b:14:97:97:ac:9d:3e:99:4b:48:19:28:29:d0:
d7:4b:80:c8:10:28:7a:01:35:a1:22:ae:39:27:d9:
76:68:2b:c0:05:6c:92:76:a7:d3:32:35:e8:3d:dd:
71:06:d3:d7:54:3e:c7:60:bd:e9:05:d9:7c:5e:2b:
44:cb:0a:f8:58:64:20:4b:7c:a7:08:3c:94:82:65:
8e:a8:05:63:7d:5b:40:05:85:f5:2f:22:46:6c:2b:
f9:e8:4a:8f:77:6a:a7:ce:9a:8a:68:fe:64:c8:6d:
f4:77:7e:d6:28:b3:8e:ed:16:e8:be:7a:14:41:89:
c9:ce:db:d7:32:99:6a:7e:6e:e2:21:74:83:17:19:
d1:42:31:bc:0f:31:81:6c:ea:aa:f0:fb:3d:32:7a:
31:69:9f:92:a6:a0:58:1d:73:8b:b1:23:bd:9c:ed:
4c:bd:2b:b5:fe:b3:c3:13:ca:24:ca:e9:c4:4b:87:
cd:0f:61:62:c9:fb:d6:42:9f:04:9f:6b:b4:bc:fd:
64:0a:27:4f:e8:99:cb:92:e3:d7:44:4a:3c:d3:ae:
2f:30:0d:5f:55:93:76:97:21:cc:89:a3:2f:b0:70:
49:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D2:F7:8F:9D:F5:1F:15:21:03:98:43:6C:0F:DC:88:1E:38:68:2F
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/WtL3j531HxUhA5hDbA_ciB44aC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.185.0/24
45.154.57.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:67:62:d0:71:ac:99:61:0e:d1:64:95:9f:f3:12:ef:fe:ea:
d1:7e:9d:a5:7d:66:b8:2b:f9:00:57:89:23:84:f6:8c:42:e3:
45:9f:f5:a8:68:b8:7d:a6:64:a6:17:70:2a:95:db:41:aa:48:
44:64:be:83:5a:02:eb:4a:48:48:42:04:1f:82:71:76:fe:07:
cb:b6:b6:df:20:1e:56:35:66:3d:b7:06:0a:55:47:82:9d:1b:
f4:03:7d:7b:04:3e:d3:94:36:ef:e7:9b:1e:44:86:83:9c:aa:
18:aa:2a:82:71:6f:77:5f:3f:39:f9:3b:19:0e:56:43:50:ed:
f6:99:02:13:82:62:fd:e5:76:ce:09:3f:c3:4e:5a:e4:f3:ef:
06:55:4c:2e:bd:57:66:3e:79:2a:10:d6:11:b7:d0:98:59:f2:
ec:33:ba:45:cb:9d:0c:1d:cf:e4:89:ad:68:23:45:f4:24:ec:
2b:ba:4b:3a:29:05:5d:40:c1:79:47:72:f0:c5:21:9a:e9:d9:
d6:42:8e:a4:6c:ca:c6:91:81:81:4a:26:de:1c:13:f6:90:20:
09:b1:26:72:29:53:9f:4d:c0:81:65:d3:58:51:2a:d0:6c:d7:
97:c2:d1:b1:3e:00:f0:b7:05:2b:ae:7b:e9:f1:63:34:58:84:
be:35:bb:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 21:43:11 2025 by rpki-client