Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/uWfHgBN_fUuSZSwrLJm4yP6GS9Q.roa
File: uWfHgBN_fUuSZSwrLJm4yP6GS9Q.roa (raw, json)
Hash identifier: +A1T+WhnOHYIEIZ7mEVu1afaFwmjRRKYqLMFQ3ckAmE=
Subject key identifier: B9:67:C7:80:13:7F:7D:4B:92:65:2C:2B:2C:99:B8:C8:FE:86:4B:D4
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0197C086344587DFB8E412B6C3C2EEEC2E03
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/uWfHgBN_fUuSZSwrLJm4yP6GS9Q.roa
Signing time: Mon 30 Jun 2025 11:08:30 +0000
ROA not before: Mon 30 Jun 2025 11:08:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211619
IP address blocks: 45.9.168.0/24 maxlen: 24
77.242.152.0/24 maxlen: 24
77.242.153.0/24 maxlen: 24
77.242.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:86:34:45:87:df:b8:e4:12:b6:c3:c2:ee:ec:2e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jun 30 11:08:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b967c780137f7d4b92652c2b2c99b8c8fe864bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:34:92:6c:38:e2:d8:8b:39:99:bc:5e:a2:2c:
ae:89:ec:4f:10:2b:7a:98:0d:7c:35:64:fa:73:41:
28:2c:16:99:a4:e8:c1:51:f0:1f:a2:70:4e:21:c9:
17:fe:ec:94:30:9b:07:90:15:83:68:c4:af:a8:61:
e3:1c:74:2d:2e:b7:69:79:3d:e3:d1:95:1c:c5:31:
f6:b6:ab:85:28:0b:a4:22:a7:05:16:46:fc:54:3e:
52:46:41:3e:06:02:3d:86:4e:b3:8e:75:b3:25:65:
c9:e8:c8:4d:81:f3:a0:a4:76:7f:19:83:d3:84:66:
73:b0:b3:8b:c3:bd:a4:66:73:a9:9c:76:7e:9c:e1:
94:1c:a5:87:92:d9:b9:6a:2e:83:5e:30:e2:a4:7d:
a1:64:55:a1:1c:65:30:d5:89:2a:f2:a6:ef:95:79:
a3:b2:90:15:be:c2:3d:e7:ef:d8:c5:69:90:e5:ae:
e6:68:cc:a7:c0:c6:a7:71:60:96:c2:a2:c2:52:95:
b2:8e:df:fd:d5:62:91:b4:a0:0d:af:77:04:e9:09:
5f:bf:24:3c:df:83:77:1d:51:44:73:6c:a4:53:fb:
bb:d2:8d:da:90:e2:ac:12:8a:29:97:45:41:b2:81:
b2:6c:f0:af:56:8f:40:2d:3c:8e:17:3a:f0:7e:1c:
aa:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:67:C7:80:13:7F:7D:4B:92:65:2C:2B:2C:99:B8:C8:FE:86:4B:D4
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/uWfHgBN_fUuSZSwrLJm4yP6GS9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.168.0/24
77.242.152.0/23
77.242.155.0/24
Signature Algorithm: sha256WithRSAEncryption
76:a8:d8:45:9e:1a:cd:6d:c5:81:d8:9a:6b:eb:71:4c:70:65:
65:2e:90:88:53:fb:64:0d:08:da:27:2e:37:ae:00:22:9a:af:
7f:6b:f2:10:71:37:f8:49:b5:bf:09:78:c7:34:3d:31:a3:ae:
b4:cb:95:c1:b6:ad:29:07:90:6b:03:c1:9b:6c:28:ce:48:85:
99:81:76:f6:a8:90:9f:6e:de:7d:a0:96:7a:9e:e0:18:e6:bc:
b2:86:17:b4:df:77:e1:e5:ab:a6:b7:92:79:6d:93:f8:a1:64:
8b:c0:71:70:fd:de:26:82:d2:7d:af:b0:38:12:00:b5:4c:c6:
e5:9c:2b:6e:dc:ca:32:df:90:58:6c:00:0c:a4:ec:8e:67:3e:
c5:9f:9f:7c:80:75:d9:ca:b9:07:2c:9f:d7:3d:c8:f9:d4:7d:
3d:bf:21:5e:20:ce:9c:29:d9:06:ac:50:8d:ca:b4:72:cd:f4:
7b:51:3a:7a:31:8e:8d:d4:8e:89:af:1f:61:86:10:46:01:06:
ab:cd:f6:60:96:75:69:36:43:70:b7:6b:b2:0e:d4:60:0d:92:
06:58:8d:47:07:f5:9d:5e:66:d7:b0:b1:d7:79:6e:f3:b8:29:
a5:4f:5e:bc:75:e8:37:e3:42:86:04:bf:6d:40:92:26:d0:73:
c4:a7:57:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 14:51:26 2025 by rpki-client