Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/wS1UXRfPtMS1NBYtNz71NeZmtRk.roa
File: wS1UXRfPtMS1NBYtNz71NeZmtRk.roa (raw, json)
Hash identifier: iGK/CXBp/TXIP03g8PJuN3+7774KqoPIJH5kjoUJiwk=
Subject key identifier: C1:2D:54:5D:17:CF:B4:C4:B5:34:16:2D:37:3E:F5:35:E6:66:B5:19
Certificate issuer: /CN=0d69e3ee55dd862674d458661ba34908b0617fa1
Certificate serial: 01985B148944B376EC5294E82D8A815A4E28
Authority key identifier: 0D:69:E3:EE:55:DD:86:26:74:D4:58:66:1B:A3:49:08:B0:61:7F:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/wS1UXRfPtMS1NBYtNz71NeZmtRk.roa
Signing time: Wed 30 Jul 2025 11:25:29 +0000
ROA not before: Wed 30 Jul 2025 11:25:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60294
IP address blocks: 46.245.216.0/21 maxlen: 21
87.192.128.0/18 maxlen: 24
94.31.64.0/18 maxlen: 18
94.31.67.0/24 maxlen: 24
94.31.68.0/22 maxlen: 22
94.31.72.0/22 maxlen: 22
94.31.80.0/20 maxlen: 20
94.31.92.0/23 maxlen: 23
94.31.94.0/23 maxlen: 23
94.31.96.0/20 maxlen: 20
94.31.108.0/22 maxlen: 22
94.31.112.0/23 maxlen: 23
94.31.114.0/23 maxlen: 23
94.31.116.0/22 maxlen: 22
150.5.0.0/18 maxlen: 24
185.7.196.0/22 maxlen: 22
185.22.44.0/22 maxlen: 22
185.22.44.0/24 maxlen: 24
185.22.45.0/24 maxlen: 24
185.22.140.0/22 maxlen: 22
185.113.120.0/22 maxlen: 22
185.158.40.0/22 maxlen: 22
185.158.41.0/24 maxlen: 24
2a00:1f38::/32 maxlen: 32
2a00:6020::/32 maxlen: 32
2a00:6020:0:21::/64 maxlen: 64
2a00:61e0::/32 maxlen: 32
2a03:fc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5b:14:89:44:b3:76:ec:52:94:e8:2d:8a:81:5a:4e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d69e3ee55dd862674d458661ba34908b0617fa1
Validity
Not Before: Jul 30 11:25:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c12d545d17cfb4c4b534162d373ef535e666b519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:05:ae:75:c4:62:77:fe:54:12:f4:d3:f8:4c:
4e:d7:04:11:3c:4f:b4:35:b5:6d:ae:1b:a6:67:88:
9b:cb:a8:af:c0:d1:d9:22:09:42:20:9c:75:e6:cf:
53:57:8f:14:31:d1:d4:7a:30:e3:7c:12:a7:47:d5:
0c:60:71:9f:fe:78:0b:1a:c9:05:54:66:30:7a:28:
78:19:25:c8:62:91:d3:e1:7f:8e:22:ce:e8:e4:a9:
71:39:54:cf:ad:d9:ba:94:08:27:9f:8b:3b:45:ad:
0b:43:6d:20:2d:23:68:15:14:9a:64:36:0f:3b:a2:
d6:92:46:b1:08:aa:f1:d3:d4:1d:d4:66:fa:0a:91:
5a:cf:79:c1:6b:7b:55:57:2f:02:9f:13:72:0e:af:
6c:24:b7:a5:8f:7c:8a:03:f1:29:0c:f8:4c:7f:40:
66:ec:51:c5:3f:0d:6f:5f:5b:d3:3e:8d:44:7a:70:
f0:4e:43:88:8a:d7:e7:2c:4e:4e:e8:cf:09:ff:5b:
8d:b8:c8:f0:70:66:c1:8e:a6:d3:17:e2:d4:65:4b:
c9:dd:98:03:69:59:fc:e1:64:4a:89:4e:f4:05:79:
a0:de:7a:df:b7:41:bf:f9:70:96:2e:cd:90:4b:a9:
d3:c6:97:29:8b:4c:c0:d6:b3:57:03:0d:54:e8:fc:
c5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:2D:54:5D:17:CF:B4:C4:B5:34:16:2D:37:3E:F5:35:E6:66:B5:19
X509v3 Authority Key Identifier:
keyid:0D:69:E3:EE:55:DD:86:26:74:D4:58:66:1B:A3:49:08:B0:61:7F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/wS1UXRfPtMS1NBYtNz71NeZmtRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.216.0/21
87.192.128.0/18
94.31.64.0/18
150.5.0.0/18
185.7.196.0/22
185.22.44.0/22
185.22.140.0/22
185.113.120.0/22
185.158.40.0/22
IPv6:
2a00:1f38::/32
2a00:6020::/32
2a00:61e0::/32
2a03:fc0::/32
Signature Algorithm: sha256WithRSAEncryption
1a:16:d7:34:ee:24:1d:53:c4:24:0e:6a:10:02:55:66:88:cb:
30:8c:02:30:ed:8d:9e:0d:30:40:aa:62:51:7c:32:e6:49:55:
d1:5f:ba:e5:8b:d4:97:f0:fa:0a:67:04:01:c3:7b:1a:d2:44:
d7:e6:18:bd:79:cc:d8:56:66:78:f6:cc:f1:1c:07:ab:53:a6:
a2:d9:fb:c3:34:1b:b0:2d:ec:bb:38:d5:58:43:9e:26:b7:f7:
f1:32:55:29:28:7c:96:af:69:97:fc:10:8f:cd:9d:6e:3f:2f:
73:19:5b:80:9e:a5:f3:e9:07:20:4b:04:ce:6e:11:2e:e6:bf:
26:84:2e:fb:7d:23:25:3b:ab:83:07:54:5f:9a:40:f1:d5:23:
90:a6:57:a3:e2:60:0d:db:64:d0:ae:d6:a3:97:eb:55:20:0f:
05:ab:81:90:f8:08:75:ca:ec:79:ce:1d:00:ca:29:1c:11:dd:
99:6c:3c:89:46:bb:26:8a:8d:ab:d8:c5:33:9f:7a:8b:3b:e5:
ed:bd:d8:1a:99:4d:c7:39:60:d3:1e:28:5e:4e:41:37:88:f6:
fd:54:1b:32:ec:a4:7f:cb:ee:d4:13:24:75:55:ed:54:ef:40:
9f:6e:e5:26:c7:50:b3:d4:4c:bd:3d:52:a2:12:d2:28:1e:5c:
8d:22:2d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:27:22 2025 by rpki-client