Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/w-Q5BuRRipFl39NqReThB1XFeBI.roa
File: w-Q5BuRRipFl39NqReThB1XFeBI.roa (raw, json)
Hash identifier: rd7Mv0pn5jmnyPB8+QCPb62fzHqKtbWhfZxpEbX+YvM=
Subject key identifier: C3:E4:39:06:E4:51:8A:91:65:DF:D3:6A:45:E4:E1:07:55:C5:78:12
Certificate issuer: /CN=544a82aa5e2eb71719b7f9f049a307b12454497e
Certificate serial: 019A499D16FDE0D8F53B7ACD7DA165774F14
Authority key identifier: 54:4A:82:AA:5E:2E:B7:17:19:B7:F9:F0:49:A3:07:B1:24:54:49:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/w-Q5BuRRipFl39NqReThB1XFeBI.roa
Signing time: Mon 03 Nov 2025 12:07:03 +0000
ROA not before: Mon 03 Nov 2025 12:07:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211381
IP address blocks: 188.137.176.0/24 maxlen: 24
188.137.177.0/24 maxlen: 24
188.137.179.0/24 maxlen: 24
188.137.180.0/24 maxlen: 24
188.137.181.0/24 maxlen: 24
188.137.182.0/24 maxlen: 24
188.137.183.0/24 maxlen: 24
188.137.240.0/24 maxlen: 24
188.137.241.0/24 maxlen: 24
188.137.242.0/24 maxlen: 24
188.137.243.0/24 maxlen: 24
188.137.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:49:9d:16:fd:e0:d8:f5:3b:7a:cd:7d:a1:65:77:4f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=544a82aa5e2eb71719b7f9f049a307b12454497e
Validity
Not Before: Nov 3 12:07:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3e43906e4518a9165dfd36a45e4e10755c57812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9e:d0:b4:0c:33:95:d5:72:26:70:c6:71:b1:
98:0d:3c:05:00:c1:9b:c9:b7:aa:ee:ac:0b:33:94:
13:96:74:76:df:6c:db:64:ba:bd:bb:1a:b3:77:42:
6b:71:37:81:2c:bd:b4:d6:e4:ac:37:8b:96:4d:ac:
6d:49:70:f8:78:8a:60:01:e8:8b:e7:f4:37:14:4d:
2b:a9:c8:47:78:4a:c9:c7:36:18:80:67:69:1c:70:
97:cd:44:22:83:8c:12:48:a7:89:c5:b5:b8:a9:7a:
82:8e:eb:0f:d4:5c:f6:99:88:e3:55:f4:fc:ae:2a:
fc:8a:b1:cf:8e:8c:32:34:b5:5e:9d:e3:06:31:30:
d3:cf:b7:eb:3e:1a:6b:0f:89:65:2f:14:9c:d8:c8:
59:df:87:f6:23:74:63:2c:bb:37:1b:64:9e:fb:8a:
6b:6c:70:c5:38:4e:c1:5a:6b:a2:6b:5f:5d:73:e2:
da:77:8c:14:d4:ce:e1:7f:57:ea:a0:02:3b:82:40:
9e:49:45:8c:b1:52:40:31:28:0c:f7:d8:9c:48:68:
cd:0b:01:f1:ff:bc:0d:82:e5:37:db:13:fc:53:80:
3a:fb:f5:ef:67:52:20:55:15:2b:22:ba:f4:9f:28:
8d:bb:3b:63:74:bf:76:7c:89:5d:5b:ad:4d:bf:df:
66:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E4:39:06:E4:51:8A:91:65:DF:D3:6A:45:E4:E1:07:55:C5:78:12
X509v3 Authority Key Identifier:
keyid:54:4A:82:AA:5E:2E:B7:17:19:B7:F9:F0:49:A3:07:B1:24:54:49:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/w-Q5BuRRipFl39NqReThB1XFeBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.137.176.0/23
188.137.179.0-188.137.183.255
188.137.240.0/22
188.137.245.0/24
Signature Algorithm: sha256WithRSAEncryption
68:f9:45:98:5d:f0:d7:21:6e:6c:d2:91:39:ef:73:7d:f6:bf:
3c:60:d3:b5:84:30:a1:89:db:df:ea:99:a4:62:0f:cf:9f:05:
4b:53:72:4f:14:38:e1:0c:23:9a:ee:33:2e:0c:bd:ae:6b:5c:
1f:62:f7:ad:4e:8c:34:12:13:de:69:ac:7d:3a:23:f0:ac:be:
5f:88:88:52:6b:1a:6d:09:ca:a0:a1:09:a8:24:ea:5c:28:22:
c9:df:67:7b:04:eb:f6:94:c6:90:86:7f:25:19:17:e3:b7:fe:
07:2a:e1:02:1b:4c:b6:36:4d:be:9b:17:f6:10:50:36:e1:31:
e8:0d:cd:40:af:b7:3f:9b:a0:96:91:32:26:2e:e6:33:58:51:
2b:33:43:4b:cb:a2:f6:f5:3d:39:f4:f3:8e:2d:43:cb:60:cf:
10:46:f0:e8:9d:bf:ee:bb:22:69:e4:f1:8b:c8:4c:45:02:cd:
af:19:e0:91:10:40:94:af:7c:c4:ff:87:d5:c5:d5:7c:aa:fa:
40:3e:2d:b4:1d:6d:da:63:44:ba:bd:d3:74:41:b1:15:06:81:
e7:05:f4:f1:49:ec:89:28:08:53:c3:51:90:c3:52:27:f5:9b:
28:73:e2:34:17:06:da:52:cc:14:f0:70:2a:94:ef:9d:85:c1:
2e:80:aa:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:17:37 2025 by rpki-client