Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/RWAHAsrZXR_NxxGtwN6OEC5tDIs.roa
File: RWAHAsrZXR_NxxGtwN6OEC5tDIs.roa (raw, json)
Hash identifier: 7bMqR/rBw6NH0+LMHOCGAZUS1O/iVmW2Ug7Mi0qVjCY=
Subject key identifier: 45:60:07:02:CA:D9:5D:1F:CD:C7:11:AD:C0:DE:8E:10:2E:6D:0C:8B
Certificate issuer: /CN=1e54b80723921cdd51da53325f12b3dbc6782664
Certificate serial: 019A0B3014DECBFA8D56A22F03DBA7E44EA5
Authority key identifier: 1E:54:B8:07:23:92:1C:DD:51:DA:53:32:5F:12:B3:DB:C6:78:26:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/RWAHAsrZXR_NxxGtwN6OEC5tDIs.roa
Signing time: Wed 22 Oct 2025 09:11:31 +0000
ROA not before: Wed 22 Oct 2025 09:11:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202247
IP address blocks: 77.73.33.0/24 maxlen: 24
2a05:9480::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:30:14:de:cb:fa:8d:56:a2:2f:03:db:a7:e4:4e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e54b80723921cdd51da53325f12b3dbc6782664
Validity
Not Before: Oct 22 09:11:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45600702cad95d1fcdc711adc0de8e102e6d0c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:27:19:1d:4e:00:e0:36:56:2d:d6:6c:ca:81:
61:16:12:08:c3:b0:0e:be:9d:61:f9:f0:47:15:c1:
bb:0f:a2:6f:88:6d:2e:c9:4f:eb:ad:48:f7:81:19:
72:42:0a:39:10:01:e4:2e:70:dd:b2:1c:05:af:fe:
bb:f0:f6:52:c7:60:fe:88:eb:d3:60:17:e6:95:5c:
b8:3f:63:ee:45:7c:0b:86:56:2f:8a:3e:ed:4b:81:
d4:34:85:bb:6e:90:fe:47:98:ca:a6:6f:3f:fe:f4:
41:d5:3a:26:b9:31:94:59:ba:30:55:4d:41:e6:3c:
8e:4b:28:da:eb:20:91:72:ca:a4:00:48:e4:57:8d:
ae:43:9a:e1:d0:34:b0:d7:f9:a6:7a:18:37:92:b8:
e4:5a:bf:43:1e:cb:05:e8:ca:10:8a:ac:3a:51:88:
f8:76:d7:64:37:7a:6c:74:c2:c4:0c:63:08:7e:34:
f0:22:85:aa:65:c2:a2:df:8f:ac:e0:e4:d8:4d:88:
8c:c5:ec:1a:b5:c0:15:83:13:51:a5:63:99:c4:0e:
3f:de:ef:5e:2c:75:f1:c5:39:4f:4f:57:a9:f0:f3:
46:54:07:06:d6:5a:83:ae:69:70:96:c4:2d:c2:b7:
55:93:f0:8a:c1:04:e0:04:96:18:48:cc:0a:eb:44:
ba:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:60:07:02:CA:D9:5D:1F:CD:C7:11:AD:C0:DE:8E:10:2E:6D:0C:8B
X509v3 Authority Key Identifier:
keyid:1E:54:B8:07:23:92:1C:DD:51:DA:53:32:5F:12:B3:DB:C6:78:26:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/RWAHAsrZXR_NxxGtwN6OEC5tDIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.33.0/24
IPv6:
2a05:9480::/29
Signature Algorithm: sha256WithRSAEncryption
6a:46:42:6f:d8:21:9b:0d:12:df:83:e7:c4:92:aa:a7:09:fe:
7f:90:dc:fe:48:c8:e9:1b:aa:2a:0d:8c:67:7b:77:b9:43:15:
cb:c0:ab:40:ff:e2:08:08:01:32:ee:98:d3:3b:00:22:f6:40:
41:bc:4c:ed:cc:07:37:7f:bb:0c:96:ff:55:50:f6:9a:7f:73:
c0:b8:16:62:07:ec:bc:0a:91:b3:a3:a5:5a:52:76:ad:80:75:
c8:5d:82:e9:0a:21:67:12:d4:38:df:62:15:9e:28:8d:42:28:
a0:64:0e:02:58:c4:dc:3d:e9:26:5f:c5:d2:e6:67:0c:50:bb:
66:11:fd:cd:5c:fd:c0:4b:6e:69:31:d3:18:f4:ae:9c:d3:bc:
bf:b1:35:40:da:04:d9:62:36:6a:d8:69:07:dd:01:ac:6d:42:
4d:c2:ab:3f:bf:21:60:09:54:08:15:67:e0:0d:8e:18:6b:79:
2f:1b:20:51:9b:dc:25:d2:f5:77:0f:ce:18:0d:04:db:7f:51:
2d:c8:9c:95:41:cb:6e:d4:dc:48:28:f8:9a:9e:e8:ac:c7:af:
94:be:b6:bc:24:7c:58:d6:cb:e7:5d:ad:ce:e2:e0:57:78:19:
e3:ab:7e:dc:fc:a5:38:91:7c:10:4d:4b:82:60:cd:2e:67:15:
55:95:82:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:35:55 2025 by rpki-client