Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/whCyRxLf7-usGqBaAr2X0O-BIQM.roa
File: whCyRxLf7-usGqBaAr2X0O-BIQM.roa (raw, json)
Hash identifier: eyViIgaL/zZlUAFRcKj22XHaMKCTbvyAf4jN1Oea98E=
Subject key identifier: C2:10:B2:47:12:DF:EF:EB:AC:1A:A0:5A:02:BD:97:D0:EF:81:21:03
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0197585D4A76FFA99BA40D3C9DAB3C11BAAC
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/whCyRxLf7-usGqBaAr2X0O-BIQM.roa
Signing time: Tue 10 Jun 2025 05:43:18 +0000
ROA not before: Tue 10 Jun 2025 05:43:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31479
IP address blocks: 45.10.104.0/22 maxlen: 22
49.0.184.0/21 maxlen: 21
80.66.116.0/24 maxlen: 24
94.198.46.0/24 maxlen: 24
178.19.32.0/24 maxlen: 24
178.19.33.0/24 maxlen: 24
185.28.48.0/23 maxlen: 23
185.216.128.0/22 maxlen: 22
201.77.58.0/24 maxlen: 24
2001:4030::/32 maxlen: 32
2001:4030:16::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:5d:4a:76:ff:a9:9b:a4:0d:3c:9d:ab:3c:11:ba:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jun 10 05:43:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c210b24712dfefebac1aa05a02bd97d0ef812103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9a:ba:85:bc:f4:dc:e5:c5:ec:5e:29:5e:30:
0d:6c:0e:36:bc:a7:e9:77:cd:34:65:aa:be:e7:72:
9b:1e:26:4a:36:a0:ad:fd:9b:d4:97:b7:6c:e6:9d:
fb:db:03:96:7f:a7:51:5d:03:0a:2e:01:06:f0:f5:
94:f5:f1:7e:51:79:df:e9:95:73:d5:a2:c8:ae:0e:
6c:d2:87:37:e7:21:6d:0d:13:47:a3:d3:6c:8f:95:
cb:15:42:78:09:38:16:35:df:35:d6:67:e6:25:01:
d3:82:90:ab:bb:1b:52:23:63:59:1e:6a:fd:11:ca:
08:18:f1:91:94:56:3e:9f:1e:73:d1:26:61:a2:4f:
2e:72:74:18:4e:e8:e7:ca:ed:4c:0e:bb:96:2b:fe:
a9:10:76:96:60:b6:e9:d6:fd:e3:2e:fe:e4:bc:19:
3f:c3:f9:56:c8:17:8e:20:5b:ee:b0:b8:59:b6:97:
34:cd:2e:50:80:f6:8c:b8:f6:b9:ce:1e:be:6c:27:
ee:f5:88:93:ea:f5:c5:c5:e9:85:16:bd:f2:ba:9b:
12:8b:7a:8f:af:38:76:6e:14:5d:61:81:80:c6:07:
d3:0b:3b:d3:c2:a9:7e:0b:bd:b2:a0:23:28:bb:74:
56:19:37:8f:69:9e:29:0d:7f:15:09:c0:04:57:84:
ef:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:10:B2:47:12:DF:EF:EB:AC:1A:A0:5A:02:BD:97:D0:EF:81:21:03
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/whCyRxLf7-usGqBaAr2X0O-BIQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.104.0/22
49.0.184.0/21
80.66.116.0/24
94.198.46.0/24
178.19.32.0/23
185.28.48.0/23
185.216.128.0/22
201.77.58.0/24
IPv6:
2001:4030::/32
Signature Algorithm: sha256WithRSAEncryption
04:36:f7:60:ba:7b:15:3d:3d:02:93:88:8e:30:b5:80:e4:2c:
20:ce:0a:c4:74:52:a8:07:36:7d:4a:11:b6:2a:e2:82:2f:e2:
37:75:03:34:e1:a2:f2:c8:bb:5d:1d:23:92:a0:de:37:03:05:
09:1b:ef:cf:54:d4:ae:36:37:c7:ce:11:bb:9e:1c:49:1b:29:
68:a2:82:74:56:88:e9:e1:f5:22:2d:f9:75:37:3c:f3:c7:43:
24:5e:fe:3a:4b:1f:3e:c4:c5:49:43:2b:89:f0:b7:99:68:0b:
5b:78:d8:26:9c:0d:fd:88:91:ec:b9:01:0c:50:45:c1:2e:d3:
99:75:9c:77:67:f0:57:81:ee:4f:1a:e4:35:91:29:d6:93:02:
96:fc:a8:7f:83:21:8b:6b:46:44:d1:e7:28:6f:89:54:7b:50:
d1:20:d1:e3:b3:64:47:49:69:75:10:d7:d6:a6:50:6f:cb:e7:
c1:48:4c:f9:be:bc:fa:80:6c:76:2f:13:46:63:37:5b:49:ca:
83:3e:44:b2:94:9d:7f:8f:e1:97:c1:c6:e0:69:1e:da:d6:6e:
30:63:60:4a:7b:04:9c:89:38:9a:53:a6:4b:f6:a3:ea:cb:be:
ba:0b:6e:f8:56:0e:68:4c:8d:99:22:37:c8:39:a2:32:d2:d2:
51:dc:1f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:03:55 2025 by rpki-client