Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/W45mJSyGhgdQ9zewUY7p6fJs6uE.roa
File: W45mJSyGhgdQ9zewUY7p6fJs6uE.roa (raw, json)
Hash identifier: S0MJIivhJVi9GNKDX6t87ue94qt19adiwa5YUk9PVS4=
Subject key identifier: 5B:8E:66:25:2C:86:86:07:50:F7:37:B0:51:8E:E9:E9:F2:6C:EA:E1
Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Certificate serial: 019A3A341500C0BFF7D6458CB0C36ED627AD
Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/W45mJSyGhgdQ9zewUY7p6fJs6uE.roa
Signing time: Fri 31 Oct 2025 12:18:03 +0000
ROA not before: Fri 31 Oct 2025 12:18:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197695
IP address blocks: 79.174.77.0/24 maxlen: 24
79.174.78.0/23 maxlen: 24
79.174.80.0/21 maxlen: 24
79.174.88.0/21 maxlen: 24
89.104.64.0/21 maxlen: 24
89.104.94.0/24 maxlen: 24
89.111.152.0/22 maxlen: 24
89.111.168.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3a:34:15:00:c0:bf:f7:d6:45:8c:b0:c3:6e:d6:27:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Validity
Not Before: Oct 31 12:18:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b8e66252c86860750f737b0518ee9e9f26ceae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:67:63:dd:67:fe:5e:ef:2f:99:82:a5:0d:a6:
c5:33:ec:e1:ae:b3:3b:8a:9d:7c:0d:53:99:f6:b7:
35:25:c5:53:9a:1f:1d:49:aa:f5:80:34:b0:87:cf:
57:02:a6:97:5c:54:7f:a3:3d:34:ff:39:44:78:d4:
b3:0e:c2:2b:68:ca:f2:2e:13:57:94:59:55:39:7c:
11:47:ee:cb:7c:68:fc:e8:24:e0:85:e6:73:d9:98:
08:6a:3b:5b:2f:af:fc:16:63:59:d2:79:fc:2f:39:
8c:78:b4:0b:e2:4c:57:e0:3e:a0:44:32:c4:38:01:
33:31:a4:47:8f:35:69:3f:0c:ca:53:7e:67:1a:18:
ab:4d:6f:2e:57:eb:1b:27:a8:2d:80:04:b5:4b:1e:
99:35:d7:d8:d2:8f:aa:04:ca:60:7e:0f:8d:9f:e3:
1b:56:b9:35:08:f1:a7:10:4b:36:a3:1e:40:d6:8f:
1b:8a:11:b5:5f:29:36:87:cf:23:63:9d:29:a7:9d:
b4:e1:4c:e6:35:8c:85:9b:85:c3:ed:49:bf:b6:7c:
eb:15:cb:d2:2d:85:28:7f:30:5c:f3:ec:40:96:82:
f9:e8:d2:f5:9d:e9:c4:f9:42:9d:90:b3:a4:0e:a1:
c8:d6:ad:de:02:9f:ef:16:e8:14:78:ea:03:49:c7:
92:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8E:66:25:2C:86:86:07:50:F7:37:B0:51:8E:E9:E9:F2:6C:EA:E1
X509v3 Authority Key Identifier:
keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/W45mJSyGhgdQ9zewUY7p6fJs6uE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.174.77.0-79.174.95.255
89.104.64.0/21
89.104.94.0/24
89.111.152.0/22
89.111.168.0/21
Signature Algorithm: sha256WithRSAEncryption
3e:59:b0:74:67:3d:3e:e8:04:e7:99:0d:ae:b4:00:6e:42:93:
05:0a:77:cc:2a:bf:5d:ff:a7:cb:49:fc:b0:05:f3:88:f7:3f:
35:d6:a1:78:4e:d8:78:09:0c:31:59:2c:ef:6e:a9:4d:4e:29:
f9:37:a8:ad:51:96:b4:e9:1f:2d:37:ca:a2:d4:87:2b:1f:51:
e5:d2:b3:69:cf:73:53:94:90:e6:c7:b0:e6:e7:66:27:3d:9f:
f4:51:73:3a:aa:3a:a9:0a:29:c3:df:1b:f8:82:f2:3f:89:00:
55:7e:56:f8:bf:47:27:50:51:60:f2:60:ba:92:09:39:e6:65:
27:d0:a0:f5:62:f7:04:09:bd:18:6e:2b:05:9d:75:51:ef:74:
6d:b6:52:7e:29:8b:3e:a3:65:44:43:9b:a5:d6:f6:5c:cb:17:
d1:01:32:da:67:f1:8f:8c:5c:f8:2f:7d:f3:c0:c4:68:fd:c3:
58:2c:82:07:a9:09:19:8f:fd:0f:7e:ca:6f:35:5d:6b:d0:37:
a8:c9:fc:da:05:e0:cf:a1:55:4a:2b:1a:5b:da:02:d9:d1:49:
6e:8c:d7:a6:e8:9e:3f:ef:e0:e3:2b:4f:53:32:8f:af:78:c4:
59:c6:6a:63:9f:d1:8b:3a:de:cd:17:64:2d:7b:cb:b0:92:f9:
4a:70:fb:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:13:34 2025 by rpki-client