Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/00WFumzQ3KsIQYPaPK03cpM1kM4.roa
File: 00WFumzQ3KsIQYPaPK03cpM1kM4.roa (raw, json)
Hash identifier: GN1uo4GkRVa1gYEF5uPaaGFTUCUjT8T7qz9MDmrfrD8=
Subject key identifier: D3:45:85:BA:6C:D0:DC:AB:08:41:83:DA:3C:AD:37:72:93:35:90:CE
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 0197C2F31F89C2F38AF050C2A629C59ABC51
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/00WFumzQ3KsIQYPaPK03cpM1kM4.roa
Signing time: Mon 30 Jun 2025 22:26:42 +0000
ROA not before: Mon 30 Jun 2025 22:26:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209847
IP address blocks: 5.182.39.0/24 maxlen: 24
45.159.251.0/24 maxlen: 24
193.43.146.0/24 maxlen: 24
193.57.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 14:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:f3:1f:89:c2:f3:8a:f0:50:c2:a6:29:c5:9a:bc:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Jun 30 22:26:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d34585ba6cd0dcab084183da3cad3772933590ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f0:0f:d7:14:71:c1:66:89:bb:7e:d7:e3:73:
8c:a3:f4:fc:1b:f8:4a:2b:13:a8:f7:4b:1c:84:c3:
d8:72:92:f4:1b:1c:28:26:ac:1e:a2:48:85:48:d3:
af:4d:13:b5:83:0a:af:dd:1c:4c:3c:87:38:a4:2e:
2c:59:4b:7c:b1:ed:8a:c1:6f:22:4c:a2:ed:74:d5:
06:f1:c8:36:50:cf:aa:66:8d:a2:52:36:9e:d5:1a:
d0:bb:15:4f:0e:b4:52:17:9d:bb:0a:6c:e8:a6:e2:
b0:30:e4:f3:06:d6:59:8a:f3:92:9d:b1:6f:65:3d:
1e:df:a0:27:0f:51:33:12:3f:7c:b0:67:da:b8:44:
a8:10:96:c4:14:a1:be:4d:e1:3e:5e:14:89:ef:bb:
94:ee:ec:2f:b9:6c:30:63:a2:e6:b2:3b:ec:8c:60:
10:09:04:40:5c:a3:74:c7:c6:0d:ee:d1:3f:f6:d9:
e5:25:2b:05:aa:70:c5:55:03:6c:fd:29:3c:d0:3c:
65:5b:06:65:2a:6b:d7:28:e1:cb:39:fc:e9:1e:bc:
80:52:1a:ef:34:b5:84:17:10:33:6e:6e:b8:f1:a9:
e2:92:0a:5c:3a:ec:0a:66:7a:7b:11:8e:87:d0:e5:
e1:15:8b:fa:f6:0d:9d:24:4e:60:d4:94:92:44:10:
3c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:45:85:BA:6C:D0:DC:AB:08:41:83:DA:3C:AD:37:72:93:35:90:CE
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/00WFumzQ3KsIQYPaPK03cpM1kM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.39.0/24
45.159.251.0/24
193.43.146.0/24
193.57.137.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:42:9e:df:f5:a6:ea:0b:ba:89:26:a3:6c:a2:62:fc:22:86:
de:60:d6:6f:fc:e5:b9:74:aa:14:db:ea:55:a0:70:f5:0c:27:
90:c2:48:bd:15:2b:bd:4d:30:d7:c3:a0:c9:d4:fd:69:c6:29:
56:c3:6b:a2:da:e2:21:b2:30:d2:ac:a2:ee:d1:7f:e8:e9:b7:
70:72:0b:fa:4f:2b:0d:3c:d8:a7:c4:7d:68:de:d8:11:ef:b2:
7c:af:f8:be:0f:c8:3a:ef:1c:bd:b6:1e:c0:fc:b1:57:8d:6c:
f8:54:10:ae:90:34:92:e9:a8:a7:ef:64:9c:46:40:54:62:fa:
d6:52:0e:65:4d:9a:6d:f6:ad:02:ee:c2:fe:f0:06:e7:36:b2:
67:c7:d5:12:71:ba:d7:c1:de:f1:85:08:87:08:02:be:24:e8:
c3:b1:00:fb:34:ae:d7:8c:a1:bc:06:b3:9a:d1:49:ab:d8:58:
c5:bd:15:c1:1d:4b:34:41:06:bd:61:30:9a:1c:24:e2:c5:05:
1e:78:cd:1b:16:85:7f:71:ce:ec:ad:35:7e:d7:05:4c:af:09:
96:8e:60:65:24:ec:e0:a6:57:4c:7b:7e:4c:52:1d:32:08:8f:
e5:0f:5e:74:02:e7:17:0d:28:a0:10:82:60:f9:cf:12:29:de:
ad:c8:8e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:22:58 2025 by rpki-client