Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/w5ap-OFRAP5ztIPKRxiD6pDT1v8.roa
File: w5ap-OFRAP5ztIPKRxiD6pDT1v8.roa (raw, json)
Hash identifier: UGtK6mkQR0p+bkmWUcnTpaGOQfPntDOlSxu2DwZdk1o=
Subject key identifier: C3:96:A9:F8:E1:51:00:FE:73:B4:83:CA:47:18:83:EA:90:D3:D6:FF
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 0197C62B19343668AA31180C1B0963A29DBC
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/w5ap-OFRAP5ztIPKRxiD6pDT1v8.roa
Signing time: Tue 01 Jul 2025 13:26:42 +0000
ROA not before: Tue 01 Jul 2025 13:26:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48147
IP address blocks: 46.38.139.0/24 maxlen: 24
212.16.86.0/24 maxlen: 24
212.80.18.0/23 maxlen: 23
212.80.18.0/24 maxlen: 24
212.80.19.0/24 maxlen: 24
212.80.20.0/22 maxlen: 22
212.80.20.0/24 maxlen: 24
212.80.21.0/24 maxlen: 24
212.80.22.0/24 maxlen: 24
212.80.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:2b:19:34:36:68:aa:31:18:0c:1b:09:63:a2:9d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jul 1 13:26:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c396a9f8e15100fe73b483ca471883ea90d3d6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ab:00:f6:f0:74:b5:05:d9:fe:4c:cf:c8:8f:
43:1d:27:cb:b1:d8:65:07:89:30:94:98:24:d0:68:
57:0c:be:4b:09:7e:5f:ee:50:b8:d8:eb:3b:54:18:
32:5d:ad:b0:c3:7f:d3:9a:c7:fe:11:27:60:0a:3d:
fa:e7:ab:7a:f7:d1:a5:fb:8f:37:84:d7:25:02:d1:
4f:1e:f1:53:fd:b5:ad:1c:86:71:37:37:39:ac:3f:
fe:59:2b:eb:a2:de:7d:29:c4:67:bf:69:fb:ec:64:
e4:6e:73:f2:8c:64:d5:1c:43:85:5f:b4:66:a0:70:
34:69:6e:2b:20:e2:39:8e:8c:56:fa:44:f7:66:b6:
32:59:77:2d:af:80:b1:81:1c:b3:24:28:b1:42:f6:
e1:d9:1f:37:e2:8c:35:6d:19:33:ea:f5:f6:04:a1:
8f:97:2a:cc:81:10:a3:4b:36:7b:fc:e7:8c:43:2c:
10:36:74:9c:85:ba:fa:0e:68:68:5e:aa:22:e2:5d:
cd:dc:07:8e:24:69:a1:98:fc:da:ca:c2:fd:2e:88:
7d:f9:b6:f9:7b:f1:1d:6f:ae:fe:5c:ad:3f:04:77:
fe:9c:9d:7c:cf:24:63:68:a5:83:af:1e:e6:56:6a:
f0:65:04:ca:76:f7:19:58:ef:95:37:5f:d7:c4:af:
c7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:96:A9:F8:E1:51:00:FE:73:B4:83:CA:47:18:83:EA:90:D3:D6:FF
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/w5ap-OFRAP5ztIPKRxiD6pDT1v8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.139.0/24
212.16.86.0/24
212.80.18.0-212.80.23.255
Signature Algorithm: sha256WithRSAEncryption
09:f1:93:5a:e3:0f:a1:00:d8:af:98:fc:98:9c:65:58:86:31:
4e:68:15:56:dc:ec:52:d9:86:cc:47:a6:b4:0d:17:c3:60:ab:
b4:88:9b:fe:10:1a:24:cb:20:10:f5:f8:45:ee:c4:de:75:cb:
ae:08:d5:bd:3d:04:38:e7:f3:fa:bb:3f:4c:78:4d:83:12:df:
32:f9:03:50:8a:e1:5a:68:c4:6b:bf:40:fd:fd:39:94:2e:2f:
31:78:72:5f:d7:f8:80:66:57:be:a5:d7:16:a6:28:9f:65:09:
8d:a2:94:d3:61:c5:bf:b9:b3:07:fd:cc:90:ce:b9:96:7c:ca:
8a:5c:41:13:1a:29:80:07:51:59:54:fd:86:7e:bb:fa:32:d5:
3a:5b:a7:72:48:4a:97:5d:df:b6:19:81:41:a9:46:db:75:79:
d5:04:cc:26:47:c5:d6:64:bc:fc:23:c9:49:f6:97:1e:ac:91:
a7:1f:a8:98:b2:42:db:87:9b:89:d1:30:83:d8:8c:e6:66:23:
28:c7:0e:65:58:8a:a4:05:4c:96:b4:39:5c:00:99:8f:e0:90:
56:78:81:0e:ea:57:ad:b9:95:b7:02:fb:67:80:13:a9:1a:01:
8b:1c:46:b7:c4:ae:ac:65:76:b3:7d:d3:a8:de:3a:35:2f:bc:
10:18:c2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:19:30 2025 by rpki-client