Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/weNgwIA48_rsRspTEOQkflneJ2o.roa
File: weNgwIA48_rsRspTEOQkflneJ2o.roa (raw, json)
Hash identifier: baMtWqaZx8ecWxf9Y9oBJPogfPJJVeJm66CO34ozZyM=
Subject key identifier: C1:E3:60:C0:80:38:F3:FA:EC:46:CA:53:10:E4:24:7E:59:DE:27:6A
Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial: 01982DFD6A6C79A31D8812482FCF8927EE16
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/weNgwIA48_rsRspTEOQkflneJ2o.roa
Signing time: Mon 21 Jul 2025 17:17:19 +0000
ROA not before: Mon 21 Jul 2025 17:17:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44559
IP address blocks: 45.147.148.0/24 maxlen: 24
45.147.149.0/24 maxlen: 24
45.147.150.0/24 maxlen: 24
45.147.151.0/24 maxlen: 24
77.83.152.0/24 maxlen: 24
77.83.153.0/24 maxlen: 24
77.83.154.0/24 maxlen: 24
77.83.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 11:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2d:fd:6a:6c:79:a3:1d:88:12:48:2f:cf:89:27:ee:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Validity
Not Before: Jul 21 17:17:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1e360c08038f3faec46ca5310e4247e59de276a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:38:14:e7:7b:95:d7:6e:0b:d3:98:ee:57:0c:
91:75:64:eb:8a:96:15:0d:de:2a:f1:41:ef:2b:ea:
47:8b:cd:28:77:0a:1a:e2:81:be:be:93:11:92:14:
65:72:c5:92:6c:c8:80:e2:7c:2c:03:1b:6f:17:ac:
ec:e6:68:f2:57:c6:56:c1:5e:2b:1e:5a:78:3b:dd:
53:d6:7f:92:f2:ad:29:88:68:54:19:94:db:00:1c:
31:4a:98:92:a0:75:11:34:d6:58:94:3f:3c:d5:97:
27:6a:07:51:5c:90:d2:eb:7f:fe:45:9a:8f:0a:37:
08:5c:c4:b4:ab:72:17:cd:53:05:97:93:f4:14:c9:
6e:c1:a8:0f:4c:7c:31:94:7a:c8:18:70:09:02:a7:
04:64:a5:18:86:5d:6f:8a:cb:f0:e1:1c:f8:1f:bb:
30:c6:c5:c7:be:5d:1c:8d:ea:51:5b:27:10:70:db:
f2:b4:34:90:2c:0e:04:52:be:f5:43:09:5f:5f:c1:
87:13:a4:cd:1a:cb:0b:92:3a:a3:45:16:5f:a7:66:
dd:82:81:c6:07:47:fa:62:20:de:2b:ee:b3:59:65:
ae:86:75:bf:67:70:40:86:67:15:c7:a1:e5:98:e1:
3b:65:1a:80:c8:15:ae:26:14:b9:e2:2c:71:be:a8:
ca:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E3:60:C0:80:38:F3:FA:EC:46:CA:53:10:E4:24:7E:59:DE:27:6A
X509v3 Authority Key Identifier:
keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/weNgwIA48_rsRspTEOQkflneJ2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.148.0/22
77.83.152.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:57:79:d3:ac:50:3e:ec:b9:38:5c:a5:18:b8:df:25:06:9a:
bc:77:d4:7d:96:9d:13:57:7e:57:eb:92:ec:67:19:f2:01:29:
da:38:65:b1:93:b1:c1:66:32:a4:fd:21:c1:e7:8d:66:a7:e3:
45:a1:5d:91:f3:d8:9f:90:29:a0:37:be:db:d4:a0:d1:3e:01:
df:8a:7c:17:17:7e:73:32:67:ca:82:82:f7:e7:83:9e:64:c5:
66:a6:69:36:32:cd:90:25:22:21:22:0e:c8:c1:0d:aa:33:48:
87:6f:11:5d:e1:c4:2d:b8:e4:7f:cf:ff:39:a3:19:b3:1a:0e:
c9:73:b2:ac:1d:f1:57:53:91:f0:98:68:3a:5c:e7:ef:d5:22:
3c:96:04:78:4a:84:58:2d:43:9b:e8:ce:4f:58:96:8e:72:af:
85:c5:58:db:a6:41:52:e9:67:89:fe:a6:fc:50:ad:06:16:e8:
ee:44:1b:12:b8:2c:0f:cb:4b:8a:a0:73:f9:8f:b8:3d:d6:f5:
67:57:24:b4:b2:2a:31:41:0c:c9:9c:5f:a0:15:67:94:8f:86:
72:e3:e5:9e:ce:b5:3e:6b:a9:5a:1a:39:dd:01:23:c8:7b:d4:
98:80:fd:ea:a2:c2:c8:a9:e0:b5:ff:b8:1e:1b:03:9e:dc:c1:
ab:28:f0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 21:04:34 2025 by rpki-client