Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/KWNedqw670XuTxmvtHYnE5SH7D8.roa
File: KWNedqw670XuTxmvtHYnE5SH7D8.roa (raw, json)
Hash identifier: Hgt+nZNfMr/B5igG7xHH3ux4Cc9OLLDDHgH64+CPerA=
Subject key identifier: 29:63:5E:76:AC:3A:EF:45:EE:4F:19:AF:B4:76:27:13:94:87:EC:3F
Certificate issuer: /CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Certificate serial: 0197E52824F4A70AE7AFB6D1DCC69C944F54
Authority key identifier: 2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/KWNedqw670XuTxmvtHYnE5SH7D8.roa
Signing time: Mon 07 Jul 2025 13:51:42 +0000
ROA not before: Mon 07 Jul 2025 13:51:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197143
IP address blocks: 46.245.160.0/24 maxlen: 24
46.245.161.0/24 maxlen: 24
46.245.162.0/24 maxlen: 24
46.245.163.0/24 maxlen: 24
46.245.164.0/24 maxlen: 24
46.245.165.0/24 maxlen: 24
46.245.166.0/24 maxlen: 24
46.245.167.0/24 maxlen: 24
93.93.105.0/24 maxlen: 24
93.93.106.0/24 maxlen: 24
93.93.107.0/24 maxlen: 24
185.33.128.0/24 maxlen: 24
185.33.129.0/24 maxlen: 24
185.33.130.0/24 maxlen: 24
185.33.131.0/24 maxlen: 24
185.218.218.0/24 maxlen: 24
185.218.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e5:28:24:f4:a7:0a:e7:af:b6:d1:dc:c6:9c:94:4f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Validity
Not Before: Jul 7 13:51:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29635e76ac3aef45ee4f19afb47627139487ec3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:70:fd:48:cd:93:88:8b:0a:c2:d9:93:60:85:
59:15:65:16:d2:07:11:f3:d3:9c:89:34:a1:ef:52:
df:62:b4:48:34:ab:67:76:ed:de:e3:21:b4:39:f2:
73:14:c9:8f:10:ac:e9:bf:a9:a2:9b:4a:d2:1c:b1:
9b:1a:9f:b8:dc:89:dc:d0:16:99:ea:79:cf:5e:76:
7d:84:0d:2a:f0:c7:ff:3d:ae:40:cb:41:bf:b0:9f:
90:64:ed:8c:50:4c:3d:5a:6a:56:df:c9:11:5c:6b:
37:a4:9c:84:29:30:6f:70:1a:52:b4:2b:ed:3f:f4:
ec:15:aa:1d:61:30:29:ee:c6:19:2b:4e:3e:90:89:
0f:85:90:47:92:4c:f6:43:f4:91:1c:dc:2e:a2:ab:
bc:4e:65:4f:c7:95:21:61:8d:d6:a8:d8:05:4b:16:
3c:67:66:e0:54:8d:5f:73:ee:b2:9e:73:18:7d:01:
a1:a4:a9:e0:17:bf:b7:66:f8:14:76:92:36:0e:14:
4b:d8:d1:85:91:81:46:fb:f2:4f:fd:47:dc:11:b0:
b5:58:04:9f:c9:b2:51:65:22:97:ae:e0:01:dc:6f:
8f:6e:aa:de:28:a0:84:ad:46:7b:ac:b8:8a:0e:80:
aa:ef:fb:24:16:e5:49:46:1b:d3:f1:f4:7c:a3:f2:
8c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:63:5E:76:AC:3A:EF:45:EE:4F:19:AF:B4:76:27:13:94:87:EC:3F
X509v3 Authority Key Identifier:
keyid:2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/KWNedqw670XuTxmvtHYnE5SH7D8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.160.0/21
93.93.105.0-93.93.107.255
185.33.128.0/22
185.218.218.0/23
Signature Algorithm: sha256WithRSAEncryption
44:e8:e6:3f:39:ce:de:26:89:5a:0e:c5:d0:5e:3d:0c:32:b0:
ec:c2:e5:cd:b2:d9:01:27:f4:06:de:ee:88:ce:41:8b:99:4c:
9a:f2:4f:15:f3:24:17:e9:d9:3f:4c:69:17:f4:44:ee:54:0b:
d1:3b:88:15:dd:c3:8a:87:78:b4:a6:a4:b3:79:09:ef:fe:c2:
0c:6a:6c:a0:48:09:62:34:5d:0b:f9:ac:6e:7c:92:dd:56:92:
19:55:f3:d7:76:e3:9d:84:d1:99:a9:e2:3b:1e:8d:8f:ff:c2:
4d:d2:90:ca:a0:ef:b9:53:bf:2a:7d:b0:82:d9:ea:1a:cd:3e:
25:2c:4e:a3:9e:f5:57:ce:23:ac:51:95:66:9f:dd:75:6b:df:
99:63:51:11:b0:b1:24:c3:32:a6:3d:56:b3:e3:89:2e:62:cd:
a7:8e:2c:a0:4b:13:30:4f:e8:19:a9:99:f4:dd:84:4f:d0:61:
4f:4a:8b:6f:e0:f0:be:5b:34:77:0c:12:ec:5d:02:34:fd:b1:
48:41:0f:f8:68:3b:a5:3e:6f:8c:be:a3:59:5b:25:0f:f9:6b:
4d:50:41:15:21:ac:4a:cf:cc:85:8e:88:e5:9f:5c:f5:cb:47:
3d:8e:4d:36:73:49:10:b3:b4:0d:96:83:30:0a:ad:0c:c4:ee:
14:57:0f:9c
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZflKCT0pwrnr7bR3MaclE9UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMTE3MmMxYzczZjk3MWE5ZmIyZTg5Yjc5MTcyMDBjNTAw
ZWU0MDcwHhcNMjUwNzA3MTM1MTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTYzNWU3NmFjM2FlZjQ1ZWU0ZjE5YWZiNDc2MjcxMzk0ODdlYzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXD9SM2TiIsKwtmTYIVZFWUW0gcR
89OciTSh71LfYrRINKtndu3e4yG0OfJzFMmPEKzpv6mim0rSHLGbGp+43Inc0BaZ
6nnPXnZ9hA0q8Mf/Pa5Ay0G/sJ+QZO2MUEw9WmpW38kRXGs3pJyEKTBvcBpStCvt
P/TsFaodYTAp7sYZK04+kIkPhZBHkkz2Q/SRHNwuoqu8TmVPx5UhYY3WqNgFSxY8
Z2bgVI1fc+6ynnMYfQGhpKngF7+3ZvgUdpI2DhRL2NGFkYFG+/JP/UfcEbC1WASf
ybJRZSKXruAB3G+PbqreKKCErUZ7rLiKDoCq7/skFuVJRhvT8fR8o/KMWwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFCljXnasOu9F7k8Zr7R2JxOUh+w/MB8GA1UdIwQY
MBaAFC0RcsHHP5can7Lom3kXIAxQDuQHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJGeXdjY19seHFmc3VpYmVSY2dERkFPNUFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS83OWFjYTktNTFkZC00ZjIyLWI0MDQt
ZDUzODY2ZTkxODZhLzEvS1dOZWRxdzY3MFh1VHhtdnRIWW5FNVNIN0Q4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS83OWFjYTktNTFkZC00ZjIyLWI0MDQtZDUzODY2ZTkxODZh
LzEvTFJGeXdjY19seHFmc3VpYmVSY2dERkFPNUFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQDLvWgMAwD
BABdXWkDBAJdXWgDBAK5IYADBAG52towDQYJKoZIhvcNAQELBQADggEBAETo5j85
zt4miVoOxdBePQwysOzC5c2y2QEn9Abe7ojOQYuZTJryTxXzJBfp2T9MaRf0RO5U
C9E7iBXdw4qHeLSmpLN5Ce/+wgxqbKBICWI0XQv5rG58kt1WkhlV89d2452E0Zmp
4jsejY//wk3SkMqg77lTvyp9sILZ6hrNPiUsTqOe9VfOI6xRlWaf3XVr35ljURGw
sSTDMqY9VrPjiS5izaeOLKBLEzBP6BmpmfTdhE/QYU9Ki2/g8L5bNHcMEuxdAjT9
sUhBD/hoO6U+b4y+o1lbJQ/5a01QQRUhrErPzIWOiOWfXPXLRz2OTTZzSRCztA2W
gzAKrQzE7hRXD5w=
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:14:04 2025 by rpki-client