Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wtdVCL_vW5DHi-a_XtUsZ9JKKCw.roa
File: wtdVCL_vW5DHi-a_XtUsZ9JKKCw.roa (raw, json)
Hash identifier: JT8633z6qqiHZIgSN23W3yJc2J/8lJJEZ1oYIJiRcWs=
Subject key identifier: C2:D7:55:08:BF:EF:5B:90:C7:8B:E6:BF:5E:D5:2C:67:D2:4A:28:2C
Certificate issuer: /CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
Certificate serial: 0195D63B5E38A5E3DD43C3D779F26F5DD5CF
Authority key identifier: C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wtdVCL_vW5DHi-a_XtUsZ9JKKCw.roa
Signing time: Thu 27 Mar 2025 06:12:49 +0000
ROA not before: Thu 27 Mar 2025 06:12:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205368
IP address blocks: 46.182.172.0/23 maxlen: 23
46.182.172.0/24 maxlen: 24
46.182.173.0/24 maxlen: 24
46.182.174.0/24 maxlen: 24
91.237.150.0/24 maxlen: 24
185.215.52.0/22 maxlen: 22
185.215.52.0/24 maxlen: 24
185.215.54.0/24 maxlen: 24
185.215.55.0/24 maxlen: 24
2a02:29f8::/32 maxlen: 32
2a0b:a3c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 15:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d6:3b:5e:38:a5:e3:dd:43:c3:d7:79:f2:6f:5d:d5:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
Validity
Not Before: Mar 27 06:12:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2d75508bfef5b90c78be6bf5ed52c67d24a282c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:38:2b:33:5e:e4:f0:f0:ce:7b:48:d8:4d:58:
d7:b2:db:ad:b4:bf:4a:14:6a:ac:86:92:40:28:1d:
6e:42:c7:d4:71:15:9b:2c:c2:48:c2:dc:8f:0d:cf:
4b:f2:ac:94:7b:6e:d7:04:5a:3a:12:77:d3:4e:cf:
60:86:ed:43:3b:ee:31:4d:33:d0:af:52:4f:6e:b4:
ca:e0:80:77:12:b6:d8:90:d0:93:35:69:d3:24:43:
c6:96:62:2e:cc:e9:57:b1:ca:2f:a5:53:60:86:9f:
ba:6e:03:50:c1:2b:16:89:37:88:cb:39:d2:1f:46:
cf:d2:07:0b:2b:46:46:78:d8:b9:fd:fa:ae:71:29:
80:10:54:4f:ee:cc:55:31:b3:7a:3a:4c:3b:c1:23:
5d:11:1b:75:15:77:58:91:90:96:6b:a8:cc:29:26:
42:8e:55:95:f3:29:1b:6a:ff:f5:8a:43:9e:0f:b3:
69:bf:3e:57:3d:b4:d9:d6:ef:44:ab:77:71:c2:48:
75:78:b4:f6:a4:7d:49:ea:11:bc:44:ad:b8:6d:2d:
ed:50:48:3d:4b:a0:6c:d6:25:af:6b:ce:4e:2d:5a:
c5:37:37:8a:50:68:ce:03:b2:e2:cf:e9:a9:0a:3d:
34:51:61:43:e2:ac:94:77:88:bb:0a:3a:5e:2f:4f:
42:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D7:55:08:BF:EF:5B:90:C7:8B:E6:BF:5E:D5:2C:67:D2:4A:28:2C
X509v3 Authority Key Identifier:
keyid:C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wtdVCL_vW5DHi-a_XtUsZ9JKKCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.182.172.0-46.182.174.255
91.237.150.0/24
185.215.52.0/22
IPv6:
2a02:29f8::/32
2a0b:a3c0::/29
Signature Algorithm: sha256WithRSAEncryption
b1:cc:ad:2f:a9:8d:88:ed:5d:40:e6:13:43:2f:7f:06:34:5a:
7c:99:64:19:5c:35:4d:01:5d:1c:29:27:05:86:1f:83:89:00:
ea:51:96:5b:21:53:88:21:42:b7:cd:a6:ac:5c:2e:d0:5d:08:
77:e5:43:1f:b7:0a:23:c1:93:d8:be:30:76:7f:e4:06:00:2d:
46:59:2a:3e:8c:3a:6c:f1:04:77:ba:6c:d5:68:33:d9:c2:4f:
99:b7:f5:b2:b5:f6:62:e5:54:10:ad:4f:b0:75:de:af:ff:56:
19:08:e9:ab:ca:75:89:f6:1b:3a:8a:1f:cd:cb:03:0b:35:23:
2f:eb:4c:42:52:1d:e8:08:28:bd:64:ed:dc:49:23:a4:53:32:
82:ad:68:93:35:f8:eb:25:12:cf:9d:ed:4b:23:0f:43:26:cd:
2c:17:b8:45:1a:a9:a3:fb:be:c2:d0:30:30:6f:8c:bc:89:27:
4a:01:8e:2f:86:21:32:a7:61:14:d8:cc:3e:46:da:83:ca:ed:
3f:ce:00:31:63:83:46:88:08:f8:e1:5e:34:94:79:90:33:93:
68:32:f7:bb:14:4f:b2:0f:5c:a7:f5:e4:23:2e:b1:a6:95:f8:
cf:f3:d8:84:43:97:27:01:8b:fe:2b:c5:8a:df:23:50:d7:4f:
85:d8:de:5b
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZXWO144pePdQ8PXefJvXdXPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMDRjZDdkZjg0YzMxOWQxOWFmMzViMTEwNGYxNzNlYmEy
YzZkYmQwHhcNMjUwMzI3MDYxMjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmQ3NTUwOGJmZWY1YjkwYzc4YmU2YmY1ZWQ1MmM2N2QyNGEyODJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozgrM17k8PDOe0jYTVjXstuttL9K
FGqshpJAKB1uQsfUcRWbLMJIwtyPDc9L8qyUe27XBFo6EnfTTs9ghu1DO+4xTTPQ
r1JPbrTK4IB3ErbYkNCTNWnTJEPGlmIuzOlXscovpVNghp+6bgNQwSsWiTeIyznS
H0bP0gcLK0ZGeNi5/fqucSmAEFRP7sxVMbN6Okw7wSNdERt1FXdYkZCWa6jMKSZC
jlWV8ykbav/1ikOeD7Npvz5XPbTZ1u9Eq3dxwkh1eLT2pH1J6hG8RK24bS3tUEg9
S6Bs1iWva85OLVrFNzeKUGjOA7Liz+mpCj00UWFD4qyUd4i7CjpeL09CnwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFMLXVQi/71uQx4vmv17VLGfSSigsMB8GA1UdIwQY
MBaAFMEEzX34TDGdGa81sRBPFz66LG29MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1FUTmZmaE1NWjBacnpXeEVFOFhQcm9zYmIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC80ZWUxOWMtOTQ2Mi00MzkwLWE0MmQt
N2VmZjhmMWU5MWNkLzEvd3RkVkNMX3ZXNURIaS1hX1h0VXNaOUpLS0N3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC80ZWUxOWMtOTQ2Mi00MzkwLWE0MmQtN2VmZjhmMWU5MWNk
LzEvd1FUTmZmaE1NWjBacnpXeEVFOFhQcm9zYmIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODAgBAIAATAaMAwDBAIutqwD
BAAutq4DBABb7ZYDBAK51zQwFAQCAAIwDgMFACoCKfgDBQMqC6PAMA0GCSqGSIb3
DQEBCwUAA4IBAQCxzK0vqY2I7V1A5hNDL38GNFp8mWQZXDVNAV0cKScFhh+DiQDq
UZZbIVOIIUK3zaasXC7QXQh35UMftwojwZPYvjB2f+QGAC1GWSo+jDps8QR3umzV
aDPZwk+Zt/WytfZi5VQQrU+wdd6v/1YZCOmrynWJ9hs6ih/NywMLNSMv60xCUh3o
CCi9ZO3cSSOkUzKCrWiTNfjrJRLPne1LIw9DJs0sF7hFGqmj+77C0DAwb4y8iSdK
AY4vhiEyp2EU2Mw+RtqDyu0/zgAxY4NGiAj44V40lHmQM5NoMve7FE+yD1yn9eQj
LrGmlfjP89iEQ5cnAYv+K8WK3yNQ10+F2N5b
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:31:59 2025 by rpki-client