Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/u_wia2yxRlpryVndP86ly3_GEnc.roa
File: u_wia2yxRlpryVndP86ly3_GEnc.roa (raw, json)
Hash identifier: SBv3n5KsCTwypSWINDlnF/Qj4suHeZIoa23Zxmc/Pr0=
Subject key identifier: BB:FC:22:6B:6C:B1:46:5A:6B:C9:59:DD:3F:CE:A5:CB:7F:C6:12:77
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0198A02D60921A69FE8BC5471D4656762A60
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/u_wia2yxRlpryVndP86ly3_GEnc.roa
Signing time: Tue 12 Aug 2025 21:26:25 +0000
ROA not before: Tue 12 Aug 2025 21:26:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 45.43.146.0/24 maxlen: 24
104.222.169.0/24 maxlen: 24
104.222.170.0/24 maxlen: 24
104.222.171.0/24 maxlen: 24
104.222.172.0/24 maxlen: 24
104.222.173.0/24 maxlen: 24
104.222.174.0/24 maxlen: 24
104.222.175.0/24 maxlen: 24
104.233.20.0/24 maxlen: 24
104.239.13.0/24 maxlen: 24
104.239.16.0/22 maxlen: 22
104.239.20.0/22 maxlen: 22
104.239.32.0/22 maxlen: 22
104.239.36.0/22 maxlen: 22
104.239.54.0/24 maxlen: 24
104.239.57.0/24 maxlen: 24
104.239.90.0/23 maxlen: 23
104.239.92.0/23 maxlen: 23
104.243.193.0/24 maxlen: 24
104.243.194.0/24 maxlen: 24
104.243.195.0/24 maxlen: 24
104.243.196.0/24 maxlen: 24
104.243.197.0/24 maxlen: 24
104.243.198.0/24 maxlen: 24
104.243.207.0/24 maxlen: 24
216.173.80.0/23 maxlen: 23
216.173.122.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:2d:60:92:1a:69:fe:8b:c5:47:1d:46:56:76:2a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Aug 12 21:26:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bbfc226b6cb1465a6bc959dd3fcea5cb7fc61277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b0:14:b5:9e:d4:09:c0:aa:a7:c1:53:92:5c:
2b:b8:cc:ad:5e:d3:42:8b:03:f3:f4:c4:17:1f:2c:
fa:b5:0d:0d:32:29:dd:38:4f:c4:af:c8:c5:e4:1a:
42:6b:e7:09:17:54:63:e8:dc:fa:2a:08:41:39:77:
48:d3:b4:6c:d4:36:fa:6d:1c:36:92:dd:98:85:6e:
7f:46:b0:ad:dc:3d:ff:77:bb:20:9d:41:e4:1d:d6:
83:68:6d:8b:8e:b1:e6:9c:8f:e1:99:e5:d9:a6:cc:
9b:3c:06:77:f6:62:ca:02:a1:87:de:7f:40:d3:f5:
9c:a5:ae:19:89:03:60:34:fb:50:54:36:6f:ab:86:
81:ab:a0:d5:16:72:02:c4:06:e6:94:6f:0e:64:21:
c3:89:4e:21:b8:b1:69:7d:93:35:6a:28:7c:31:e2:
25:1d:0c:8b:38:ba:13:23:17:79:bc:80:27:1d:6e:
7e:19:a4:26:d3:cf:44:2c:db:70:60:ee:10:df:d4:
8b:2d:2c:1f:5d:04:31:39:17:02:6b:e9:5a:59:a5:
f0:18:e0:26:d6:fb:ba:63:b6:74:d5:f6:2c:ca:99:
8f:3d:e9:28:21:9c:32:78:c0:d7:db:4f:84:2d:3a:
f4:6e:70:36:c9:06:39:66:b9:80:fa:39:c5:02:83:
25:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FC:22:6B:6C:B1:46:5A:6B:C9:59:DD:3F:CE:A5:CB:7F:C6:12:77
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/u_wia2yxRlpryVndP86ly3_GEnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.146.0/24
104.222.169.0-104.222.175.255
104.233.20.0/24
104.239.13.0/24
104.239.16.0/21
104.239.32.0/21
104.239.54.0/24
104.239.57.0/24
104.239.90.0-104.239.93.255
104.243.193.0-104.243.198.255
104.243.207.0/24
216.173.80.0/23
216.173.122.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:7b:c6:a0:6f:e1:65:42:ba:8c:ac:4b:0d:42:27:38:b5:06:
5e:04:6d:77:7d:e1:ee:75:ce:23:78:1f:33:70:87:d3:d2:3b:
e8:bf:27:8e:5b:0a:c9:94:7e:56:a5:49:1f:b1:29:94:69:cc:
86:d2:cf:4e:a7:2b:86:6b:5c:09:df:3c:a8:5b:69:ef:f6:03:
46:3b:48:cc:23:50:d4:8a:dd:85:89:65:88:cb:6f:a9:35:ec:
de:b8:7e:49:95:f4:9c:55:b4:84:81:88:18:4b:e8:24:88:0d:
75:cc:84:99:1c:de:d6:2c:b8:8d:5a:dd:88:9f:19:af:35:88:
5c:99:38:8b:45:62:75:6a:b7:24:7a:12:59:a4:bb:c6:15:98:
13:af:e8:c8:9d:49:1d:87:29:33:a6:67:c5:17:a2:11:f0:e9:
70:ca:38:02:65:85:a2:97:0b:bb:a5:c9:5b:2a:a0:e7:e0:68:
b4:12:a3:3c:0b:bc:25:de:ed:ac:47:eb:a0:bf:c5:a9:9d:67:
97:08:97:58:7c:c8:49:a1:18:2b:ef:13:05:98:d6:c1:f7:77:
e7:db:0b:99:07:d5:1c:3e:e8:44:72:0e:e7:82:d8:64:e4:1a:
a5:5b:a4:c9:ff:14:45:c6:eb:3d:4e:79:2e:06:d9:14:83:64:
bc:22:3d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 06:58:35 2025 by rpki-client