Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/Wtm1hEu0EgTyGMBa9juYIdQh6Nk.roa
File: Wtm1hEu0EgTyGMBa9juYIdQh6Nk.roa (raw, json)
Hash identifier: q80H+45kJPLamUKd1bgH9ekpSHDPYqKcau/SDD5wQoY=
Subject key identifier: 5A:D9:B5:84:4B:B4:12:04:F2:18:C0:5A:F6:3B:98:21:D4:21:E8:D9
Certificate issuer: /CN=7c67ee3de881562eea7df2e3232cdb32b54fe037
Certificate serial: 0198EA4A73075C1F23304405336ECF4111D5
Authority key identifier: 7C:67:EE:3D:E8:81:56:2E:EA:7D:F2:E3:23:2C:DB:32:B5:4F:E0:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGfuPeiBVi7qffLjIyzbMrVP4Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/Wtm1hEu0EgTyGMBa9juYIdQh6Nk.roa
Signing time: Wed 27 Aug 2025 06:50:04 +0000
ROA not before: Wed 27 Aug 2025 06:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39642
IP address blocks: 37.75.160.0/19 maxlen: 19
77.68.128.0/17 maxlen: 17
78.156.96.0/19 maxlen: 19
83.137.120.0/21 maxlen: 21
85.191.128.0/17 maxlen: 17
85.203.128.0/17 maxlen: 17
89.249.0.0/20 maxlen: 20
92.246.0.0/19 maxlen: 19
95.138.208.0/20 maxlen: 20
139.45.0.0/17 maxlen: 17
178.21.88.0/21 maxlen: 21
178.157.192.0/18 maxlen: 18
185.17.216.0/22 maxlen: 22
185.101.88.0/22 maxlen: 22
188.114.128.0/18 maxlen: 18
217.198.208.0/20 maxlen: 20
2a00:1f98::/29 maxlen: 29
2a02:25c8::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fGfuPeiBVi7qffLjIyzbMrVP4Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 22:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ea:4a:73:07:5c:1f:23:30:44:05:33:6e:cf:41:11:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c67ee3de881562eea7df2e3232cdb32b54fe037
Validity
Not Before: Aug 27 06:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ad9b5844bb41204f218c05af63b9821d421e8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bc:02:8d:76:a7:d7:2a:83:d3:e6:ce:4e:77:
c8:30:d7:97:3d:5d:2e:c1:41:8b:d9:6e:11:b6:67:
1f:e2:0c:bd:ba:11:1f:a1:06:15:4d:bc:8b:f9:86:
eb:8c:51:01:b2:55:76:36:12:02:56:1c:e0:5b:44:
1a:1f:b5:42:c7:6b:1b:4d:68:5e:c0:c3:12:a9:e7:
fd:60:60:07:47:e7:09:a0:a3:66:d6:2a:59:a8:33:
4d:3a:1e:fa:66:f8:de:da:6a:f4:76:f2:e2:54:cf:
97:38:98:4f:63:0f:78:f9:16:4c:6f:ba:cd:db:4a:
69:af:ab:a0:83:3a:2a:f0:cf:8f:60:2c:0e:45:7f:
90:40:74:0b:fb:8c:1d:69:1e:a3:b7:56:b3:03:24:
86:67:33:78:ad:79:8a:52:10:04:24:e0:12:d2:04:
67:0e:0c:19:bc:ea:84:79:25:12:2a:a5:ea:9c:3d:
7b:83:13:40:e5:e5:a7:92:98:2c:5b:bb:2e:3d:60:
cc:43:0b:15:be:34:30:88:22:87:12:9b:5b:30:36:
a6:e8:54:a0:c4:03:03:18:6f:21:a9:e6:fb:aa:7b:
ff:2d:c5:53:c0:fb:4f:6f:19:6d:5d:c9:17:3c:f2:
d1:96:c5:2a:e6:2a:33:d8:5a:7e:23:7b:c9:c4:a6:
74:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D9:B5:84:4B:B4:12:04:F2:18:C0:5A:F6:3B:98:21:D4:21:E8:D9
X509v3 Authority Key Identifier:
keyid:7C:67:EE:3D:E8:81:56:2E:EA:7D:F2:E3:23:2C:DB:32:B5:4F:E0:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGfuPeiBVi7qffLjIyzbMrVP4Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/Wtm1hEu0EgTyGMBa9juYIdQh6Nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.75.160.0/19
77.68.128.0/17
78.156.96.0/19
83.137.120.0/21
85.191.128.0/17
85.203.128.0/17
89.249.0.0/20
92.246.0.0/19
95.138.208.0/20
139.45.0.0/17
178.21.88.0/21
178.157.192.0/18
185.17.216.0/22
185.101.88.0/22
188.114.128.0/18
217.198.208.0/20
IPv6:
2a00:1f98::/29
2a02:25c8::/29
Signature Algorithm: sha256WithRSAEncryption
7d:55:f5:ac:fa:f0:da:09:26:59:bd:5e:0f:5c:d0:34:c8:bb:
90:8c:9b:e4:30:1c:3b:e9:3d:3c:92:62:b0:17:1a:83:b7:b6:
6d:8b:33:f2:41:9c:8b:29:a4:5d:e1:34:b1:6e:ef:95:5a:87:
03:45:7d:9e:10:6c:05:34:42:b7:63:02:01:18:71:9d:ef:20:
4f:f1:c6:84:af:94:66:68:00:c2:5b:59:85:31:63:55:0d:6a:
27:6b:9c:bd:99:34:9a:e7:d2:8e:eb:cb:be:86:e0:33:99:04:
08:39:da:48:27:66:a1:7a:a8:d1:3b:23:a9:62:8d:ca:47:49:
c1:3f:e3:7d:ac:a5:10:eb:ce:f2:82:9a:ef:6e:75:d5:7a:11:
cd:fa:c2:7b:1c:78:42:9a:80:1e:af:4e:34:1b:10:b6:7f:fe:
2f:07:77:ec:59:5b:fa:66:b5:cf:01:b1:33:51:f3:d7:8f:3f:
14:00:e9:0e:59:39:13:58:1d:82:12:a3:55:b7:03:10:8a:e9:
e8:d8:a1:9b:82:b0:39:88:97:44:e5:1f:da:f6:2c:5b:50:9c:
5b:f5:6d:35:55:a1:2e:3c:b0:67:5e:b7:37:41:ad:07:a3:d2:
3d:1e:9f:13:fd:17:29:9a:f1:86:47:de:83:a6:d6:0f:56:31:
7b:3e:b7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 05:05:13 2025 by rpki-client