Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/wTe6nqB8fZi5LCCWrszMuZB2Wbc.roa
File: wTe6nqB8fZi5LCCWrszMuZB2Wbc.roa (raw, json)
Hash identifier: J68IWCsFvDV9cShA3lK5AicjeJ9rPLGBf/VEjmcr5l0=
Subject key identifier: C1:37:BA:9E:A0:7C:7D:98:B9:2C:20:96:AE:CC:CC:B9:90:76:59:B7
Certificate issuer: /CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Certificate serial: 01972C6BD908A35D686FD35D666E0D42FE51
Authority key identifier: 9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/wTe6nqB8fZi5LCCWrszMuZB2Wbc.roa
Signing time: Sun 01 Jun 2025 16:55:54 +0000
ROA not before: Sun 01 Jun 2025 16:55:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48847
IP address blocks: 185.176.208.0/22 maxlen: 22
185.176.208.0/24 maxlen: 24
185.176.208.0/27 maxlen: 27
185.176.209.0/24 maxlen: 24
185.176.210.0/24 maxlen: 24
185.176.210.48/29 maxlen: 29
185.176.210.104/29 maxlen: 29
185.176.211.0/24 maxlen: 24
185.176.211.224/27 maxlen: 27
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2c:6b:d9:08:a3:5d:68:6f:d3:5d:66:6e:0d:42:fe:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Validity
Not Before: Jun 1 16:55:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c137ba9ea07c7d98b92c2096aeccccb9907659b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bf:c4:38:51:1a:af:b9:89:2a:49:a6:9c:ef:
6d:2f:26:35:e1:e6:f7:dc:5d:b1:14:12:26:12:73:
84:f1:64:47:df:61:a4:09:4c:46:59:8b:40:6d:41:
df:3d:b9:d3:b3:29:e9:ce:7c:23:fd:bd:eb:47:99:
09:8b:b8:b6:59:3b:8c:90:2b:bf:86:9d:32:c1:1e:
78:bd:56:a5:70:10:9a:cd:8d:d4:ae:71:0c:5a:f6:
3f:08:1d:62:2a:50:9f:d4:18:85:b6:88:b4:28:98:
ca:86:c3:7e:b2:a7:f1:0a:ba:ac:3b:9b:90:6d:82:
3b:0f:51:73:3c:d2:79:11:04:1a:e4:59:11:d2:87:
20:3a:c2:67:b3:b6:bd:2a:45:89:6b:45:f8:69:37:
39:9a:1d:e0:f1:45:15:cc:5b:a1:98:46:1c:6a:04:
b5:97:db:6c:4b:1c:7a:91:bd:8c:7a:f7:47:fd:24:
52:1f:87:10:0e:0f:1c:aa:00:09:b2:19:44:75:67:
44:cd:62:5f:1b:fb:d7:e4:e2:fc:c3:45:0b:be:de:
c9:84:e6:23:d4:eb:b4:8f:bf:16:d0:c8:4b:8d:1f:
a3:74:00:6d:73:5d:f7:36:00:39:6e:8f:c3:24:5b:
bf:1d:98:34:0d:d7:9e:dd:62:a8:74:01:36:0a:a0:
49:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:37:BA:9E:A0:7C:7D:98:B9:2C:20:96:AE:CC:CC:B9:90:76:59:B7
X509v3 Authority Key Identifier:
keyid:9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/wTe6nqB8fZi5LCCWrszMuZB2Wbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.208.0/22
Signature Algorithm: sha256WithRSAEncryption
75:ff:cf:7c:80:f9:ca:bc:5f:43:71:cf:02:bc:51:d6:d4:7c:
12:7a:25:9a:db:b7:15:06:85:28:bb:96:01:16:b4:46:45:e9:
c6:b2:3c:df:38:b7:b3:ec:4d:26:d5:2a:f9:35:dc:6e:d3:bb:
db:eb:ab:54:a0:fc:50:99:c6:58:3a:ce:9e:7d:16:55:b4:ee:
9d:31:88:cc:02:0c:20:15:24:bf:c5:56:ba:f5:42:92:42:ac:
f1:41:95:a0:56:19:66:6a:c5:a2:ef:61:18:89:70:77:72:79:
fb:b2:6b:97:cb:d2:81:d5:c3:21:a4:a5:17:6f:38:63:88:53:
10:8a:e2:02:98:7b:c8:96:e2:e5:32:d3:56:0b:5e:33:a9:a8:
97:d3:71:af:c5:fd:b2:8b:42:55:9b:53:e9:c3:40:48:2c:56:
75:31:a1:0d:55:1b:51:40:46:70:8d:c0:e6:bd:9c:3d:88:27:
ea:33:3f:28:cd:8b:20:51:c2:77:c0:9a:28:e0:41:64:c3:f0:
4f:60:78:c1:74:68:ef:75:6a:24:c2:e6:e3:5e:e9:b4:ee:cc:
ba:48:37:9d:d5:c7:95:73:6c:60:b5:b4:9c:bb:b9:a1:70:2c:
6e:fd:fd:e7:fb:53:f5:f1:64:e4:af:d2:45:5a:4d:83:55:33:
4d:72:e5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:42:25 2025 by rpki-client