Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/w0WdZN7LRd00BSwgHRUL2znimBE.roa
File: w0WdZN7LRd00BSwgHRUL2znimBE.roa (raw, json)
Hash identifier: l97XmMRXIzdk4Pr4Ny+J2EZfsy7OqACuKJXMyq+Ydgw=
Subject key identifier: C3:45:9D:64:DE:CB:45:DD:34:05:2C:20:1D:15:0B:DB:39:E2:98:11
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019A012FC46D1FA3B53282DC439645E4FA51
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/w0WdZN7LRd00BSwgHRUL2znimBE.roa
Signing time: Mon 20 Oct 2025 10:34:58 +0000
ROA not before: Mon 20 Oct 2025 10:34:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209192
IP address blocks: 45.131.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:2f:c4:6d:1f:a3:b5:32:82:dc:43:96:45:e4:fa:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 20 10:34:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3459d64decb45dd34052c201d150bdb39e29811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:87:55:d2:d4:84:66:c9:46:60:fe:73:b8:6b:
63:5b:99:ce:1b:da:a0:c9:07:9b:6a:4f:8c:1a:a9:
6d:e5:ae:d5:c1:3d:e3:a2:c5:b7:15:9c:64:5c:32:
cf:ca:01:b7:fc:c8:ce:19:03:6b:34:de:06:12:c5:
06:51:4c:b3:99:55:1e:fd:ea:45:77:4b:a1:7b:80:
36:5c:4a:96:61:b9:44:7a:e8:b3:35:00:5d:a2:40:
87:0c:c4:1d:93:c6:72:0b:0b:72:c8:60:9c:b9:4b:
28:6b:1b:8b:80:ab:ed:5b:30:c3:ff:a4:8e:36:28:
c4:a2:66:bc:b7:12:d0:ab:9f:29:87:63:50:32:ed:
4c:82:0e:30:8f:67:86:11:b1:57:a0:ca:41:8a:e4:
2d:50:cc:07:ac:3c:5b:9d:f2:79:2c:88:41:91:11:
a6:e1:ad:f0:3d:fd:57:92:2d:2d:ee:06:36:f0:b5:
82:d5:96:58:cd:db:89:e0:8a:42:9b:3b:bf:de:02:
25:ad:5c:9f:32:ec:69:67:29:2c:20:bf:2d:04:35:
83:14:af:71:51:a9:f5:02:cd:63:c8:3d:98:4d:0b:
4e:33:25:91:8f:07:ee:ed:e7:64:4d:a4:21:54:29:
69:b9:cd:02:be:03:c5:69:2a:dc:6b:85:74:e5:a2:
8b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:45:9D:64:DE:CB:45:DD:34:05:2C:20:1D:15:0B:DB:39:E2:98:11
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/w0WdZN7LRd00BSwgHRUL2znimBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.1.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:21:e7:33:82:fd:ba:a5:30:fa:28:1c:aa:50:d7:b6:1f:22:
79:96:d5:dd:c3:98:b8:73:74:99:38:be:4f:5f:ac:54:8f:0d:
ac:e0:10:3d:01:65:68:f9:16:d0:6f:31:91:d7:ae:ed:34:8d:
1a:ef:f0:43:07:4d:40:02:9a:ea:20:4f:d0:99:f7:57:18:4f:
a7:34:dc:34:98:41:c4:28:a0:ab:79:8b:60:db:33:54:79:75:
5b:7c:9e:9a:63:fd:2b:d5:1e:66:c2:5c:47:7f:3b:c2:f4:93:
68:4b:09:72:54:2c:ee:52:20:12:fe:00:20:48:5e:44:f6:10:
1f:e7:16:a9:ef:22:b7:7c:a8:ed:03:b5:34:98:e9:ff:28:d8:
2f:11:9f:f9:b2:d7:00:13:6c:fe:9d:7b:a9:95:17:6d:78:43:
ea:bb:e0:bc:c9:5f:21:a3:9a:b9:84:a3:d7:85:58:11:3f:9b:
70:85:38:f4:44:c8:a5:71:17:e0:e4:db:7b:3f:23:37:5d:5f:
41:33:93:22:ed:32:23:e2:e5:99:68:d2:e5:d5:ec:3c:62:d1:
0b:35:2e:26:e4:41:2c:d6:a2:c4:fb:3e:82:c4:7d:ad:c9:80:
1b:a7:f2:a9:92:80:c7:f7:0e:ac:fb:16:eb:98:9b:e5:91:31:
34:76:75:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 10:21:57 2025 by rpki-client