Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/Wwn9-ZCeqmzjX68bfgDgANWQIBU.roa
File: Wwn9-ZCeqmzjX68bfgDgANWQIBU.roa (raw, json)
Hash identifier: SXq1+cMpW/SHgqnUXdFiB1yUFLsr835szRqOWcz8MK8=
Subject key identifier: 5B:09:FD:F9:90:9E:AA:6C:E3:5F:AF:1B:7E:00:E0:00:D5:90:20:15
Certificate issuer: /CN=f57a4812a159ef6a9e92972e7572ad662d72215a
Certificate serial: 01991A67568F6063D13DDEB1C1E5BD8299E1
Authority key identifier: F5:7A:48:12:A1:59:EF:6A:9E:92:97:2E:75:72:AD:66:2D:72:21:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/Wwn9-ZCeqmzjX68bfgDgANWQIBU.roa
Signing time: Fri 05 Sep 2025 15:03:23 +0000
ROA not before: Fri 05 Sep 2025 15:03:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49029
IP address blocks: 185.154.128.0/24 maxlen: 24
185.154.130.0/24 maxlen: 24
185.154.131.0/24 maxlen: 24
212.23.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1a:67:56:8f:60:63:d1:3d:de:b1:c1:e5:bd:82:99:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57a4812a159ef6a9e92972e7572ad662d72215a
Validity
Not Before: Sep 5 15:03:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b09fdf9909eaa6ce35faf1b7e00e000d5902015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:53:08:e1:72:fa:c9:ec:7a:81:5e:64:24:45:
8f:d3:b7:5f:9c:a7:65:88:13:16:c8:23:72:1d:fa:
b2:53:42:46:1b:02:a1:37:f5:2a:13:2d:74:f4:f5:
76:36:f7:c2:3b:98:68:da:71:f6:31:ec:4d:34:74:
e2:f0:64:ef:6a:e7:a1:45:6b:38:51:11:58:89:fc:
a4:a5:90:5b:53:bd:e7:54:a1:ca:e4:d7:f3:75:fb:
df:e6:2e:77:1d:6e:4f:d3:89:12:e8:99:f3:3a:af:
4b:59:b2:05:85:94:cb:bf:49:41:36:56:0b:50:ab:
90:49:2f:e1:37:fd:22:53:04:47:00:ff:30:63:28:
37:93:8a:58:ed:af:de:76:d5:05:49:44:78:49:a2:
8b:95:a1:bf:af:ec:c9:19:1d:e8:1d:b7:70:80:bf:
cd:1d:47:a9:b2:2d:36:57:00:97:84:04:64:e7:a0:
19:77:e4:00:47:cc:87:2a:1a:aa:dc:c6:fe:01:e2:
fa:83:0f:a4:ac:60:22:25:bc:7c:16:cf:81:47:34:
c1:3f:ea:f9:e0:3d:c3:f1:6f:b4:f1:e7:8d:26:82:
10:57:7c:0c:44:b9:b5:79:de:cd:62:a5:63:7c:0a:
02:f6:7d:d2:e0:b6:59:dd:fc:91:0a:35:32:88:df:
05:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:09:FD:F9:90:9E:AA:6C:E3:5F:AF:1B:7E:00:E0:00:D5:90:20:15
X509v3 Authority Key Identifier:
keyid:F5:7A:48:12:A1:59:EF:6A:9E:92:97:2E:75:72:AD:66:2D:72:21:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/Wwn9-ZCeqmzjX68bfgDgANWQIBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.128.0/24
185.154.130.0/23
212.23.209.0/24
Signature Algorithm: sha256WithRSAEncryption
80:1e:18:ec:27:da:12:e2:fa:93:23:be:bd:06:9b:3c:d2:52:
50:1e:12:9f:f6:84:54:35:ad:02:f0:5a:1b:5a:08:7a:6c:c1:
b9:46:f7:e0:48:fd:be:9c:b3:4d:f5:62:15:42:61:bc:d1:06:
90:fc:69:3c:c7:5a:5f:37:d3:8d:9a:46:ff:95:15:f9:2e:1d:
3a:52:b9:0d:71:b6:c9:8f:f2:36:33:ee:f9:68:da:fc:4c:59:
c6:fa:4a:b8:06:ae:72:87:17:2b:3a:1f:7f:9a:65:94:6a:0c:
12:7e:37:90:86:9b:e2:eb:7e:eb:56:ea:e1:0a:17:f0:1f:92:
62:dc:b5:d3:fa:7b:45:83:1b:7f:1d:2d:df:d6:6f:e3:03:57:
d6:44:14:eb:88:6c:73:64:d1:4e:ab:42:67:58:1f:91:ff:22:
af:04:2b:5b:11:c2:ce:db:6f:6b:39:04:23:10:f2:b6:a1:b9:
1e:33:fa:d3:db:bf:7f:a2:a0:c5:ce:d3:c4:17:72:17:17:da:
45:64:b8:50:30:80:28:5d:10:d1:15:de:b2:0c:8f:47:59:2d:
c1:cc:ad:ed:26:8e:03:c3:27:62:84:2c:95:aa:8d:be:97:94:
95:14:1b:7e:b0:b3:a1:37:34:d1:b0:31:62:80:db:0a:21:29:
ba:91:79:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:18 2025 by rpki-client