Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/wHN-DwZ2phagN24dcEs0dOWS0n4.roa
File: wHN-DwZ2phagN24dcEs0dOWS0n4.roa (raw, json)
Hash identifier: PRZ4ezYR0MkLhJDk66PX2K5V2aQktdQihK+Xr7QGigU=
Subject key identifier: C0:73:7E:0F:06:76:A6:16:A0:37:6E:1D:70:4B:34:74:E5:92:D2:7E
Certificate issuer: /CN=b85631108257b71fe330bc98b3abc146c95b88e0
Certificate serial: 0199095358116DAF001DAE8B9753DCF9B104
Authority key identifier: B8:56:31:10:82:57:B7:1F:E3:30:BC:98:B3:AB:C1:46:C9:5B:88:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/wHN-DwZ2phagN24dcEs0dOWS0n4.roa
Signing time: Tue 02 Sep 2025 07:28:00 +0000
ROA not before: Tue 02 Sep 2025 07:28:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206757
IP address blocks: 45.147.16.0/22 maxlen: 22
45.147.16.0/24 maxlen: 24
45.147.17.0/24 maxlen: 24
45.147.18.0/24 maxlen: 24
45.147.19.0/24 maxlen: 24
116.204.252.0/23 maxlen: 23
185.218.236.0/22 maxlen: 22
185.218.236.0/24 maxlen: 24
185.218.237.0/24 maxlen: 24
185.218.238.0/24 maxlen: 24
185.218.239.0/24 maxlen: 24
193.16.151.0/24 maxlen: 24
193.16.156.0/24 maxlen: 24
195.10.218.0/24 maxlen: 24
201.148.168.0/24 maxlen: 24
201.148.169.0/24 maxlen: 24
201.148.170.0/24 maxlen: 24
201.148.171.0/24 maxlen: 24
203.78.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:09:53:58:11:6d:af:00:1d:ae:8b:97:53:dc:f9:b1:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85631108257b71fe330bc98b3abc146c95b88e0
Validity
Not Before: Sep 2 07:28:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0737e0f0676a616a0376e1d704b3474e592d27e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:c8:6e:b4:f8:62:0c:98:58:fb:0f:30:9b:56:
a7:88:b6:c7:df:89:3e:46:0b:2a:7f:4a:9c:79:ca:
ef:f3:f7:1e:9d:06:e8:7a:5c:66:dd:aa:b6:7f:35:
a4:bb:e1:a1:08:82:32:7d:ee:f3:e7:2b:04:07:da:
1b:ab:ba:4c:59:d1:7e:f2:31:89:78:e0:20:4e:27:
cf:7b:e6:b3:a7:30:2d:01:b4:7f:25:1b:de:d8:a6:
5c:69:1b:34:c4:58:44:09:07:7e:9d:60:df:7f:c0:
9f:d5:4d:42:3a:b7:4d:07:b0:64:68:da:e1:8f:6e:
eb:6a:7b:a1:51:c7:ac:1f:df:0c:71:b9:0b:3f:99:
c8:01:60:29:75:6f:51:ad:c1:22:0f:61:07:3d:cd:
fa:6f:8b:12:e3:66:cd:0a:9b:c3:dd:64:13:01:89:
38:59:44:27:6b:9b:db:4d:bf:56:72:30:55:f3:fa:
aa:99:84:63:fe:f4:11:dc:87:ca:7f:09:2b:69:19:
d4:55:48:ee:73:ef:5a:6f:e7:ab:79:83:9a:a4:e8:
40:50:89:75:ae:af:82:8f:34:37:8e:d4:dd:df:c2:
f6:9f:1f:88:0d:9b:3d:98:6d:4d:9d:b1:15:ce:fc:
70:54:c5:2e:08:36:8d:69:71:1c:48:46:5f:45:ee:
7d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:73:7E:0F:06:76:A6:16:A0:37:6E:1D:70:4B:34:74:E5:92:D2:7E
X509v3 Authority Key Identifier:
keyid:B8:56:31:10:82:57:B7:1F:E3:30:BC:98:B3:AB:C1:46:C9:5B:88:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/wHN-DwZ2phagN24dcEs0dOWS0n4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.16.0/22
116.204.252.0/23
185.218.236.0/22
193.16.151.0/24
193.16.156.0/24
195.10.218.0/24
201.148.168.0/22
203.78.160.0/24
Signature Algorithm: sha256WithRSAEncryption
51:75:00:3d:6b:cf:c1:97:32:b0:ef:9d:5c:3a:dc:82:df:24:
c8:fd:69:9a:11:29:f5:80:01:93:7a:18:63:7b:3b:a9:9a:81:
47:d3:c7:b0:8d:76:36:7f:4f:5a:9f:4d:a9:60:b7:80:47:18:
ac:0b:14:39:9a:0f:f0:5c:4b:34:ea:8b:ca:ef:45:42:eb:44:
66:e6:9f:10:92:09:d1:82:82:45:93:eb:80:8e:87:02:ef:33:
48:e7:ee:7f:05:bc:5d:c1:19:f5:cc:5b:4a:df:f0:3c:1c:64:
c2:97:4e:35:4d:43:ca:5b:18:d6:df:0c:13:53:2f:b8:3a:20:
61:87:35:7e:1b:69:b5:bc:55:f2:ce:91:34:df:60:01:00:95:
a7:2b:c4:7c:71:14:53:2d:5d:10:e9:a8:55:52:44:34:e4:06:
9f:27:23:25:b7:1b:0b:94:3e:f0:64:ba:4d:63:e0:ca:a0:c2:
34:4e:1d:de:70:7d:be:48:9c:0f:a0:9f:6e:d2:67:c7:6d:12:
b2:8c:2f:ae:06:ac:b2:08:b3:86:79:3d:00:65:f8:30:4d:53:
ca:21:65:89:85:d6:11:8a:20:1c:ca:dc:8e:e5:0d:f0:8f:3c:
c5:f9:fe:27:b8:bb:99:42:a0:e7:2f:99:d7:3f:77:4c:82:4a:
e0:e2:88:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:25:47 2025 by rpki-client