Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/Wmz-X2qvGQpLkH-YhZaJiX0a9DU.roa
File: Wmz-X2qvGQpLkH-YhZaJiX0a9DU.roa (raw, json)
Hash identifier: FuW53gbYqPmWdJbbqmlfjqZ0BgNfy4rZW67679JKp0E=
Subject key identifier: 5A:6C:FE:5F:6A:AF:19:0A:4B:90:7F:98:85:96:89:89:7D:1A:F4:35
Certificate issuer: /CN=02b610cd43bafced91480fabfdcaae82049fbf71
Certificate serial: 01975FCF69309DA760223C779361B2568D96
Authority key identifier: 02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/Wmz-X2qvGQpLkH-YhZaJiX0a9DU.roa
Signing time: Wed 11 Jun 2025 16:25:17 +0000
ROA not before: Wed 11 Jun 2025 16:25:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197068
IP address blocks: 193.43.94.0/24 maxlen: 24
195.43.92.0/23 maxlen: 24
2a03:70c1::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:cf:69:30:9d:a7:60:22:3c:77:93:61:b2:56:8d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b610cd43bafced91480fabfdcaae82049fbf71
Validity
Not Before: Jun 11 16:25:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a6cfe5f6aaf190a4b907f98859689897d1af435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:da:f5:04:19:d0:f8:b5:84:69:91:f2:e9:52:
d0:aa:48:41:1b:02:77:af:03:0f:66:f5:ab:08:db:
42:b0:4b:8f:e3:cf:92:fb:84:61:b8:bc:5b:af:bd:
cd:fa:ff:fc:38:bd:c2:f3:10:47:b3:57:5d:d9:39:
6f:cd:75:53:0c:59:d1:b5:07:1d:1a:7c:fa:89:8f:
98:44:69:a3:b2:2b:c2:53:3d:3f:8c:57:df:32:5e:
63:13:ec:d8:b8:ff:5d:51:74:0b:d2:a2:73:4c:a1:
55:6f:e8:83:95:9a:88:f4:23:8e:77:db:9b:34:1d:
1b:61:51:1a:69:d1:10:25:b2:f2:cf:04:e5:6a:31:
bb:28:38:2d:32:0b:eb:91:86:0a:c8:94:47:3c:f7:
aa:4d:38:a8:81:d4:ce:b4:60:53:1d:bd:84:05:34:
df:58:8b:6e:0e:ff:bd:06:7a:63:68:4e:ab:97:2c:
a8:42:a0:4f:eb:20:1c:d5:87:c8:79:ae:b9:4b:9a:
4e:4b:2d:ea:22:7e:f7:d6:8f:35:1b:59:7d:31:d2:
f3:ad:d0:8d:c5:bd:20:69:18:96:8b:23:bc:b5:63:
28:49:66:9f:c6:7f:0b:d2:fb:45:a5:bd:ac:dc:8b:
46:dc:a4:da:6b:6a:20:ba:34:17:79:70:51:92:e0:
86:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6C:FE:5F:6A:AF:19:0A:4B:90:7F:98:85:96:89:89:7D:1A:F4:35
X509v3 Authority Key Identifier:
keyid:02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/Wmz-X2qvGQpLkH-YhZaJiX0a9DU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.94.0/24
195.43.92.0/23
IPv6:
2a03:70c1::/32
Signature Algorithm: sha256WithRSAEncryption
5e:29:29:9e:4d:30:5b:c4:d1:b1:6e:f5:cd:ba:b7:99:0d:46:
97:a0:17:18:ec:38:54:a4:06:1f:0f:4c:04:0c:fa:08:19:b6:
1f:6b:b0:01:bf:76:b1:5a:fa:30:fc:28:32:53:5b:eb:aa:a4:
6d:59:42:3b:f0:2d:b5:33:e1:85:fc:54:68:15:a3:2a:b4:6f:
74:ba:2b:51:43:d0:f8:6a:7c:6c:61:17:d8:7c:8a:a9:8b:11:
e9:13:7c:aa:69:25:bd:18:32:a3:b8:ad:98:6d:23:5d:1f:f9:
a3:e7:cd:2a:71:8b:77:50:e5:7c:0b:44:96:e1:f5:3c:b4:72:
8e:a1:88:67:d2:82:93:3a:08:b7:03:70:f0:92:7d:f0:a8:48:
b2:69:a4:19:52:14:c4:21:3e:23:66:82:c1:1b:06:16:06:9e:
e2:1b:e0:ef:e4:44:d4:d5:ac:5d:9e:76:ad:c5:88:68:d6:a9:
9a:56:47:8c:34:be:bb:e8:cf:9d:fe:a1:a7:30:89:01:96:98:
09:f9:6b:2a:da:22:87:ce:85:5c:72:7c:24:4d:17:9f:dc:ec:
a9:03:bd:6a:dd:b7:d0:be:c0:57:d9:82:6b:20:b3:bd:f0:8d:
89:ea:e1:60:7f:84:a0:cc:2a:20:56:6f:fb:4e:e4:0d:a3:a2:
72:9c:a0:5d
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZdfz2kwnadgIjx3k2GyVo2WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYjYxMGNkNDNiYWZjZWQ5MTQ4MGZhYmZkY2FhZTgyMDQ5
ZmJmNzEwHhcNMjUwNjExMTYyNTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTZjZmU1ZjZhYWYxOTBhNGI5MDdmOTg4NTk2ODk4OTdkMWFmNDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNr1BBnQ+LWEaZHy6VLQqkhBGwJ3
rwMPZvWrCNtCsEuP48+S+4RhuLxbr73N+v/8OL3C8xBHs1dd2TlvzXVTDFnRtQcd
Gnz6iY+YRGmjsivCUz0/jFffMl5jE+zYuP9dUXQL0qJzTKFVb+iDlZqI9COOd9ub
NB0bYVEaadEQJbLyzwTlajG7KDgtMgvrkYYKyJRHPPeqTTiogdTOtGBTHb2EBTTf
WItuDv+9BnpjaE6rlyyoQqBP6yAc1YfIea65S5pOSy3qIn731o81G1l9MdLzrdCN
xb0gaRiWiyO8tWMoSWafxn8L0vtFpb2s3ItG3KTaa2ogujQXeXBRkuCGPQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFFps/l9qrxkKS5B/mIWWiYl9GvQ1MB8GA1UdIwQY
MBaAFAK2EM1DuvztkUgPq/3KroIEn79xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXJZUXpVTzZfTzJSU0Etcl9jcXVnZ1NmdjNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lM2RlY2MtM2VmNy00Y2IyLTgxZDEt
OTAxM2NhOTk2YjE2LzEvV216LVgycXZHUXBMa0gtWWhaYUppWDBhOURVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9lM2RlY2MtM2VmNy00Y2IyLTgxZDEtOTAxM2NhOTk2YjE2
LzEvQXJZUXpVTzZfTzJSU0Etcl9jcXVnZ1NmdjNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAwSteAwQB
wytcMA0EAgACMAcDBQAqA3DBMA0GCSqGSIb3DQEBCwUAA4IBAQBeKSmeTTBbxNGx
bvXNureZDUaXoBcY7DhUpAYfD0wEDPoIGbYfa7ABv3axWvow/CgyU1vrqqRtWUI7
8C21M+GF/FRoFaMqtG90uitRQ9D4anxsYRfYfIqpixHpE3yqaSW9GDKjuK2YbSNd
H/mj580qcYt3UOV8C0SW4fU8tHKOoYhn0oKTOgi3A3Dwkn3wqEiyaaQZUhTEIT4j
ZoLBGwYWBp7iG+Dv5ETU1axdnnatxYho1qmaVkeMNL676M+d/qGnMIkBlpgJ+Wsq
2iKHzoVccnwkTRef3OypA71q3bfQvsBX2YJrILO98I2J6uFgf4SgzCogVm/7TuQN
o6JynKBd
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:03:48 2025 by rpki-client