Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/wWNImYV_qusP-8tj830GeFyHo-0.roa
File: wWNImYV_qusP-8tj830GeFyHo-0.roa (raw, json)
Hash identifier: TFb93bClGCsSwFF6uHgZAuz4lfTVxVkQiC5YvyRCimQ=
Subject key identifier: C1:63:48:99:85:7F:AA:EB:0F:FB:CB:63:F3:7D:06:78:5C:87:A3:ED
Certificate issuer: /CN=7892669f819ebd8dd2ebba93f2dd2d3e1a27c231
Certificate serial: 019882A8D61C1D99E97F6D40F8E32C322297
Authority key identifier: 78:92:66:9F:81:9E:BD:8D:D2:EB:BA:93:F2:DD:2D:3E:1A:27:C2:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/wWNImYV_qusP-8tj830GeFyHo-0.roa
Signing time: Thu 07 Aug 2025 03:52:39 +0000
ROA not before: Thu 07 Aug 2025 03:52:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209847
IP address blocks: 194.31.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:a8:d6:1c:1d:99:e9:7f:6d:40:f8:e3:2c:32:22:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7892669f819ebd8dd2ebba93f2dd2d3e1a27c231
Validity
Not Before: Aug 7 03:52:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1634899857faaeb0ffbcb63f37d06785c87a3ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:17:4e:4a:49:05:c7:86:17:77:f8:41:af:bd:
84:a5:eb:09:17:18:be:be:f8:34:2b:de:3c:da:3c:
f8:d2:b7:50:b4:4c:38:e6:eb:a8:9e:e2:2e:a4:56:
d6:ef:28:9e:fb:da:08:86:35:a0:5c:5d:cf:88:8f:
ce:3e:fd:cc:82:be:d5:3b:c4:c2:d0:b1:b9:3a:da:
5b:d8:7b:0a:8f:aa:39:b6:a4:df:4a:56:a7:6d:2b:
19:cb:74:a6:ba:4b:66:ed:af:27:dd:35:45:6f:d0:
df:5d:6a:a4:0f:70:a0:2f:00:e9:6c:d7:f0:6c:e7:
96:ba:b4:39:9a:57:d6:d2:79:72:fb:8e:33:72:70:
93:04:ab:58:5a:69:1f:87:2a:eb:a1:02:59:39:9b:
5b:0d:57:78:97:80:2e:50:12:cb:88:bf:6a:67:7a:
b9:fb:a5:04:f9:5c:01:d5:0d:2d:1c:65:c5:fb:80:
48:94:ae:5c:10:05:72:84:6d:13:f1:14:c4:3c:ef:
42:0c:38:91:71:a5:28:d7:bb:0c:94:09:26:00:6f:
10:65:1d:1a:f4:40:c5:f0:5d:83:57:c6:68:58:5d:
7c:8f:9e:d9:53:c4:4f:11:68:41:82:1c:c4:30:27:
67:83:f5:f2:1f:e3:49:5e:18:67:4a:74:f6:bf:da:
65:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:63:48:99:85:7F:AA:EB:0F:FB:CB:63:F3:7D:06:78:5C:87:A3:ED
X509v3 Authority Key Identifier:
keyid:78:92:66:9F:81:9E:BD:8D:D2:EB:BA:93:F2:DD:2D:3E:1A:27:C2:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/wWNImYV_qusP-8tj830GeFyHo-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.109.0/24
Signature Algorithm: sha256WithRSAEncryption
62:7b:25:03:99:72:94:ab:94:8b:76:8f:cd:4e:14:c9:f0:0e:
fc:b3:5f:a0:aa:04:97:98:0e:29:dc:71:fd:70:95:98:ed:1c:
94:c6:f5:32:c2:97:e4:ed:9f:35:49:a5:51:12:ea:db:f6:0f:
0f:0a:6b:a7:5d:9f:0c:22:89:54:78:1b:3c:4e:8e:7d:ff:51:
82:dc:1c:0a:b5:c9:69:0e:1f:e9:c5:53:7e:12:5a:74:46:2d:
e1:c2:ce:ca:c2:98:49:f9:94:63:d3:e4:d0:b0:5b:a9:40:3f:
65:96:dd:05:d4:75:84:60:96:26:7d:a2:a3:f1:b6:b4:d7:cd:
c7:04:0d:e6:c0:48:fc:38:de:18:fe:e2:0e:94:39:1c:eb:05:
ed:7c:01:59:83:8b:dd:81:ff:f6:03:4a:38:0b:fe:04:bc:0e:
9e:0c:79:f6:40:f7:1d:42:ef:b0:d7:a4:69:1d:dd:51:56:52:
9c:89:58:d9:10:52:ab:3c:3a:45:c3:5e:ac:c4:85:77:2f:de:
da:9b:5f:5a:32:71:fe:e0:5a:80:3a:1c:65:3f:de:1b:c3:6f:
bf:9c:e1:94:71:66:cd:b0:2f:f2:09:29:f3:45:1c:d1:fb:1a:
94:de:79:b3:be:9a:0c:39:9e:1f:1e:e8:b8:79:f1:a7:87:1c:
6f:2f:7f:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZiCqNYcHZnpf21A+OMsMiKXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4OTI2NjlmODE5ZWJkOGRkMmViYmE5M2YyZGQyZDNlMWEy
N2MyMzEwHhcNMjUwODA3MDM1MjM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTYzNDg5OTg1N2ZhYWViMGZmYmNiNjNmMzdkMDY3ODVjODdhM2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhdOSkkFx4YXd/hBr72EpesJFxi+
vvg0K9482jz40rdQtEw45uuonuIupFbW7yie+9oIhjWgXF3PiI/OPv3Mgr7VO8TC
0LG5Otpb2HsKj6o5tqTfSlanbSsZy3Smuktm7a8n3TVFb9DfXWqkD3CgLwDpbNfw
bOeWurQ5mlfW0nly+44zcnCTBKtYWmkfhyrroQJZOZtbDVd4l4AuUBLLiL9qZ3q5
+6UE+VwB1Q0tHGXF+4BIlK5cEAVyhG0T8RTEPO9CDDiRcaUo17sMlAkmAG8QZR0a
9EDF8F2DV8ZoWF18j57ZU8RPEWhBghzEMCdng/XyH+NJXhhnSnT2v9plEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMFjSJmFf6rrD/vLY/N9Bnhch6PtMB8GA1UdIwQY
MBaAFHiSZp+Bnr2N0uu6k/LdLT4aJ8IxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUpKbW40R2V2WTNTNjdxVDh0MHRQaG9ud2pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80NGZlMjgtNTRhNy00NjZhLTgxZDMt
YjhhMjhjYmVmNGFkLzEvd1dOSW1ZVl9xdXNQLTh0ajgzMEdlRnlIby0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC80NGZlMjgtNTRhNy00NjZhLTgxZDMtYjhhMjhjYmVmNGFk
LzEvZUpKbW40R2V2WTNTNjdxVDh0MHRQaG9ud2pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwh9tMA0G
CSqGSIb3DQEBCwUAA4IBAQBieyUDmXKUq5SLdo/NThTJ8A78s1+gqgSXmA4p3HH9
cJWY7RyUxvUywpfk7Z81SaVREurb9g8PCmunXZ8MIolUeBs8To59/1GC3BwKtclp
Dh/pxVN+Elp0Ri3hws7KwphJ+ZRj0+TQsFupQD9llt0F1HWEYJYmfaKj8ba0183H
BA3mwEj8ON4Y/uIOlDkc6wXtfAFZg4vdgf/2A0o4C/4EvA6eDHn2QPcdQu+w16Rp
Hd1RVlKciVjZEFKrPDpFw16sxIV3L97am19aMnH+4FqAOhxlP94bw2+/nOGUcWbN
sC/yCSnzRRzR+xqU3nmzvpoMOZ4fHui4efGnhxxvL38x
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:35:49 2025 by rpki-client