Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/w9rY7kPwr-C45AYMtakSZ--Pjh0.roa
File: w9rY7kPwr-C45AYMtakSZ--Pjh0.roa (raw, json)
Hash identifier: VS0d9O0NkysA9RheWz1z9/AXyEz43PEQug21IFBFJVM=
Subject key identifier: C3:DA:D8:EE:43:F0:AF:E0:B8:E4:06:0C:B5:A9:12:67:EF:8F:8E:1D
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 0196678FF7C84D539176ADA9AB066D38460C
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/w9rY7kPwr-C45AYMtakSZ--Pjh0.roa
Signing time: Thu 24 Apr 2025 11:30:10 +0000
ROA not before: Thu 24 Apr 2025 11:30:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35278
IP address blocks: 193.42.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:67:8f:f7:c8:4d:53:91:76:ad:a9:ab:06:6d:38:46:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Apr 24 11:30:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3dad8ee43f0afe0b8e4060cb5a91267ef8f8e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ef:13:11:9a:f6:ad:be:70:a3:ce:02:35:07:
5c:1c:a6:e6:90:6d:cb:26:61:2e:0a:13:2f:19:33:
dc:ef:5e:eb:79:f8:c1:31:fd:e8:fd:fe:35:b3:33:
05:82:31:5a:ae:cf:18:00:95:d3:07:17:20:9c:28:
5e:7b:68:84:9f:29:a1:c8:20:c5:45:e2:d0:d9:22:
23:14:5d:86:29:2d:25:50:fd:97:6b:a8:7f:68:6f:
e3:ec:23:d0:9d:13:33:89:c2:cc:f7:91:c7:1c:c1:
cd:24:ef:dc:b2:2d:52:00:56:03:b3:4f:f7:90:fd:
75:f8:70:de:20:38:1e:ca:30:3c:2c:fc:72:6e:d1:
f9:f3:01:2c:42:79:c2:dd:65:8d:7b:4d:20:4c:af:
a5:67:93:a8:f0:f7:86:69:31:b0:42:86:36:61:5b:
b0:74:49:15:f7:5c:e0:05:86:dc:83:93:77:6a:46:
6f:08:99:53:bc:fb:4b:ce:e4:93:d0:17:cd:5e:1f:
41:16:ae:d1:7d:fe:fa:09:94:7a:30:86:5b:09:df:
94:c2:88:9f:b3:46:0d:8c:80:f6:61:2d:6e:fe:08:
7b:b6:1f:45:80:20:ad:aa:ef:2c:7c:65:0e:b5:91:
41:45:d2:49:6a:f2:1c:eb:d3:04:6a:d3:e6:f2:ae:
0d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DA:D8:EE:43:F0:AF:E0:B8:E4:06:0C:B5:A9:12:67:EF:8F:8E:1D
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/w9rY7kPwr-C45AYMtakSZ--Pjh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.115.0/24
Signature Algorithm: sha256WithRSAEncryption
99:0c:a4:61:b4:34:15:44:35:5a:71:1f:0e:58:07:94:10:f7:
32:97:db:5f:17:77:7f:e0:a8:c0:6a:3f:da:ce:94:b0:27:5b:
39:20:fc:eb:bf:1f:44:d2:64:63:ac:72:80:18:3f:7a:3f:33:
c0:2f:34:4f:2c:9a:2f:7f:6b:3e:f1:5c:51:af:95:1d:5c:02:
9f:0e:07:e3:0f:13:92:b8:08:07:53:7e:e9:dd:de:67:83:1e:
71:4b:9e:f4:c2:25:99:53:ba:7f:30:00:b2:e6:42:36:f7:d3:
c6:d7:8e:d8:8e:30:9a:f8:78:9f:17:90:71:23:27:35:11:44:
2b:6f:55:39:b5:42:93:e5:8c:d1:d8:ff:e9:dd:41:26:12:3d:
53:48:4c:6c:dc:1c:ee:90:aa:de:25:1d:0d:27:ca:ee:c7:69:
1f:11:88:4d:10:c1:a0:bc:85:50:3a:56:3f:69:a4:d0:fc:c9:
2a:c0:9b:0d:c3:95:17:59:e4:d8:26:ad:fa:36:bb:03:13:8c:
4c:d1:5c:3c:d6:06:5b:f5:be:ac:42:2f:60:9f:12:a2:ef:73:
cc:1e:f2:25:4e:be:9d:05:f7:cb:6c:8b:43:8c:e1:df:ad:20:
61:b4:c4:56:17:86:50:27:ad:2e:2f:d3:2c:fb:cb:30:7e:32:
dc:6d:88:1a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZZnj/fITVORdq2pqwZtOEYMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0
ODBiOWMwHhcNMjUwNDI0MTEzMDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2RhZDhlZTQzZjBhZmUwYjhlNDA2MGNiNWE5MTI2N2VmOGY4ZTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAru8TEZr2rb5wo84CNQdcHKbmkG3L
JmEuChMvGTPc717refjBMf3o/f41szMFgjFars8YAJXTBxcgnChee2iEnymhyCDF
ReLQ2SIjFF2GKS0lUP2Xa6h/aG/j7CPQnRMzicLM95HHHMHNJO/csi1SAFYDs0/3
kP11+HDeIDgeyjA8LPxybtH58wEsQnnC3WWNe00gTK+lZ5Oo8PeGaTGwQoY2YVuw
dEkV91zgBYbcg5N3akZvCJlTvPtLzuST0BfNXh9BFq7Rff76CZR6MIZbCd+Uwoif
s0YNjID2YS1u/gh7th9FgCCtqu8sfGUOtZFBRdJJavIc69MEatPm8q4N9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMPa2O5D8K/guOQGDLWpEmfvj44dMB8GA1UdIwQY
MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt
NTczNzAxYzg0ODMzLzEvdzlyWTdrUHdyLUM0NUFZTXRha1NaLS1QamgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz
LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSpzMA0G
CSqGSIb3DQEBCwUAA4IBAQCZDKRhtDQVRDVacR8OWAeUEPcyl9tfF3d/4KjAaj/a
zpSwJ1s5IPzrvx9E0mRjrHKAGD96PzPALzRPLJovf2s+8VxRr5UdXAKfDgfjDxOS
uAgHU37p3d5ngx5xS570wiWZU7p/MACy5kI299PG147YjjCa+HifF5BxIyc1EUQr
b1U5tUKT5YzR2P/p3UEmEj1TSExs3BzukKreJR0NJ8rux2kfEYhNEMGgvIVQOlY/
aaTQ/MkqwJsNw5UXWeTYJq36NrsDE4xM0Vw81gZb9b6sQi9gnxKi73PMHvIlTr6d
BffLbItDjOHfrSBhtMRWF4ZQJ60uL9Ms+8swfjLcbYga
-----END CERTIFICATE-----
Generated at Fri May 2 14:25:39 2025 by rpki-client