Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/Wm1oFYtD8I1yIrTR5jtpPdjjXys.roa
File: Wm1oFYtD8I1yIrTR5jtpPdjjXys.roa (raw, json)
Hash identifier: h10a0ShWk5p7a4FIal/Y8wH4X7BKdCyR4Sn3hYDNJtQ=
Subject key identifier: 5A:6D:68:15:8B:43:F0:8D:72:22:B4:D1:E6:3B:69:3D:D8:E3:5F:2B
Certificate issuer: /CN=af6da9d56b42c2b816b1ae6b185125abf21593ef
Certificate serial: 0197630CE0E6CB6C2BA57AF9E0B4847EE5AF
Authority key identifier: AF:6D:A9:D5:6B:42:C2:B8:16:B1:AE:6B:18:51:25:AB:F2:15:93:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r22p1WtCwrgWsa5rGFElq_IVk-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/Wm1oFYtD8I1yIrTR5jtpPdjjXys.roa
Signing time: Thu 12 Jun 2025 07:31:17 +0000
ROA not before: Thu 12 Jun 2025 07:31:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25090
IP address blocks: 193.8.222.0/23 maxlen: 23
194.56.96.0/22 maxlen: 24
194.56.112.0/22 maxlen: 24
194.56.112.0/23 maxlen: 23
194.56.116.0/22 maxlen: 24
194.56.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/r22p1WtCwrgWsa5rGFElq_IVk-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:0c:e0:e6:cb:6c:2b:a5:7a:f9:e0:b4:84:7e:e5:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af6da9d56b42c2b816b1ae6b185125abf21593ef
Validity
Not Before: Jun 12 07:31:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a6d68158b43f08d7222b4d1e63b693dd8e35f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:c9:b6:96:49:dc:b3:b0:d7:ff:35:83:19:23:
fb:08:3d:70:31:89:d1:10:5e:5e:ed:22:dc:f3:c7:
1e:47:c0:ee:bc:8f:db:c4:55:ce:1b:4d:f8:a7:2a:
f8:37:03:f5:31:0c:55:b5:2f:0d:cd:85:1c:bb:4a:
cc:55:32:38:fd:75:49:05:49:41:26:22:ba:fc:eb:
1f:cf:fe:a8:fd:17:2b:55:6e:73:19:61:86:6c:d5:
66:f6:bf:a7:29:28:7e:d4:0f:da:bb:57:8d:2b:49:
50:2a:23:9b:4f:8f:eb:fa:85:7f:89:b2:e5:8f:83:
fe:5b:09:4c:f8:b8:4d:90:18:a1:ea:7c:a2:42:30:
1c:d8:68:8c:6e:e2:31:33:f8:df:45:7d:1d:86:5b:
b6:b4:e8:c1:d1:f9:70:bb:4e:df:bf:8c:46:2e:27:
14:a9:64:45:2b:51:8b:39:3a:70:5f:be:2d:a3:80:
3c:78:33:a7:47:50:ac:35:3a:d3:75:2d:53:1f:f8:
61:f5:33:82:a2:4f:57:95:84:de:d2:b4:71:bd:8f:
0d:ed:c8:4b:4e:29:72:c1:10:6d:c4:15:3c:57:24:
7a:1c:d5:56:ed:79:8c:70:e6:9b:f8:84:b1:67:02:
0c:a7:7c:fc:60:9f:4b:1f:d3:d6:f0:cc:63:fe:8e:
37:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6D:68:15:8B:43:F0:8D:72:22:B4:D1:E6:3B:69:3D:D8:E3:5F:2B
X509v3 Authority Key Identifier:
keyid:AF:6D:A9:D5:6B:42:C2:B8:16:B1:AE:6B:18:51:25:AB:F2:15:93:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r22p1WtCwrgWsa5rGFElq_IVk-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/Wm1oFYtD8I1yIrTR5jtpPdjjXys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.222.0/23
194.56.96.0/22
194.56.112.0-194.56.123.255
Signature Algorithm: sha256WithRSAEncryption
34:30:b3:a8:c9:41:33:69:47:f5:c3:37:f8:8c:7d:cc:24:c3:
f0:73:98:9d:a7:58:e6:b3:5e:31:cf:7c:f9:85:1c:54:d9:27:
c3:a3:7e:eb:1f:00:31:c0:00:42:18:40:f6:51:72:87:2a:e0:
f1:03:c9:a0:2d:9f:94:8b:86:a6:e2:d8:65:38:f0:28:e9:a3:
02:9e:ce:cc:70:2d:23:2d:d9:f2:c6:0f:a7:f5:b3:bf:d6:8f:
8f:bc:3c:9b:d5:e3:a0:18:00:f8:d5:7a:b4:2d:87:d0:65:d4:
7c:ad:38:79:2f:14:30:6a:e0:25:6e:3c:6e:bb:e6:90:8c:af:
e0:90:cc:df:53:ed:51:fe:a3:a1:89:22:c7:19:cf:80:15:ba:
fd:e0:28:92:ad:8c:96:1d:be:08:02:f0:dd:9a:e4:ab:2e:48:
ce:e7:6e:c9:3c:7c:59:a7:03:d9:2e:39:42:1f:03:30:cc:a5:
1e:0b:4e:9b:8a:e6:c0:0b:dc:06:68:a2:3d:9d:10:4b:ca:00:
79:20:73:0b:3b:fa:87:08:59:ac:e6:e0:92:65:4b:b2:79:b1:
83:ef:c9:5c:e4:8e:8a:40:8e:d3:6d:92:de:e4:fa:a5:bb:77:
4c:f4:b6:ff:21:9d:16:f8:c9:36:94:15:59:85:3a:26:24:46:
db:ac:a2:ab
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZdjDODmy2wrpXr54LSEfuWvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNmRhOWQ1NmI0MmMyYjgxNmIxYWU2YjE4NTEyNWFiZjIx
NTkzZWYwHhcNMjUwNjEyMDczMTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTZkNjgxNThiNDNmMDhkNzIyMmI0ZDFlNjNiNjkzZGQ4ZTM1ZjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9cm2lkncs7DX/zWDGSP7CD1wMYnR
EF5e7SLc88ceR8DuvI/bxFXOG034pyr4NwP1MQxVtS8NzYUcu0rMVTI4/XVJBUlB
JiK6/Osfz/6o/RcrVW5zGWGGbNVm9r+nKSh+1A/au1eNK0lQKiObT4/r+oV/ibLl
j4P+WwlM+LhNkBih6nyiQjAc2GiMbuIxM/jfRX0dhlu2tOjB0flwu07fv4xGLicU
qWRFK1GLOTpwX74to4A8eDOnR1CsNTrTdS1TH/hh9TOCok9XlYTe0rRxvY8N7chL
TilywRBtxBU8VyR6HNVW7XmMcOab+ISxZwIMp3z8YJ9LH9PW8Mxj/o43rQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFFptaBWLQ/CNciK00eY7aT3Y418rMB8GA1UdIwQY
MBaAFK9tqdVrQsK4FrGuaxhRJavyFZPvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjIycDFXdEN3cmdXc2E1ckdGRWxxX0lWay04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy84OTczNzgtYzU1Ni00MzUyLTlhMDQt
YjEwYTgzMmJjYTQzLzEvV20xb0ZZdEQ4STF5SXJUUjVqdHBQZGpqWHlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy84OTczNzgtYzU1Ni00MzUyLTlhMDQtYjEwYTgzMmJjYTQz
LzEvcjIycDFXdEN3cmdXc2E1ckdGRWxxX0lWay04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBwQjeAwQC
wjhgMAwDBATCOHADBALCOHgwDQYJKoZIhvcNAQELBQADggEBADQws6jJQTNpR/XD
N/iMfcwkw/BzmJ2nWOazXjHPfPmFHFTZJ8OjfusfADHAAEIYQPZRcocq4PEDyaAt
n5SLhqbi2GU48CjpowKezsxwLSMt2fLGD6f1s7/Wj4+8PJvV46AYAPjVerQth9Bl
1HytOHkvFDBq4CVuPG675pCMr+CQzN9T7VH+o6GJIscZz4AVuv3gKJKtjJYdvggC
8N2a5KsuSM7nbsk8fFmnA9kuOUIfAzDMpR4LTpuK5sAL3AZooj2dEEvKAHkgcws7
+ocIWazm4JJlS7J5sYPvyVzkjopAjtNtkt7k+qW7d0z0tv8hnRb4yTaUFVmFOiYk
Rtusoqs=
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:04:49 2025 by rpki-client