Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Wp03OmDpdbtMVzgtSuYLR7p4YPQ.roa
File: Wp03OmDpdbtMVzgtSuYLR7p4YPQ.roa (raw, json)
Hash identifier: H+mTbNwJ0lc7EsyVx+we/gWtitrSaCNyhUrHHyIMI/g=
Subject key identifier: 5A:9D:37:3A:60:E9:75:BB:4C:57:38:2D:4A:E6:0B:47:BA:78:60:F4
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01963D8E30337A11E83AF763B06DCC4B57B7
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Wp03OmDpdbtMVzgtSuYLR7p4YPQ.roa
Signing time: Wed 16 Apr 2025 07:44:10 +0000
ROA not before: Wed 16 Apr 2025 07:44:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 185.209.38.0/24 maxlen: 24
185.209.73.0/24 maxlen: 24
185.210.233.0/24 maxlen: 24
185.210.235.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.222.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3d:8e:30:33:7a:11:e8:3a:f7:63:b0:6d:cc:4b:57:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 16 07:44:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a9d373a60e975bb4c57382d4ae60b47ba7860f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:dc:a5:0b:32:4c:d5:c6:cc:ed:ed:2f:2b:b9:
08:3d:c4:ff:76:12:e6:e9:ab:d1:a3:51:ed:ff:58:
ad:7e:c4:9d:00:26:92:69:55:e4:6f:fa:85:9a:92:
47:ab:ad:21:d9:4c:00:06:ea:7b:4d:e8:e4:e6:96:
61:05:14:3f:2b:a6:3b:28:d5:88:67:fd:b5:8a:40:
1e:43:45:7e:d5:3d:51:13:b9:7d:d9:7b:8e:da:5d:
fd:77:f4:84:92:46:b2:5e:59:fd:1d:4f:d9:17:f0:
5a:91:fd:b5:73:b4:36:df:de:6d:dc:bd:e1:7e:a9:
7b:60:e3:7c:94:9c:f5:b7:fe:d0:ed:9a:7b:ef:34:
71:42:d0:5d:a6:ed:8b:56:66:96:48:b4:23:90:39:
a1:e0:97:e1:d1:05:32:36:e7:9e:bd:05:01:64:71:
8e:e0:a7:f8:bc:67:d5:fc:7d:8e:0f:5b:a9:62:79:
d5:74:47:7c:41:c4:5e:80:19:7a:4d:95:fe:84:c5:
35:c7:26:77:fd:3d:1b:0e:dd:1d:cc:da:92:cd:8c:
48:f8:80:55:54:17:a4:20:1a:6e:22:11:e1:f2:93:
26:29:ba:27:5c:77:65:d1:f2:ab:b6:bd:18:d3:df:
f8:b7:3d:88:46:75:23:07:19:eb:08:d0:6f:1d:20:
b2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9D:37:3A:60:E9:75:BB:4C:57:38:2D:4A:E6:0B:47:BA:78:60:F4
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Wp03OmDpdbtMVzgtSuYLR7p4YPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.38.0/24
185.209.73.0/24
185.210.233.0/24
185.210.235.0/24
185.218.20.0/24
185.222.30.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:97:a9:b8:c3:14:fc:89:62:41:c1:5a:a1:51:7a:66:33:c0:
17:c8:5b:b4:eb:2e:05:02:f3:be:a0:66:ad:97:eb:4d:8f:11:
7c:a0:f0:a9:b0:cd:ff:92:fd:1f:df:8b:85:22:e7:b5:ea:2e:
7f:3a:b3:37:19:d8:3d:c1:85:17:31:e8:a4:06:1d:93:89:5f:
ee:75:f9:9e:ce:91:77:f7:28:4c:15:fe:e6:2a:f1:c0:5f:b2:
38:3b:08:f0:db:5a:e1:85:10:d1:ff:2d:24:f3:35:0a:29:2f:
7c:0d:88:d4:c9:77:a6:fc:d5:ec:c9:0d:39:d9:d5:d2:51:1d:
2e:42:4a:f5:9a:5d:3f:53:31:15:f2:ea:fa:db:a5:45:fa:d4:
f6:b5:7b:bb:0d:86:1b:89:9c:14:65:26:fa:ec:44:a0:c1:b1:
02:43:74:03:44:92:7c:66:45:55:ed:c6:61:15:87:ca:43:4e:
dc:68:f5:06:41:70:30:67:25:aa:76:98:15:94:51:ef:8a:85:
1e:90:38:2f:10:e0:0a:5d:7d:56:bf:74:0d:91:4d:72:37:46:
7e:03:d9:ca:0d:60:2b:da:17:d3:b3:96:e7:40:4d:52:fb:d0:
a9:8b:e7:77:10:1a:55:47:5c:ec:51:c9:d0:80:fd:2f:9d:91:
fe:48:be:04
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZY9jjAzehHoOvdjsG3MS1e3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjUwNDE2MDc0NDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTlkMzczYTYwZTk3NWJiNGM1NzM4MmQ0YWU2MGI0N2JhNzg2MGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNylCzJM1cbM7e0vK7kIPcT/dhLm
6avRo1Ht/1itfsSdACaSaVXkb/qFmpJHq60h2UwABup7Tejk5pZhBRQ/K6Y7KNWI
Z/21ikAeQ0V+1T1RE7l92XuO2l39d/SEkkayXln9HU/ZF/Bakf21c7Q2395t3L3h
fql7YON8lJz1t/7Q7Zp77zRxQtBdpu2LVmaWSLQjkDmh4Jfh0QUyNueevQUBZHGO
4Kf4vGfV/H2OD1upYnnVdEd8QcRegBl6TZX+hMU1xyZ3/T0bDt0dzNqSzYxI+IBV
VBekIBpuIhHh8pMmKbonXHdl0fKrtr0Y09/4tz2IRnUjBxnrCNBvHSCysQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFFqdNzpg6XW7TFc4LUrmC0e6eGD0MB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvV3AwM09tRHBkYnRNVnpndFN1WUxSN3A0WVBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAudEmAwQA
udFJAwQAudLpAwQAudLrAwQAudoUAwQAud4eMA0GCSqGSIb3DQEBCwUAA4IBAQAt
l6m4wxT8iWJBwVqhUXpmM8AXyFu06y4FAvO+oGatl+tNjxF8oPCpsM3/kv0f34uF
Iue16i5/OrM3Gdg9wYUXMeikBh2TiV/udfmezpF39yhMFf7mKvHAX7I4Owjw21rh
hRDR/y0k8zUKKS98DYjUyXem/NXsyQ052dXSUR0uQkr1ml0/UzEV8ur626VF+tT2
tXu7DYYbiZwUZSb67ESgwbECQ3QDRJJ8ZkVV7cZhFYfKQ07caPUGQXAwZyWqdpgV
lFHvioUekDgvEOAKXX1Wv3QNkU1yN0Z+A9nKDWAr2hfTs5bnQE1S+9Cpi+d3EBpV
R1zsUcnQgP0vnZH+SL4E
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:37:21 2025 by rpki-client