Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/AAWPbPjTyVT988aYaAp0o8ug4CA.roa
File: AAWPbPjTyVT988aYaAp0o8ug4CA.roa (raw, json)
Hash identifier: W0Vm8/GtO/KKeUbt2/qoBL2G7a3VmqlowMCbkwrkEEM=
Subject key identifier: 00:05:8F:6C:F8:D3:C9:54:FD:F3:C6:98:68:0A:74:A3:CB:A0:E0:20
Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Certificate serial: 0197E3FBFD7A2E44E59CD44AF443B2E08AB5
Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/AAWPbPjTyVT988aYaAp0o8ug4CA.roa
Signing time: Mon 07 Jul 2025 08:23:51 +0000
ROA not before: Mon 07 Jul 2025 08:23:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47223
IP address blocks: 91.106.24.0/23 maxlen: 23
91.106.26.0/23 maxlen: 23
91.106.30.0/23 maxlen: 23
94.240.0.0/24 maxlen: 24
94.240.1.0/24 maxlen: 24
94.240.2.0/24 maxlen: 24
94.240.3.0/24 maxlen: 24
94.240.7.0/24 maxlen: 24
94.240.23.0/24 maxlen: 24
94.240.32.0/21 maxlen: 21
94.240.34.0/24 maxlen: 24
94.240.40.0/24 maxlen: 24
94.240.42.0/24 maxlen: 24
94.240.44.0/22 maxlen: 22
94.240.46.0/24 maxlen: 24
94.240.48.0/22 maxlen: 22
94.240.48.0/24 maxlen: 24
94.240.50.0/24 maxlen: 24
94.240.51.0/24 maxlen: 24
94.240.62.0/23 maxlen: 23
94.240.63.0/24 maxlen: 24
185.139.16.0/22 maxlen: 22
194.152.46.0/23 maxlen: 23
2a01:6e80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e3:fb:fd:7a:2e:44:e5:9c:d4:4a:f4:43:b2:e0:8a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Validity
Not Before: Jul 7 08:23:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00058f6cf8d3c954fdf3c698680a74a3cba0e020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c3:97:33:1a:da:a8:a0:f4:57:7e:b3:ea:4c:
fe:80:22:71:dd:d4:a0:e4:40:0d:b3:1c:12:7d:f9:
c0:6b:9a:90:ac:95:a1:37:58:47:f1:6e:79:a1:89:
70:ec:73:a2:a0:e1:2c:33:89:c2:38:eb:8f:e8:c8:
09:b6:66:b2:67:09:4f:5a:48:04:47:0f:29:9b:7b:
c9:65:1e:08:ab:df:c6:1f:ef:0d:34:51:fb:8b:8a:
c6:22:af:18:b8:a0:cc:2e:92:2f:8b:73:12:08:7f:
27:23:05:c2:9c:f6:dc:99:f3:fc:d9:cb:34:05:2a:
b5:b3:ff:d5:da:da:f2:b5:50:8e:0c:ae:31:9c:57:
fa:30:9e:58:3b:34:51:44:1f:69:e6:ea:26:86:13:
60:39:93:17:18:02:17:62:3a:89:a1:2f:8a:fd:3f:
49:c6:ce:f4:de:27:18:d7:31:12:f5:f0:e1:52:fe:
08:72:b4:f6:01:87:86:14:13:85:ba:94:ba:b2:3e:
26:6f:40:fb:74:00:56:99:cf:64:02:56:6e:68:1a:
a7:81:57:a1:b6:98:5e:b2:55:30:da:7f:46:83:51:
8e:f7:87:f5:b2:82:89:cd:3f:49:93:6c:0d:1c:c0:
ca:fd:37:41:05:8a:7a:c1:4b:bd:ab:93:f0:5a:45:
c1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:05:8F:6C:F8:D3:C9:54:FD:F3:C6:98:68:0A:74:A3:CB:A0:E0:20
X509v3 Authority Key Identifier:
keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/AAWPbPjTyVT988aYaAp0o8ug4CA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.106.24.0/22
91.106.30.0/23
94.240.0.0/22
94.240.7.0/24
94.240.23.0/24
94.240.32.0-94.240.40.255
94.240.42.0/24
94.240.44.0-94.240.51.255
94.240.62.0/23
185.139.16.0/22
194.152.46.0/23
IPv6:
2a01:6e80::/32
Signature Algorithm: sha256WithRSAEncryption
04:84:a9:48:17:f4:bc:4d:76:25:62:43:a5:21:09:fd:a8:fd:
12:d9:54:a4:b7:66:9e:e1:73:00:6e:ae:72:15:a5:ac:d2:6a:
66:f8:91:59:b0:f3:21:0e:6f:1f:49:32:6d:11:9c:64:54:a4:
52:74:82:8b:06:fa:6d:1d:06:6f:6d:a3:99:97:98:b2:ba:0a:
ab:fc:9d:d0:d9:b2:15:52:cc:1d:d8:91:59:7d:9a:f2:5a:61:
d6:bf:92:23:c6:fd:63:49:94:24:19:7f:c5:4d:86:c3:93:14:
e7:c7:df:7e:bf:00:74:31:14:77:2e:40:c3:13:27:1d:41:23:
22:6d:35:8f:9d:65:af:43:a9:3b:86:ad:6b:40:bc:c2:7b:e3:
b9:0b:e1:70:7c:9a:9b:f2:85:6d:9f:47:24:8e:51:f4:21:8e:
23:5d:41:fa:db:df:92:95:82:70:85:e4:4c:a6:a6:e4:46:11:
ee:6c:13:e2:cf:c3:98:f9:78:7a:d1:ae:8e:16:aa:04:ee:b2:
e3:b0:c6:69:9c:87:3e:62:85:9d:18:32:7b:e7:5d:88:64:48:
b3:a8:22:21:65:c2:67:2d:ad:6a:9a:9a:76:d4:d7:1f:f3:de:
1a:9e:d0:b7:3e:27:88:17:23:c3:f4:85:7e:ee:87:9a:29:a3:
8f:eb:db:6e
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgISAZfj+/16LkTlnNRK9EOy4Iq1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl
NTQ2YTQwHhcNMjUwNzA3MDgyMzUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDA1OGY2Y2Y4ZDNjOTU0ZmRmM2M2OTg2ODBhNzRhM2NiYTBlMDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8OXMxraqKD0V36z6kz+gCJx3dSg
5EANsxwSffnAa5qQrJWhN1hH8W55oYlw7HOioOEsM4nCOOuP6MgJtmayZwlPWkgE
Rw8pm3vJZR4Iq9/GH+8NNFH7i4rGIq8YuKDMLpIvi3MSCH8nIwXCnPbcmfP82cs0
BSq1s//V2trytVCODK4xnFf6MJ5YOzRRRB9p5uomhhNgOZMXGAIXYjqJoS+K/T9J
xs703icY1zES9fDhUv4IcrT2AYeGFBOFupS6sj4mb0D7dABWmc9kAlZuaBqngVeh
tpheslUw2n9Gg1GO94f1soKJzT9Jk2wNHMDK/TdBBYp6wUu9q5PwWkXBhQIDAQAB
o4ICZDCCAmAwHQYDVR0OBBYEFAAFj2z408lU/fPGmGgKdKPLoOAgMB8GA1UdIwQY
MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt
MjMwNDllNGQyZjEyLzEvQUFXUGJQalR5VlQ5ODhhWWFBcDBvOHVnNENBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy
LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHoGCCsGAQUFBwEHAQH/BGswaTBYBAIAATBSAwQCW2oYAwQB
W2oeAwQCXvAAAwQAXvAHAwQAXvAXMAwDBAVe8CADBABe8CgDBABe8CowDAMEAl7w
LAMEAl7wMAMEAV7wPgMEArmLEAMEAcKYLjANBAIAAjAHAwUAKgFugDANBgkqhkiG
9w0BAQsFAAOCAQEABISpSBf0vE12JWJDpSEJ/aj9EtlUpLdmnuFzAG6uchWlrNJq
ZviRWbDzIQ5vH0kybRGcZFSkUnSCiwb6bR0Gb22jmZeYsroKq/yd0NmyFVLMHdiR
WX2a8lph1r+SI8b9Y0mUJBl/xU2Gw5MU58fffr8AdDEUdy5AwxMnHUEjIm01j51l
r0OpO4ata0C8wnvjuQvhcHyam/KFbZ9HJI5R9CGOI11B+tvfkpWCcIXkTKam5EYR
7mwT4s/DmPl4etGujhaqBO6y47DGaZyHPmKFnRgye+ddiGRIs6giIWXCZy2tapqa
dtTXH/PeGp7Qtz4niBcjw/SFfu6Hmimjj+vbbg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:24:53 2025 by rpki-client