Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/WkrrwVxryAtLhNFR70baemEuAlg.roa
File: WkrrwVxryAtLhNFR70baemEuAlg.roa (raw, json)
Hash identifier: K4NmeKi3Gvie8qG+bJIFQiovPgNvmgaWKizo+ZLILv8=
Subject key identifier: 5A:4A:EB:C1:5C:6B:C8:0B:4B:84:D1:51:EF:46:DA:7A:61:2E:02:58
Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819
Certificate serial: 0198483318F3870F0B66FDCAC4F68AEF3A49
Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/WkrrwVxryAtLhNFR70baemEuAlg.roa
Signing time: Sat 26 Jul 2025 19:26:04 +0000
ROA not before: Sat 26 Jul 2025 19:26:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197834
IP address blocks: 109.75.32.0/23 maxlen: 24
176.32.192.0/21 maxlen: 21
176.32.192.0/23 maxlen: 24
176.32.192.236/32 maxlen: 32
176.32.194.0/23 maxlen: 24
176.32.195.0/24 maxlen: 24
176.32.196.0/23 maxlen: 24
176.32.198.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:33:18:f3:87:0f:0b:66:fd:ca:c4:f6:8a:ef:3a:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819
Validity
Not Before: Jul 26 19:26:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a4aebc15c6bc80b4b84d151ef46da7a612e0258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:5a:9d:1c:99:8f:23:5c:b3:78:5d:d9:c4:c7:
20:8c:25:94:a1:2d:98:42:0e:03:c5:1c:bb:ae:69:
54:33:cb:87:a7:b1:ec:4e:19:bf:d2:26:a3:bb:2e:
e0:b9:ab:fc:3d:34:56:c0:e1:19:a0:9e:a9:c9:cb:
e0:e7:65:e7:60:42:36:48:b0:58:ac:db:44:0c:ef:
78:70:bb:51:a9:b8:10:c4:9b:2a:8f:df:13:d0:68:
b3:87:9f:6e:e1:a7:7b:55:32:e7:73:98:de:23:a4:
67:59:ad:cd:f1:88:c0:68:61:4f:59:e1:ee:db:ca:
b1:16:7a:aa:7f:c2:1d:18:8d:da:11:bf:97:69:af:
cc:36:a1:d3:09:1f:f7:02:59:ae:df:9e:26:6c:aa:
3f:00:a9:21:c8:7b:38:85:ec:95:1a:46:ba:a3:49:
cf:45:76:47:05:e0:2b:49:10:ab:81:04:9d:73:18:
d4:bd:15:88:b6:b0:8d:6a:55:c4:ab:66:d2:b7:d9:
47:44:76:39:50:69:d5:69:91:bb:00:b7:ac:dc:54:
fb:0e:22:c3:96:fe:e0:91:e9:ef:8b:17:25:f1:89:
63:dd:c8:e9:29:69:a3:31:ec:ba:96:5e:37:e2:ed:
c6:2f:dd:cd:d8:c4:b2:e8:90:09:b0:7e:8f:be:fa:
9b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4A:EB:C1:5C:6B:C8:0B:4B:84:D1:51:EF:46:DA:7A:61:2E:02:58
X509v3 Authority Key Identifier:
keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/WkrrwVxryAtLhNFR70baemEuAlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.75.32.0/23
176.32.192.0/21
Signature Algorithm: sha256WithRSAEncryption
25:56:d3:65:ed:fe:d7:c2:6f:51:e8:07:e4:a8:55:80:e4:0c:
0e:49:a0:ed:e6:33:02:db:e1:35:34:7e:de:4a:64:9b:9b:dd:
e5:29:39:ab:c7:de:bd:40:22:63:f7:29:05:26:3d:1a:74:c9:
73:b5:d4:6b:85:d0:5f:de:6e:a8:57:4c:47:f2:45:48:f4:d0:
78:12:7f:4d:a7:e4:96:aa:a3:07:d2:e7:ac:f1:a7:d2:ec:0b:
e2:72:08:ba:f3:4b:16:6d:ce:c7:88:58:87:64:67:cd:68:1e:
79:69:f8:58:49:dc:df:5a:5f:60:94:b1:f3:0d:6e:2e:a2:3c:
bd:34:7a:0e:5d:86:2b:e8:a5:d1:de:a5:f6:55:8a:62:49:1b:
b8:eb:a8:9f:12:b1:11:28:f2:88:5b:46:af:87:eb:39:8c:84:
af:b2:d4:8d:65:0b:f2:36:ed:52:bc:90:ec:30:d5:8e:41:af:
8a:bc:88:da:ee:0e:6a:61:80:00:d6:f2:ff:bc:a7:22:e6:4e:
b3:91:53:ff:18:74:f5:85:d0:d6:47:a5:8b:20:62:68:e2:5a:
3f:97:7a:8a:fb:3f:68:73:c9:f2:70:bd:2d:30:94:3e:3e:5f:
11:c9:b7:5f:ac:dd:7c:d3:cd:4d:3b:1c:fb:05:9e:e5:6b:15:
aa:2e:ae:76
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZhIMxjzhw8LZv3KxPaK7zpJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz
NTI4MTkwHhcNMjUwNzI2MTkyNjA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTRhZWJjMTVjNmJjODBiNGI4NGQxNTFlZjQ2ZGE3YTYxMmUwMjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71qdHJmPI1yzeF3ZxMcgjCWUoS2Y
Qg4DxRy7rmlUM8uHp7HsThm/0iajuy7guav8PTRWwOEZoJ6pycvg52XnYEI2SLBY
rNtEDO94cLtRqbgQxJsqj98T0Gizh59u4ad7VTLnc5jeI6RnWa3N8YjAaGFPWeHu
28qxFnqqf8IdGI3aEb+Xaa/MNqHTCR/3Almu354mbKo/AKkhyHs4heyVGka6o0nP
RXZHBeArSRCrgQSdcxjUvRWItrCNalXEq2bSt9lHRHY5UGnVaZG7ALes3FT7DiLD
lv7gkenvixcl8Ylj3cjpKWmjMey6ll434u3GL93N2MSy6JAJsH6PvvqbTQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFpK68Fca8gLS4TRUe9G2nphLgJYMB8GA1UdIwQY
MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct
ZTM3OTlhZGU5ZGZlLzEvV2tycndWeHJ5QXRMaE5GUjcwYmFlbUV1QWxnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl
LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBbUsgAwQD
sCDAMA0GCSqGSIb3DQEBCwUAA4IBAQAlVtNl7f7Xwm9R6AfkqFWA5AwOSaDt5jMC
2+E1NH7eSmSbm93lKTmrx969QCJj9ykFJj0adMlztdRrhdBf3m6oV0xH8kVI9NB4
En9Np+SWqqMH0ues8afS7Avicgi680sWbc7HiFiHZGfNaB55afhYSdzfWl9glLHz
DW4uojy9NHoOXYYr6KXR3qX2VYpiSRu466ifErERKPKIW0avh+s5jISvstSNZQvy
Nu1SvJDsMNWOQa+KvIja7g5qYYAA1vL/vKci5k6zkVP/GHT1hdDWR6WLIGJo4lo/
l3qK+z9oc8nycL0tMJQ+Pl8RybdfrN18081NOxz7BZ7laxWqLq52
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:13:33 2025 by rpki-client