Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/wDw_yaW2mDHKWhfbDmEQeAUfemM.roa
File: wDw_yaW2mDHKWhfbDmEQeAUfemM.roa (raw, json)
Hash identifier: yBTqphspanuhhoJPP8VWYjkNFrFPVSeyWYQs7AGvVI0=
Subject key identifier: C0:3C:3F:C9:A5:B6:98:31:CA:5A:17:DB:0E:61:10:78:05:1F:7A:63
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01982CC8FB55C0C8DAD200BBBCD4A37ED933
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/wDw_yaW2mDHKWhfbDmEQeAUfemM.roa
Signing time: Mon 21 Jul 2025 11:40:25 +0000
ROA not before: Mon 21 Jul 2025 11:40:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137517
IP address blocks: 185.227.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2c:c8:fb:55:c0:c8:da:d2:00:bb:bc:d4:a3:7e:d9:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jul 21 11:40:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c03c3fc9a5b69831ca5a17db0e611078051f7a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8b:00:5e:6a:62:3d:75:21:5b:17:ab:97:fa:
e3:f7:21:00:87:fd:38:0c:7e:79:c5:0c:6d:e9:11:
d6:7b:fa:63:4c:64:06:2a:96:28:3d:4e:f4:d1:c6:
03:46:c0:9c:c0:14:80:8c:ea:5f:7a:34:97:f4:ac:
a1:18:85:dd:49:29:ca:82:97:d0:b3:cf:6b:cc:c5:
20:b9:e1:6b:ff:2d:17:6d:5a:b1:ce:25:c7:ba:91:
f5:a8:7b:a4:1e:be:39:6f:dc:f7:c1:77:9a:a7:b4:
84:52:88:99:e9:3d:5e:05:e3:f2:6d:73:4f:25:7a:
44:24:3d:72:20:d3:8e:01:8b:ab:1e:6f:48:5e:5d:
35:ac:28:6c:41:a0:21:0e:b5:d1:02:f1:d2:73:21:
7e:c6:6c:63:f1:73:7d:a4:87:30:41:f7:c9:c0:67:
bf:5e:33:a2:bc:af:25:93:1c:da:98:b8:3a:e1:f9:
e4:09:84:66:e7:71:38:ea:40:ea:7c:52:e6:bd:d4:
ad:56:d2:fb:a9:42:cb:71:18:ce:51:00:c6:5f:ba:
ca:c6:2e:82:c6:12:a0:9d:bf:b2:31:c5:fc:1e:93:
5a:85:36:8e:9b:27:5f:30:17:13:00:3a:5e:bc:b4:
f8:6f:17:11:b8:86:14:7f:f2:08:99:1e:dd:cf:77:
ca:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:3C:3F:C9:A5:B6:98:31:CA:5A:17:DB:0E:61:10:78:05:1F:7A:63
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/wDw_yaW2mDHKWhfbDmEQeAUfemM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.146.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:4d:59:71:db:d7:8a:e7:9f:9e:6f:f5:51:0a:ba:66:2a:9a:
e4:6d:b0:89:78:bc:c0:fe:1f:b9:4c:c0:c6:54:4a:df:b1:20:
a7:6f:5c:99:ea:8b:8b:f5:68:63:ce:4f:43:ac:09:20:08:0a:
57:90:d3:ba:a0:fb:a7:6a:49:45:0e:e4:aa:84:8b:d7:8b:d5:
75:78:9d:e4:67:75:d3:63:c1:d4:dd:04:fa:40:16:19:13:76:
e6:d3:cf:dd:a8:97:a5:a9:bb:27:df:45:32:2e:dc:4f:3f:8f:
08:9e:60:93:39:71:c3:52:95:86:0d:5d:53:d9:67:f4:8b:f7:
7d:f3:a3:79:0a:d6:13:01:a0:8b:0c:7c:be:b8:0a:b8:42:4a:
3c:2b:8a:90:1e:5b:7f:76:19:78:2f:a8:dc:3e:6f:f5:03:ea:
66:d1:12:03:a8:6c:39:1b:92:37:4b:87:e3:f4:a5:8c:70:36:
42:10:13:83:92:f6:ab:e3:f6:6e:04:76:ed:32:b4:18:7c:19:
90:5b:6b:c9:1c:36:8a:f4:d0:9b:cf:aa:e1:7a:52:8e:c3:30:
2e:c1:6e:93:85:0f:95:1a:73:71:12:52:89:01:51:eb:43:c8:
16:6a:8a:18:f3:27:c5:2b:c0:c0:a1:1b:b1:ec:d0:fc:1d:fe:
10:e7:19:39
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZgsyPtVwMja0gC7vNSjftkzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjUwNzIxMTE0MDI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDNjM2ZjOWE1YjY5ODMxY2E1YTE3ZGIwZTYxMTA3ODA1MWY3YTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIsAXmpiPXUhWxerl/rj9yEAh/04
DH55xQxt6RHWe/pjTGQGKpYoPU700cYDRsCcwBSAjOpfejSX9KyhGIXdSSnKgpfQ
s89rzMUgueFr/y0XbVqxziXHupH1qHukHr45b9z3wXeap7SEUoiZ6T1eBePybXNP
JXpEJD1yINOOAYurHm9IXl01rChsQaAhDrXRAvHScyF+xmxj8XN9pIcwQffJwGe/
XjOivK8lkxzamLg64fnkCYRm53E46kDqfFLmvdStVtL7qULLcRjOUQDGX7rKxi6C
xhKgnb+yMcX8HpNahTaOmydfMBcTADpevLT4bxcRuIYUf/IImR7dz3fKkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMA8P8mltpgxyloX2w5hEHgFH3pjMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvd0R3X3lhVzJtREhLV2hmYkRtRVFlQVVmZW1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueOSMA0G
CSqGSIb3DQEBCwUAA4IBAQAtTVlx29eK55+eb/VRCrpmKprkbbCJeLzA/h+5TMDG
VErfsSCnb1yZ6ouL9Whjzk9DrAkgCApXkNO6oPunaklFDuSqhIvXi9V1eJ3kZ3XT
Y8HU3QT6QBYZE3bm08/dqJelqbsn30UyLtxPP48InmCTOXHDUpWGDV1T2Wf0i/d9
86N5CtYTAaCLDHy+uAq4Qko8K4qQHlt/dhl4L6jcPm/1A+pm0RIDqGw5G5I3S4fj
9KWMcDZCEBODkvar4/ZuBHbtMrQYfBmQW2vJHDaK9NCbz6rhelKOwzAuwW6ThQ+V
GnNxElKJAVHrQ8gWaooY8yfFK8DAoRux7ND8Hf4Q5xk5
-----END CERTIFICATE-----
Generated at Tue Jul 22 20:08:16 2025 by rpki-client