Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/WY6OCR49xjLWDGDrTxBKtibrV1g.roa
File: WY6OCR49xjLWDGDrTxBKtibrV1g.roa (raw, json)
Hash identifier: /EmbrZRMYbTXiRc/+8GCsi3J47C1og/mSFwDOqHSu8U=
Subject key identifier: 59:8E:8E:09:1E:3D:C6:32:D6:0C:60:EB:4F:10:4A:B6:26:EB:57:58
Certificate issuer: /CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Certificate serial: 0197D15734C5E4C01B8724C3477C2FD81F28
Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/WY6OCR49xjLWDGDrTxBKtibrV1g.roa
Signing time: Thu 03 Jul 2025 17:30:42 +0000
ROA not before: Thu 03 Jul 2025 17:30:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 45.136.39.0/24 maxlen: 24
185.38.26.0/24 maxlen: 24
194.31.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d1:57:34:c5:e4:c0:1b:87:24:c3:47:7c:2f:d8:1f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Validity
Not Before: Jul 3 17:30:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=598e8e091e3dc632d60c60eb4f104ab626eb5758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:85:bf:a1:5b:37:b2:6d:ce:b9:2b:9e:81:b4:
cb:39:3b:4e:6e:d2:c2:92:d7:b4:bd:ae:0b:a7:40:
d6:db:ff:3d:01:26:11:2a:6d:57:95:d6:c6:bd:00:
5d:a8:12:f3:92:04:3a:1a:b2:e9:25:fb:48:c9:3a:
d2:a1:d0:38:25:53:9a:b5:82:9b:47:3c:b6:1d:44:
7c:ba:d3:21:9e:c1:c8:80:70:fd:f2:70:88:cc:46:
8c:b6:0e:f3:1b:a8:44:90:31:b7:c8:c2:c7:55:47:
6a:b7:ff:dd:53:56:5e:03:76:91:cb:46:e7:ec:d4:
9d:03:f4:ac:65:60:99:1a:df:57:97:ad:be:49:ed:
d1:f7:67:0c:31:01:c7:22:0f:d3:fc:c2:24:69:4c:
56:ce:32:2b:32:bc:63:fa:77:70:16:55:95:c7:ca:
f7:e5:50:13:67:8e:a5:8c:e2:86:0b:ae:eb:6b:be:
70:bd:30:ab:53:41:06:15:56:97:2c:62:56:2e:4a:
d4:26:8d:f8:ad:f5:97:51:cb:47:77:72:e2:0a:09:
4e:42:d8:cb:e6:70:0e:d8:37:23:97:e8:82:82:2a:
a1:8d:95:06:02:e6:fb:68:84:be:8c:05:05:e2:db:
59:d4:04:ea:a8:40:9b:1a:59:20:9a:cc:8d:e2:6d:
73:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8E:8E:09:1E:3D:C6:32:D6:0C:60:EB:4F:10:4A:B6:26:EB:57:58
X509v3 Authority Key Identifier:
keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/WY6OCR49xjLWDGDrTxBKtibrV1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.39.0/24
185.38.26.0/24
194.31.167.0/24
Signature Algorithm: sha256WithRSAEncryption
73:fd:08:1d:6a:50:38:31:18:1f:b9:01:d8:85:a8:75:84:7c:
71:95:90:7e:bc:5e:b4:66:bb:88:52:14:5c:d6:f0:b5:b0:84:
ea:9a:4a:8d:63:52:72:f9:38:78:a4:ff:39:93:f1:29:a8:fa:
ee:47:85:53:62:ab:d1:f6:49:31:24:b4:f8:46:93:54:c8:09:
29:ae:21:3d:96:73:cb:a0:7a:2c:b4:79:ff:7d:44:c9:b0:a0:
f8:93:b6:9c:62:78:a3:a1:e0:03:1e:f5:93:d3:b3:b9:4c:6d:
cc:a6:9e:30:0c:46:d6:f0:73:a7:d5:b3:f7:91:96:d8:56:c0:
a7:90:a5:45:8a:68:f0:f6:8f:41:31:0c:7f:65:61:cf:bc:e2:
79:bb:1a:d2:91:a1:97:30:b1:31:fb:46:93:78:02:cd:4b:34:
dd:a4:78:b0:41:cc:f5:e0:69:3f:c4:40:26:5a:39:fb:9d:f5:
67:e4:70:35:17:53:9b:a8:1c:8e:78:8b:19:15:69:58:2a:23:
05:c2:5f:a5:f6:8d:a4:62:45:6c:22:2a:10:a3:6d:0e:a5:f7:
e5:ba:00:5d:30:a7:11:52:59:68:57:b1:fd:1a:82:f3:f4:c8:
1c:8f:5f:79:91:b2:3b:41:f5:b1:12:fc:8f:d1:d3:1b:a0:7f:
31:90:1b:4d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZfRVzTF5MAbhyTDR3wv2B8oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZTc3MGY0N2ZkOTAzOTI1ZDgwYWM1OGUwNWUwNzZmM2Jh
YTExMGIwHhcNMjUwNzAzMTczMDQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OThlOGUwOTFlM2RjNjMyZDYwYzYwZWI0ZjEwNGFiNjI2ZWI1NzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIW/oVs3sm3OuSuegbTLOTtObtLC
kte0va4Lp0DW2/89ASYRKm1XldbGvQBdqBLzkgQ6GrLpJftIyTrSodA4JVOatYKb
Rzy2HUR8utMhnsHIgHD98nCIzEaMtg7zG6hEkDG3yMLHVUdqt//dU1ZeA3aRy0bn
7NSdA/SsZWCZGt9Xl62+Se3R92cMMQHHIg/T/MIkaUxWzjIrMrxj+ndwFlWVx8r3
5VATZ46ljOKGC67ra75wvTCrU0EGFVaXLGJWLkrUJo34rfWXUctHd3LiCglOQtjL
5nAO2Dcjl+iCgiqhjZUGAub7aIS+jAUF4ttZ1ATqqECbGlkgmsyN4m1zKwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFmOjgkePcYy1gxg608QSrYm61dYMB8GA1UdIwQY
MBaAFD7ncPR/2QOSXYCsWOBeB287qhELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTIt
NjI0ZjgzNjgyMTY5LzEvV1k2T0NSNDl4akxXREdEclR4Qkt0aWJyVjFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTItNjI0ZjgzNjgyMTY5
LzEvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALYgnAwQA
uSYaAwQAwh+nMA0GCSqGSIb3DQEBCwUAA4IBAQBz/QgdalA4MRgfuQHYhah1hHxx
lZB+vF60ZruIUhRc1vC1sITqmkqNY1Jy+Th4pP85k/EpqPruR4VTYqvR9kkxJLT4
RpNUyAkpriE9lnPLoHostHn/fUTJsKD4k7acYnijoeADHvWT07O5TG3Mpp4wDEbW
8HOn1bP3kZbYVsCnkKVFimjw9o9BMQx/ZWHPvOJ5uxrSkaGXMLEx+0aTeALNSzTd
pHiwQcz14Gk/xEAmWjn7nfVn5HA1F1ObqByOeIsZFWlYKiMFwl+l9o2kYkVsIioQ
o20OpfflugBdMKcRUlloV7H9GoLz9Mgcj195kbI7QfWxEvyP0dMboH8xkBtN
-----END CERTIFICATE-----
Generated at Sun Jul 20 14:32:23 2025 by rpki-client