Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/wpn2zuIYSbrrxUu9itX663rnTUY.roa
File: wpn2zuIYSbrrxUu9itX663rnTUY.roa (raw, json)
Hash identifier: 2EXZnIBOHj+xi2HeAFRXs8lZBsjWZKGbNXjYDR6LDbk=
Subject key identifier: C2:99:F6:CE:E2:18:49:BA:EB:C5:4B:BD:8A:D5:FA:EB:7A:E7:4D:46
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 0197C5BB67246296D7B639B2EEFFE1D30C66
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/wpn2zuIYSbrrxUu9itX663rnTUY.roa
Signing time: Tue 01 Jul 2025 11:24:42 +0000
ROA not before: Tue 01 Jul 2025 11:24:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52008
IP address blocks: 95.81.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:bb:67:24:62:96:d7:b6:39:b2:ee:ff:e1:d3:0c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Jul 1 11:24:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c299f6cee21849baebc54bbd8ad5faeb7ae74d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c7:13:da:a1:97:4e:be:47:d6:4e:c8:6f:fd:
7c:aa:9f:03:8c:f9:6f:a3:59:a6:5e:cf:b4:8f:01:
5a:29:dd:77:7b:0b:54:13:e3:af:23:90:26:5e:9a:
c1:bc:8c:e2:4e:57:d6:13:31:db:44:17:99:26:ed:
6e:fb:fd:b6:bf:8a:56:86:13:18:bb:01:0e:b6:00:
67:2c:4f:f1:f1:80:f8:27:62:b9:77:ec:11:1d:49:
4e:f1:06:bf:8d:b5:6a:fa:cf:50:17:f5:c9:d9:fa:
90:84:8f:3c:40:38:ec:6a:ba:12:0f:4c:70:72:a9:
2a:f0:6b:9c:bf:2e:6e:57:64:de:38:6b:7b:47:b9:
a6:e7:68:dc:22:87:71:9c:40:b7:5a:dc:c7:86:03:
b5:36:b5:e2:ce:3b:31:f2:93:bb:ac:3e:ed:bb:6e:
49:c9:95:8a:6b:7a:a6:8b:a4:7d:13:00:11:67:ab:
a8:cd:d9:98:f3:5d:59:8f:7e:e9:a8:d3:b9:b2:08:
46:b7:1f:36:16:ee:a1:b3:41:93:62:4f:63:1e:e9:
f3:74:f7:f1:fc:87:0b:f5:86:4c:3a:3a:1f:78:7b:
c6:e5:22:bf:06:9d:27:9a:e0:c5:e6:d6:66:ad:80:
66:24:09:d0:7e:20:b7:c9:e2:d3:c9:d0:9e:ff:95:
ce:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:99:F6:CE:E2:18:49:BA:EB:C5:4B:BD:8A:D5:FA:EB:7A:E7:4D:46
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/wpn2zuIYSbrrxUu9itX663rnTUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.81.116.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:33:e7:c7:a8:7f:78:5f:2c:46:f7:83:cb:8a:a1:6a:f4:65:
a5:78:13:31:61:18:d3:02:eb:d3:f1:7c:70:5f:c6:9e:86:90:
d3:48:8f:24:c3:b2:e8:06:3a:40:aa:1b:3b:39:73:38:4c:77:
bf:c3:a7:8d:d9:a8:e5:81:ef:64:72:b9:e5:44:5f:ea:31:2d:
60:f2:e3:fd:65:82:8a:87:b7:b9:5f:06:0a:19:ce:d1:93:e6:
25:a1:83:f2:f6:fe:85:09:a1:ff:cd:06:dd:c0:33:d8:e1:59:
41:e0:d0:45:c3:aa:52:b2:cd:50:67:64:85:1f:b2:f8:d4:67:
b0:46:81:67:a3:0d:5a:ff:93:60:a8:22:98:f9:d2:95:ac:cf:
13:c8:18:9e:07:db:b8:70:93:22:93:cc:83:81:1a:5c:a9:fc:
ae:b1:3d:b3:93:4b:22:be:53:91:0d:82:61:de:b9:29:9c:1c:
f5:1b:45:e5:f3:91:df:4a:0f:af:d1:7d:e7:93:30:07:f2:cc:
7e:32:0b:20:4a:c6:dd:1a:aa:59:fe:4c:1d:74:72:d6:8c:2a:
3b:2d:b1:58:f6:8d:92:ca:24:16:05:57:cb:67:14:f7:ef:17:
53:e6:c4:7b:15:65:3e:9e:98:53:61:76:ac:8e:6d:6c:c4:d0:
50:20:6f:7e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZfFu2ckYpbXtjmy7v/h0wxmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx
ZmE4MzkwHhcNMjUwNzAxMTEyNDQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjk5ZjZjZWUyMTg0OWJhZWJjNTRiYmQ4YWQ1ZmFlYjdhZTc0ZDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2scT2qGXTr5H1k7Ib/18qp8DjPlv
o1mmXs+0jwFaKd13ewtUE+OvI5AmXprBvIziTlfWEzHbRBeZJu1u+/22v4pWhhMY
uwEOtgBnLE/x8YD4J2K5d+wRHUlO8Qa/jbVq+s9QF/XJ2fqQhI88QDjsaroSD0xw
cqkq8Gucvy5uV2TeOGt7R7mm52jcIodxnEC3WtzHhgO1NrXizjsx8pO7rD7tu25J
yZWKa3qmi6R9EwARZ6uozdmY811Zj37pqNO5sghGtx82Fu6hs0GTYk9jHunzdPfx
/IcL9YZMOjofeHvG5SK/Bp0nmuDF5tZmrYBmJAnQfiC3yeLTydCe/5XOFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMKZ9s7iGEm668VLvYrV+ut6501GMB8GA1UdIwQY
MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt
MzA0OTVmNDAzNzg0LzEvd3BuMnp1SVlTYnJyeFV1OWl0WDY2M3JuVFVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0
LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX1F0MA0G
CSqGSIb3DQEBCwUAA4IBAQAKM+fHqH94XyxG94PLiqFq9GWleBMxYRjTAuvT8Xxw
X8aehpDTSI8kw7LoBjpAqhs7OXM4THe/w6eN2ajlge9kcrnlRF/qMS1g8uP9ZYKK
h7e5XwYKGc7Rk+YloYPy9v6FCaH/zQbdwDPY4VlB4NBFw6pSss1QZ2SFH7L41Gew
RoFnow1a/5NgqCKY+dKVrM8TyBieB9u4cJMik8yDgRpcqfyusT2zk0sivlORDYJh
3rkpnBz1G0Xl85HfSg+v0X3nkzAH8sx+MgsgSsbdGqpZ/kwddHLWjCo7LbFY9o2S
yiQWBVfLZxT37xdT5sR7FWU+nphTYXasjm1sxNBQIG9+
-----END CERTIFICATE-----
Generated at Sun Jul 20 18:53:15 2025 by rpki-client