Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/W1gtHYOxkSQKrOdwkNpP1ZoMoUY.roa
File: W1gtHYOxkSQKrOdwkNpP1ZoMoUY.roa (raw, json)
Hash identifier: 5S4JEcGJktduCewz9POQY0aRBOXQzpGOLodHYl3CjqI=
Subject key identifier: 5B:58:2D:1D:83:B1:91:24:0A:AC:E7:70:90:DA:4F:D5:9A:0C:A1:46
Certificate issuer: /CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
Certificate serial: 0196F27322E2CC1F66F44C965172C7A598A9
Authority key identifier: 9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/W1gtHYOxkSQKrOdwkNpP1ZoMoUY.roa
Signing time: Wed 21 May 2025 10:45:53 +0000
ROA not before: Wed 21 May 2025 10:45:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203925
IP address blocks: 185.118.192.0/24 maxlen: 24
185.118.193.0/24 maxlen: 24
185.118.194.0/24 maxlen: 24
185.118.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f2:73:22:e2:cc:1f:66:f4:4c:96:51:72:c7:a5:98:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
Validity
Not Before: May 21 10:45:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b582d1d83b191240aace77090da4fd59a0ca146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:18:87:df:57:b5:9f:71:c3:e6:ad:e6:75:77:
8e:f1:53:9d:91:28:72:72:84:a9:ee:54:39:69:a3:
da:ff:61:cf:15:f0:95:3c:a5:c9:31:10:cd:71:f4:
33:31:0f:ff:2c:b7:75:88:dd:42:0d:e5:eb:ad:78:
4a:81:b0:5c:e3:08:40:92:48:1c:94:ca:b9:26:1b:
17:81:87:b5:2f:7e:53:17:54:3a:ed:16:8f:d4:1c:
82:5a:f6:c2:f1:d8:9b:34:fc:db:a5:76:85:e0:d6:
fc:07:bf:07:9f:6e:e5:54:1b:bf:82:e1:b1:40:2f:
7d:51:5b:f4:52:61:7a:07:6b:ce:73:af:ca:b4:1a:
f0:94:26:e8:2f:84:0a:20:c0:4d:3b:20:b7:2e:49:
d3:82:32:48:48:5c:92:a3:90:a7:ac:41:84:90:54:
2d:b2:82:b0:21:bc:da:b1:10:0e:6b:a2:04:70:03:
94:07:3c:1c:14:3a:90:2d:d4:05:74:db:6e:84:78:
98:6a:ff:3a:0b:d3:2b:da:93:09:84:d1:68:7d:d6:
60:b8:5a:c3:5d:fa:fa:d2:97:53:5c:f1:f5:e1:bb:
58:52:6d:90:e6:84:3d:49:e2:4c:98:46:9c:c9:d8:
01:ac:81:59:45:6a:62:c1:b3:b0:b5:77:89:92:8b:
4d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:58:2D:1D:83:B1:91:24:0A:AC:E7:70:90:DA:4F:D5:9A:0C:A1:46
X509v3 Authority Key Identifier:
keyid:9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/W1gtHYOxkSQKrOdwkNpP1ZoMoUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.192.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:cb:f5:80:68:ed:b3:0e:95:d1:e4:42:6e:7d:e8:c7:66:14:
16:fe:c8:c0:8b:dd:1d:31:7f:3c:17:5b:69:c2:2a:65:1c:b9:
6f:5d:d5:f4:9e:26:ad:53:b7:0e:c8:9b:ce:81:4b:6b:5e:31:
33:13:b5:7f:0b:ce:b3:87:28:5a:c9:3b:74:25:d9:9d:60:da:
54:c2:8a:87:bc:bb:94:e1:53:9e:ab:72:50:35:e3:ff:a9:ef:
b9:7f:c6:13:d8:31:3a:5c:83:f4:3c:30:24:fb:27:99:23:7f:
98:46:c6:f8:12:72:76:64:87:67:32:4d:47:ad:80:09:ce:87:
44:eb:af:13:bf:d7:d7:c4:15:05:be:4b:d3:a8:46:43:86:bb:
94:57:b0:49:b8:d4:2e:02:f0:c6:84:76:f4:ea:0f:77:f9:a0:
09:3a:22:56:73:9e:fb:c0:0f:ad:cd:c7:42:2a:07:e2:74:ec:
4d:fc:3c:3f:fb:b7:5f:b4:46:11:0f:fc:91:1d:74:f7:59:10:
ab:d0:af:1f:2c:cb:e3:3b:4d:f7:7d:6d:c2:47:da:59:d8:c6:
ae:a2:96:ae:09:7c:54:b5:33:2d:e9:28:c5:55:c4:2a:70:37:
05:a5:e9:45:1c:25:aa:ce:8c:0e:1f:7c:40:5f:d7:2a:2a:df:
a5:97:5f:f8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZbycyLizB9m9EyWUXLHpZipMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkNWVjY2U4Yzg3YzRmMGE3NWJhMjFlNWM4NGY2MjQxMjFl
MDhlMzIwHhcNMjUwNTIxMTA0NTUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjU4MmQxZDgzYjE5MTI0MGFhY2U3NzA5MGRhNGZkNTlhMGNhMTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RiH31e1n3HD5q3mdXeO8VOdkShy
coSp7lQ5aaPa/2HPFfCVPKXJMRDNcfQzMQ//LLd1iN1CDeXrrXhKgbBc4whAkkgc
lMq5JhsXgYe1L35TF1Q67RaP1ByCWvbC8dibNPzbpXaF4Nb8B78Hn27lVBu/guGx
QC99UVv0UmF6B2vOc6/KtBrwlCboL4QKIMBNOyC3LknTgjJISFySo5CnrEGEkFQt
soKwIbzasRAOa6IEcAOUBzwcFDqQLdQFdNtuhHiYav86C9Mr2pMJhNFofdZguFrD
Xfr60pdTXPH14btYUm2Q5oQ9SeJMmEacydgBrIFZRWpiwbOwtXeJkotNuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFtYLR2DsZEkCqzncJDaT9WaDKFGMB8GA1UdIwQY
MBaAFJ1ezOjIfE8Kdboh5chPYkEh4I4yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblY3TTZNaDhUd3AxdWlIbHlFOWlRU0hnampJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9iZWM3NTYtMWRmZS00Mzc0LTg2MDct
OWQ4ZjBlZjVjNTAzLzEvVzFndEhZT3hrU1FLck9kd2tOcFAxWm9Nb1VZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9iZWM3NTYtMWRmZS00Mzc0LTg2MDctOWQ4ZjBlZjVjNTAz
LzEvblY3TTZNaDhUd3AxdWlIbHlFOWlRU0hnampJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXbAMA0G
CSqGSIb3DQEBCwUAA4IBAQBfy/WAaO2zDpXR5EJufejHZhQW/sjAi90dMX88F1tp
wiplHLlvXdX0niatU7cOyJvOgUtrXjEzE7V/C86zhyhayTt0JdmdYNpUwoqHvLuU
4VOeq3JQNeP/qe+5f8YT2DE6XIP0PDAk+yeZI3+YRsb4EnJ2ZIdnMk1HrYAJzodE
668Tv9fXxBUFvkvTqEZDhruUV7BJuNQuAvDGhHb06g93+aAJOiJWc577wA+tzcdC
KgfidOxN/Dw/+7dftEYRD/yRHXT3WRCr0K8fLMvjO033fW3CR9pZ2MauopauCXxU
tTMt6SjFVcQqcDcFpelFHCWqzowOH3xAX9cqKt+ll1/4
-----END CERTIFICATE-----
Generated at Fri Jun 13 02:50:44 2025 by rpki-client