Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/whkZ_BkkFSHSkNjButU4XMY1DcA.roa
File: whkZ_BkkFSHSkNjButU4XMY1DcA.roa (raw, json)
Hash identifier: Zk8kttrdhe59iQKDIw6twr0aGQmmu/VzqY2FZozR1Ko=
Subject key identifier: C2:19:19:FC:19:24:15:21:D2:90:D8:C1:BA:D5:38:5C:C6:35:0D:C0
Certificate issuer: /CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Certificate serial: 01970DE6BCE3C63CF93E7D3A25AE4E4C8EA2
Authority key identifier: 27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/whkZ_BkkFSHSkNjButU4XMY1DcA.roa
Signing time: Mon 26 May 2025 18:41:54 +0000
ROA not before: Mon 26 May 2025 18:41:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207569
IP address blocks: 95.81.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0d:e6:bc:e3:c6:3c:f9:3e:7d:3a:25:ae:4e:4c:8e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Validity
Not Before: May 26 18:41:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c21919fc19241521d290d8c1bad5385cc6350dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6a:a0:32:d8:92:d2:7e:79:d7:41:37:1f:c5:
45:7b:b3:ea:85:9c:45:ec:22:fe:27:5a:87:cd:75:
44:5f:9a:5c:f5:3d:78:ce:51:a5:bc:79:12:e2:b7:
0e:48:fa:ae:c1:fb:a4:33:ec:88:ec:f4:29:5a:f6:
7a:35:dd:df:b1:3d:93:8a:c4:c2:f0:ae:6b:0e:38:
08:9d:c4:af:1c:01:ad:f2:b2:70:ee:6a:0c:aa:f8:
25:a8:99:6d:51:0c:c4:d8:e8:ea:14:10:60:99:f9:
8b:d9:fb:3a:51:3b:36:71:2e:ec:d9:00:98:19:01:
db:4f:a0:d8:3a:09:f6:8d:a7:15:f3:f5:65:d2:fc:
3d:cf:eb:41:13:e2:78:51:53:0b:5d:24:b2:f0:30:
59:4b:c1:9d:b1:fe:6a:c5:14:4e:d2:f3:60:b8:de:
d1:74:5c:3a:83:97:9c:d2:a8:04:25:48:e8:62:95:
f1:b3:34:d9:08:42:0e:6f:dd:d2:f8:ce:4b:65:da:
4c:b1:76:36:46:84:c8:53:0c:28:52:47:e8:0c:48:
cf:91:13:d8:58:b4:b0:f9:8c:3d:bf:14:1a:04:70:
4d:43:fc:42:89:bd:c0:63:95:ee:b8:e5:4b:aa:8a:
d0:ea:7d:99:0f:f7:14:fa:a6:eb:dc:d1:7b:ae:23:
f6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:19:19:FC:19:24:15:21:D2:90:D8:C1:BA:D5:38:5C:C6:35:0D:C0
X509v3 Authority Key Identifier:
keyid:27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/whkZ_BkkFSHSkNjButU4XMY1DcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.81.112.0/21
Signature Algorithm: sha256WithRSAEncryption
67:a4:ca:79:eb:2d:75:93:3a:76:b0:59:99:8f:3f:92:1f:89:
a8:09:24:b9:24:24:52:fd:f6:d0:89:cc:f2:b8:f0:06:f8:24:
5a:21:13:c9:52:f1:d7:be:68:8d:6f:ea:d8:4c:de:ce:11:a1:
be:bd:97:90:3e:13:93:97:5e:97:23:fb:09:13:d0:9c:d4:13:
1d:52:59:d9:2a:89:3f:26:38:de:9f:8a:d3:1d:01:28:b3:f7:
ff:53:24:df:a9:20:5f:91:2f:2a:a5:d6:ec:7a:0c:70:57:42:
b1:13:44:7f:34:6f:fb:d4:41:be:86:fe:91:fb:7d:dd:8f:df:
f3:8f:cd:cb:91:ad:60:86:90:a7:e6:98:c4:b5:ce:37:e3:5d:
6d:e6:7b:de:e2:8c:2a:44:46:b6:3f:8a:57:d2:a9:2e:23:8b:
e5:ff:62:51:80:29:21:8e:bc:4a:05:66:d2:88:51:ad:bf:25:
54:4a:cb:ed:fd:be:94:32:7c:e3:61:be:ec:f1:99:eb:a4:ed:
a4:dd:a6:76:6d:77:02:4b:f4:de:a5:6a:98:60:da:7b:30:e2:
59:eb:1c:56:23:af:80:dc:48:f8:a5:5d:fe:fe:9b:58:f0:f8:
a4:70:98:cf:de:96:04:59:f9:6b:33:53:3d:00:a4:2a:3d:2d:
40:41:8d:4a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZcN5rzjxjz5Pn06Ja5OTI6iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MmVkMDkwYWNmN2M4MjlhMjJiYmZiZTJiMGU5OThjZDIw
YWQ4MjYwHhcNMjUwNTI2MTg0MTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjE5MTlmYzE5MjQxNTIxZDI5MGQ4YzFiYWQ1Mzg1Y2M2MzUwZGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGqgMtiS0n5510E3H8VFe7PqhZxF
7CL+J1qHzXVEX5pc9T14zlGlvHkS4rcOSPquwfukM+yI7PQpWvZ6Nd3fsT2TisTC
8K5rDjgIncSvHAGt8rJw7moMqvglqJltUQzE2OjqFBBgmfmL2fs6UTs2cS7s2QCY
GQHbT6DYOgn2jacV8/Vl0vw9z+tBE+J4UVMLXSSy8DBZS8Gdsf5qxRRO0vNguN7R
dFw6g5ec0qgEJUjoYpXxszTZCEIOb93S+M5LZdpMsXY2RoTIUwwoUkfoDEjPkRPY
WLSw+Yw9vxQaBHBNQ/xCib3AY5XuuOVLqorQ6n2ZD/cU+qbr3NF7riP2bQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMIZGfwZJBUh0pDYwbrVOFzGNQ3AMB8GA1UdIwQY
MBaAFCcu0JCs98gpoiu/visOmYzSCtgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnk3UWtLejN5Q21pSzctLUt3NlpqTklLMkNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9hMTVmOTYtZWMxOC00NjQ0LTg5YjMt
YWNjMjJiYjRkY2VkLzEvd2hrWl9Ca2tGU0hTa05qQnV0VTRYTVkxRGNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9hMTVmOTYtZWMxOC00NjQ0LTg5YjMtYWNjMjJiYjRkY2Vk
LzEvSnk3UWtLejN5Q21pSzctLUt3NlpqTklLMkNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDX1FwMA0G
CSqGSIb3DQEBCwUAA4IBAQBnpMp56y11kzp2sFmZjz+SH4moCSS5JCRS/fbQiczy
uPAG+CRaIRPJUvHXvmiNb+rYTN7OEaG+vZeQPhOTl16XI/sJE9Cc1BMdUlnZKok/
Jjjen4rTHQEos/f/UyTfqSBfkS8qpdbsegxwV0KxE0R/NG/71EG+hv6R+33dj9/z
j83Lka1ghpCn5pjEtc43411t5nve4owqREa2P4pX0qkuI4vl/2JRgCkhjrxKBWbS
iFGtvyVUSsvt/b6UMnzjYb7s8ZnrpO2k3aZ2bXcCS/TepWqYYNp7MOJZ6xxWI6+A
3Ej4pV3+/ptY8PikcJjP3pYEWflrM1M9AKQqPS1AQY1K
-----END CERTIFICATE-----
Generated at Sat Jun 7 17:34:56 2025 by rpki-client