Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/Wl5iM62c4902uaF6CR15o54SPrY.roa
File: Wl5iM62c4902uaF6CR15o54SPrY.roa (raw, json)
Hash identifier: 9nSLjWOMe+TkmfFAZIjgcyogPeRigHrBzwxJ+UFPC0s=
Subject key identifier: 5A:5E:62:33:AD:9C:E3:DD:36:B9:A1:7A:09:1D:79:A3:9E:12:3E:B6
Certificate issuer: /CN=a34f365e78064b58c44d48cfb39291d3fb1d9e10
Certificate serial: 0197646BC265F4B226FCFAD04F365D91AE50
Authority key identifier: A3:4F:36:5E:78:06:4B:58:C4:4D:48:CF:B3:92:91:D3:FB:1D:9E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/Wl5iM62c4902uaF6CR15o54SPrY.roa
Signing time: Thu 12 Jun 2025 13:54:33 +0000
ROA not before: Thu 12 Jun 2025 13:54:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20694
IP address blocks: 185.166.200.0/22 maxlen: 24
185.166.200.0/24 maxlen: 24
185.166.201.0/24 maxlen: 24
185.166.202.0/24 maxlen: 24
185.166.203.0/24 maxlen: 24
188.94.24.0/21 maxlen: 21
217.114.64.0/20 maxlen: 20
2a01:688::/32 maxlen: 32
2a01:689::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:6b:c2:65:f4:b2:26:fc:fa:d0:4f:36:5d:91:ae:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a34f365e78064b58c44d48cfb39291d3fb1d9e10
Validity
Not Before: Jun 12 13:54:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a5e6233ad9ce3dd36b9a17a091d79a39e123eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a7:89:57:07:95:ad:6a:01:e7:3e:9c:19:2e:
35:d5:c4:b1:82:a0:ed:6e:c3:48:26:68:03:a1:56:
d9:1d:59:3a:56:5f:fa:af:af:7d:78:4e:4c:fa:2a:
af:97:35:c4:a9:3e:7b:bf:78:08:5d:f6:da:72:a4:
49:40:8c:b3:cb:ae:c5:94:5f:bc:17:fd:8a:07:5e:
99:c4:bf:1c:5d:80:0c:13:51:e4:c5:4c:ba:62:7c:
78:8b:6d:e1:60:b1:9b:fb:a4:50:95:a5:82:a1:17:
9f:47:59:ed:4e:94:d5:ea:45:98:3a:13:a7:34:7c:
c2:a6:37:13:c0:2a:a9:1d:64:3b:e4:8a:72:fd:a6:
06:0a:c3:e4:d4:fc:d6:f4:88:39:07:87:71:d2:94:
b5:f7:c7:5d:e4:e5:48:26:ff:b9:ea:49:3d:77:6a:
b4:48:14:e0:23:a7:03:a6:90:52:82:7b:02:f0:28:
9b:36:f3:88:d7:21:98:eb:1f:a3:a7:7e:68:b0:e7:
45:4e:aa:e4:91:3b:78:5a:d1:76:88:3a:85:9f:99:
e3:79:90:3c:6b:06:5d:09:98:4f:cc:ad:66:e1:1d:
75:37:ea:4f:b3:fe:ae:93:5f:96:91:d8:2d:0e:dd:
a2:9a:89:8c:c2:3c:0f:36:ac:4b:c3:11:23:1d:3e:
ee:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5E:62:33:AD:9C:E3:DD:36:B9:A1:7A:09:1D:79:A3:9E:12:3E:B6
X509v3 Authority Key Identifier:
keyid:A3:4F:36:5E:78:06:4B:58:C4:4D:48:CF:B3:92:91:D3:FB:1D:9E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/Wl5iM62c4902uaF6CR15o54SPrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.200.0/22
188.94.24.0/21
217.114.64.0/20
IPv6:
2a01:688::/31
Signature Algorithm: sha256WithRSAEncryption
59:bb:4d:a4:40:f5:12:78:3e:d5:0e:43:36:c1:29:3a:b9:f7:
71:bc:48:d8:d8:f1:5b:56:92:b9:5b:e0:02:f1:51:ef:4b:7d:
8a:88:ae:4b:c6:49:ca:87:22:fb:b7:58:7e:49:40:06:c0:26:
11:19:31:78:d2:7d:47:de:d0:f2:43:31:be:5b:9e:7c:12:33:
21:59:bd:d9:b3:27:49:16:fc:3b:70:1e:da:68:3c:3c:a9:e2:
ad:c4:79:20:3f:f7:f3:43:4c:ee:23:ef:e5:9b:a5:2e:7c:41:
24:db:ee:57:74:2f:cf:f1:64:67:0c:7f:3f:51:fd:06:a9:54:
18:10:88:89:07:68:b9:70:bf:24:84:38:07:bf:45:84:f0:cc:
9a:33:7f:d2:50:7c:f3:09:d1:a4:cf:0f:0f:2b:a3:95:3d:74:
3d:d5:24:85:71:9c:49:c3:fd:d7:c7:f7:05:91:a7:e9:cc:ff:
b0:ba:36:45:5e:d9:2a:fc:53:0f:a6:1d:89:52:91:87:14:fd:
c4:b6:8b:b6:c7:81:85:6c:7c:46:5c:1d:48:9a:cf:44:75:c5:
94:c1:72:6d:12:1e:75:79:db:a2:22:4d:a6:40:40:5d:48:ae:
5d:07:7e:96:f0:1d:b0:a9:9d:97:16:61:3d:6c:27:77:82:b4:
18:2e:ce:0e
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZdka8Jl9LIm/PrQTzZdka5QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNGYzNjVlNzgwNjRiNThjNDRkNDhjZmIzOTI5MWQzZmIx
ZDllMTAwHhcNMjUwNjEyMTM1NDMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTVlNjIzM2FkOWNlM2RkMzZiOWExN2EwOTFkNzlhMzllMTIzZWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaeJVweVrWoB5z6cGS411cSxgqDt
bsNIJmgDoVbZHVk6Vl/6r699eE5M+iqvlzXEqT57v3gIXfbacqRJQIyzy67FlF+8
F/2KB16ZxL8cXYAME1HkxUy6Ynx4i23hYLGb+6RQlaWCoRefR1ntTpTV6kWYOhOn
NHzCpjcTwCqpHWQ75Ipy/aYGCsPk1PzW9Ig5B4dx0pS198dd5OVIJv+56kk9d2q0
SBTgI6cDppBSgnsC8CibNvOI1yGY6x+jp35osOdFTqrkkTt4WtF2iDqFn5njeZA8
awZdCZhPzK1m4R11N+pPs/6uk1+WkdgtDt2imomMwjwPNqxLwxEjHT7uawIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFFpeYjOtnOPdNrmhegkdeaOeEj62MB8GA1UdIwQY
MBaAFKNPNl54BktYxE1Iz7OSkdP7HZ4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzA4MlhuZ0dTMWpFVFVqUHM1S1IwX3NkbmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8zZWU3YzUtMTI2NC00N2U5LThhMTIt
MDQxYjc4YWRhMjE1LzEvV2w1aU02MmM0OTAydWFGNkNSMTVvNTRTUHJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8zZWU3YzUtMTI2NC00N2U5LThhMTItMDQxYjc4YWRhMjE1
LzEvbzA4MlhuZ0dTMWpFVFVqUHM1S1IwX3NkbmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuabIAwQD
vF4YAwQE2XJAMA0EAgACMAcDBQEqAQaIMA0GCSqGSIb3DQEBCwUAA4IBAQBZu02k
QPUSeD7VDkM2wSk6ufdxvEjY2PFbVpK5W+AC8VHvS32KiK5LxknKhyL7t1h+SUAG
wCYRGTF40n1H3tDyQzG+W558EjMhWb3ZsydJFvw7cB7aaDw8qeKtxHkgP/fzQ0zu
I+/lm6UufEEk2+5XdC/P8WRnDH8/Uf0GqVQYEIiJB2i5cL8khDgHv0WE8MyaM3/S
UHzzCdGkzw8PK6OVPXQ91SSFcZxJw/3Xx/cFkafpzP+wujZFXtkq/FMPph2JUpGH
FP3Etou2x4GFbHxGXB1Ims9EdcWUwXJtEh51eduiIk2mQEBdSK5dB36W8B2wqZ2X
FmE9bCd3grQYLs4O
-----END CERTIFICATE-----
Generated at Sat Jun 14 21:24:57 2025 by rpki-client