Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/DhYlOELQmejsuqE0q-lFm-NVMP0.roa
File: DhYlOELQmejsuqE0q-lFm-NVMP0.roa (raw, json)
Hash identifier: mf0P0l64vNrzlnAnRIlTkqO53r1pyoZwPlURmjISdFU=
Subject key identifier: 0E:16:25:38:42:D0:99:E8:EC:BA:A1:34:AB:E9:45:9B:E3:55:30:FD
Certificate issuer: /CN=c0f42f73ff2bcc4885b1200bd02ee7e29f608e2b
Certificate serial: 0197640C4F8066380C80804BFC9DAB8AC33D
Authority key identifier: C0:F4:2F:73:FF:2B:CC:48:85:B1:20:0B:D0:2E:E7:E2:9F:60:8E:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPQvc_8rzEiFsSAL0C7n4p9gjis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/DhYlOELQmejsuqE0q-lFm-NVMP0.roa
Signing time: Thu 12 Jun 2025 12:10:17 +0000
ROA not before: Thu 12 Jun 2025 12:10:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197662
IP address blocks: 91.223.240.0/24 maxlen: 24
185.74.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft
rsync://rpki.ripe.net/repository/DEFAULT/wPQvc_8rzEiFsSAL0C7n4p9gjis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 00:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:0c:4f:80:66:38:0c:80:80:4b:fc:9d:ab:8a:c3:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f42f73ff2bcc4885b1200bd02ee7e29f608e2b
Validity
Not Before: Jun 12 12:10:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e16253842d099e8ecbaa134abe9459be35530fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:69:2a:ee:78:74:1f:dc:4c:ed:4e:15:9f:22:
3c:11:6d:c2:d1:b8:18:0c:b4:80:af:e3:4d:26:ae:
42:90:53:bb:bb:2e:4b:5e:ff:62:00:9b:03:c9:4c:
70:83:e4:df:2f:7c:34:59:cb:9c:c7:b7:89:b2:0c:
0c:46:1d:58:58:95:64:f2:c8:ac:2f:30:73:be:b6:
4f:c6:6f:0d:e1:7e:fd:81:90:83:19:b3:f3:cd:d2:
72:4a:0b:bd:dc:0b:17:84:0d:90:ef:87:57:07:76:
72:6c:0c:d8:a4:87:64:b2:e0:34:ee:3c:29:75:82:
45:85:2e:fb:83:2c:13:5e:d7:ed:54:d2:35:80:27:
1c:53:9a:87:c4:ba:76:28:42:80:15:1b:a5:0f:58:
88:a7:f2:e5:e7:ad:af:c1:ad:7d:ca:8b:74:ea:93:
c7:69:a0:b4:cb:8a:22:df:54:e4:6e:00:6e:0f:21:
d3:54:45:da:ff:6c:0d:fc:dc:ad:04:29:b6:68:f1:
dc:91:2a:57:15:f5:aa:bd:70:08:03:2e:e2:27:1c:
c7:80:4b:1e:d4:7e:24:c6:0a:76:87:cb:e4:12:7a:
6f:f3:45:8e:7f:e0:36:de:5b:17:ce:9f:3b:d8:3c:
c8:8e:0a:58:2f:ce:c6:91:57:02:28:02:da:93:22:
0c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:16:25:38:42:D0:99:E8:EC:BA:A1:34:AB:E9:45:9B:E3:55:30:FD
X509v3 Authority Key Identifier:
keyid:C0:F4:2F:73:FF:2B:CC:48:85:B1:20:0B:D0:2E:E7:E2:9F:60:8E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPQvc_8rzEiFsSAL0C7n4p9gjis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/DhYlOELQmejsuqE0q-lFm-NVMP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.240.0/24
185.74.200.0/22
Signature Algorithm: sha256WithRSAEncryption
12:c1:ba:0f:31:78:61:4b:80:1a:83:7a:68:86:c6:7d:8c:68:
94:28:dc:d4:d9:53:c0:f8:5e:52:ba:4f:84:35:33:ae:a1:b4:
f6:43:1e:e9:48:14:7a:19:cf:c3:89:ef:c3:d9:b0:48:bd:a7:
15:a8:7d:4c:be:96:03:3e:98:4e:86:d0:c9:87:dd:3e:c9:58:
b0:08:57:7c:1c:a2:fc:f7:e0:ca:17:78:6f:11:aa:7e:ae:a3:
f1:26:cf:a5:35:c6:d4:ee:31:34:34:bd:a9:54:60:dc:d4:7d:
fa:58:75:ef:c4:7a:38:69:dd:4d:bc:f6:ec:4f:22:c1:b7:76:
85:fb:39:92:80:15:9f:e8:40:31:14:e1:96:f2:cd:66:2e:95:
be:c8:64:b8:51:c9:0d:d1:7c:c0:b1:92:20:2c:fc:ed:67:6f:
63:3d:ef:69:df:35:41:79:56:dc:cc:e1:69:ac:fb:b0:f8:03:
54:96:e7:8c:3b:2f:58:7b:89:68:83:dd:d0:c9:c4:5f:77:3a:
93:99:cf:4b:bf:72:2e:be:dc:2b:33:26:46:ff:8a:a8:cf:d5:
9c:b0:98:8e:66:97:ed:20:21:79:71:0a:fa:ba:56:74:0d:07:
59:bc:9f:88:e7:91:55:fa:46:ef:36:f2:18:ee:ad:42:17:e9:
4d:65:d8:80
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZdkDE+AZjgMgIBL/J2risM9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZjQyZjczZmYyYmNjNDg4NWIxMjAwYmQwMmVlN2UyOWY2
MDhlMmIwHhcNMjUwNjEyMTIxMDE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTE2MjUzODQyZDA5OWU4ZWNiYWExMzRhYmU5NDU5YmUzNTUzMGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumkq7nh0H9xM7U4VnyI8EW3C0bgY
DLSAr+NNJq5CkFO7uy5LXv9iAJsDyUxwg+TfL3w0Wcucx7eJsgwMRh1YWJVk8sis
LzBzvrZPxm8N4X79gZCDGbPzzdJySgu93AsXhA2Q74dXB3ZybAzYpIdksuA07jwp
dYJFhS77gywTXtftVNI1gCccU5qHxLp2KEKAFRulD1iIp/Ll562vwa19yot06pPH
aaC0y4oi31TkbgBuDyHTVEXa/2wN/NytBCm2aPHckSpXFfWqvXAIAy7iJxzHgEse
1H4kxgp2h8vkEnpv80WOf+A23lsXzp872DzIjgpYL87GkVcCKALakyIMSQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFA4WJThC0Jno7LqhNKvpRZvjVTD9MB8GA1UdIwQY
MBaAFMD0L3P/K8xIhbEgC9Au5+KfYI4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1BRdmNfOHJ6RWlGc1NBTDBDN240cDlnamlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81OWY4OTUtNWM1MC00MzZhLTk3MDct
N2RkNTdlNzM2NzQ2LzEvRGhZbE9FTFFtZWpzdXFFMHEtbEZtLU5WTVAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC81OWY4OTUtNWM1MC00MzZhLTk3MDctN2RkNTdlNzM2NzQ2
LzEvd1BRdmNfOHJ6RWlGc1NBTDBDN240cDlnamlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9/wAwQC
uUrIMA0GCSqGSIb3DQEBCwUAA4IBAQASwboPMXhhS4Aag3pohsZ9jGiUKNzU2VPA
+F5Suk+ENTOuobT2Qx7pSBR6Gc/Die/D2bBIvacVqH1MvpYDPphOhtDJh90+yViw
CFd8HKL89+DKF3hvEap+rqPxJs+lNcbU7jE0NL2pVGDc1H36WHXvxHo4ad1NvPbs
TyLBt3aF+zmSgBWf6EAxFOGW8s1mLpW+yGS4UckN0XzAsZIgLPztZ29jPe9p3zVB
eVbczOFprPuw+ANUlueMOy9Ye4log93QycRfdzqTmc9Lv3IuvtwrMyZG/4qoz9Wc
sJiOZpftICF5cQr6ulZ0DQdZvJ+I55FV+kbvNvIY7q1CF+lNZdiA
-----END CERTIFICATE-----
Generated at Sat Jul 5 07:14:30 2025 by rpki-client