Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/bWo1p2kvLDaN2hfsArhL9srtb9s.roa
File: bWo1p2kvLDaN2hfsArhL9srtb9s.roa (raw, json)
Hash identifier: UWHNEgib/6NKUlAE0qvnRy4yH/056aCyLvDBcALH7NY=
Subject key identifier: 6D:6A:35:A7:69:2F:2C:36:8D:DA:17:EC:02:B8:4B:F6:CA:ED:6F:DB
Certificate issuer: /CN=fd007d77abebfe5d86b089efb93e02dcd3004ac6
Certificate serial: 0196ED8B8522344936E82374403653EB8E92
Authority key identifier: FD:00:7D:77:AB:EB:FE:5D:86:B0:89:EF:B9:3E:02:DC:D3:00:4A:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QB9d6vr_l2GsInvuT4C3NMASsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/bWo1p2kvLDaN2hfsArhL9srtb9s.roa
Signing time: Tue 20 May 2025 11:54:25 +0000
ROA not before: Tue 20 May 2025 11:54:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31032
IP address blocks: 194.246.124.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QB9d6vr_l2GsInvuT4C3NMASsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:8b:85:22:34:49:36:e8:23:74:40:36:53:eb:8e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd007d77abebfe5d86b089efb93e02dcd3004ac6
Validity
Not Before: May 20 11:54:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d6a35a7692f2c368dda17ec02b84bf6caed6fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:08:40:7c:46:e1:18:4a:40:89:59:f3:d2:11:
80:23:b8:6a:f4:2c:15:60:dc:48:0f:ee:42:22:b4:
18:cf:d0:fa:95:ae:7e:ba:07:69:19:70:e9:b1:17:
dd:04:14:18:2e:3a:4a:64:c4:a1:24:d1:eb:b8:af:
a8:cd:73:74:35:4a:fe:c0:c4:f5:a5:74:98:8f:20:
c9:e8:fe:4b:31:30:a0:1c:1d:22:46:5c:a1:61:f9:
4a:71:99:09:36:fd:a5:5f:cf:a2:9b:89:5c:1e:8e:
f8:9f:1f:cd:2e:f2:43:f9:04:e8:b9:d9:0c:ca:16:
73:5b:64:31:a0:93:4d:19:48:35:77:15:cd:6e:0a:
94:d7:d9:c5:ae:89:1b:b9:2e:71:3b:4a:39:70:b3:
1f:cb:43:f6:10:6b:14:80:36:de:7b:06:32:d9:e7:
ff:e2:6e:45:39:92:a8:ba:d6:bf:53:95:08:71:18:
a8:65:69:55:ef:4a:7f:06:96:61:02:b6:f2:b5:22:
f8:4c:03:00:59:9c:1d:1a:78:9a:1c:77:2b:fa:f4:
72:5f:fe:77:83:e3:ee:4b:08:af:55:41:3d:f1:25:
3e:3b:fa:7e:6d:38:86:89:c8:8d:ab:e2:fb:c3:67:
a9:a2:86:c1:88:7d:f4:0d:9e:4b:59:49:6e:3c:34:
2a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:6A:35:A7:69:2F:2C:36:8D:DA:17:EC:02:B8:4B:F6:CA:ED:6F:DB
X509v3 Authority Key Identifier:
keyid:FD:00:7D:77:AB:EB:FE:5D:86:B0:89:EF:B9:3E:02:DC:D3:00:4A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QB9d6vr_l2GsInvuT4C3NMASsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/bWo1p2kvLDaN2hfsArhL9srtb9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.124.0/23
Signature Algorithm: sha256WithRSAEncryption
04:ea:c9:fa:bd:62:f2:d6:fc:93:ea:d4:e5:52:fc:4d:8e:10:
51:4c:d4:7e:4b:72:73:88:32:4a:11:91:37:a9:17:d3:ea:07:
1d:76:f9:a7:e2:a7:69:b2:1e:f1:30:27:98:15:92:1f:f1:10:
f9:79:af:4e:1d:0a:4a:af:1c:24:9f:92:0c:1d:a5:27:a4:a6:
c0:56:2a:2b:0c:87:03:15:66:c7:d6:7a:e8:02:14:18:61:b5:
e4:4c:5a:2a:53:ea:4c:32:26:4a:63:e6:c7:0d:8b:59:f4:37:
91:89:7b:08:1f:65:8d:11:1e:51:88:40:bd:63:49:24:f1:13:
a9:6f:74:ab:7d:96:d2:2b:6d:d2:9b:18:b8:78:14:55:6e:92:
38:d4:bd:e8:f8:f9:b9:4c:61:34:dd:fd:96:06:8a:dc:ea:6b:
04:f7:d3:2e:4b:73:10:4b:82:b8:48:e7:75:9d:e0:ea:f4:15:
80:71:8a:40:64:27:7b:20:9f:bd:41:0a:0e:d2:ae:c7:e0:94:
e1:72:b8:c9:ff:69:df:47:f6:00:df:7c:dc:0d:be:43:5a:0a:
4f:dd:f3:fd:84:30:90:60:45:78:22:b7:4a:70:8d:93:76:31:
f1:c8:82:97:06:88:2b:9b:8f:94:8a:61:5b:b2:b5:ef:06:d7:
0f:a9:e8:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZbti4UiNEk26CN0QDZT646SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMDA3ZDc3YWJlYmZlNWQ4NmIwODllZmI5M2UwMmRjZDMw
MDRhYzYwHhcNMjUwNTIwMTE1NDI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDZhMzVhNzY5MmYyYzM2OGRkYTE3ZWMwMmI4NGJmNmNhZWQ2ZmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ghAfEbhGEpAiVnz0hGAI7hq9CwV
YNxID+5CIrQYz9D6la5+ugdpGXDpsRfdBBQYLjpKZMShJNHruK+ozXN0NUr+wMT1
pXSYjyDJ6P5LMTCgHB0iRlyhYflKcZkJNv2lX8+im4lcHo74nx/NLvJD+QToudkM
yhZzW2QxoJNNGUg1dxXNbgqU19nFrokbuS5xO0o5cLMfy0P2EGsUgDbeewYy2ef/
4m5FOZKouta/U5UIcRioZWlV70p/BpZhArbytSL4TAMAWZwdGniaHHcr+vRyX/53
g+PuSwivVUE98SU+O/p+bTiGiciNq+L7w2epoobBiH30DZ5LWUluPDQq9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG1qNadpLyw2jdoX7AK4S/bK7W/bMB8GA1UdIwQY
MBaAFP0AfXer6/5dhrCJ77k+AtzTAErGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1FCOWQ2dnJfbDJHc0ludnVUNEMzTk1BU3NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8zNWQ3ZjYtYThjMi00Mzc0LTlhY2Yt
MWU2ZmQ0YjZjMDRhLzEvYldvMXAya3ZMRGFOMmhmc0FyaEw5c3J0YjlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8zNWQ3ZjYtYThjMi00Mzc0LTlhY2YtMWU2ZmQ0YjZjMDRh
LzEvX1FCOWQ2dnJfbDJHc0ludnVUNEMzTk1BU3NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwvZ8MA0G
CSqGSIb3DQEBCwUAA4IBAQAE6sn6vWLy1vyT6tTlUvxNjhBRTNR+S3JziDJKEZE3
qRfT6gcddvmn4qdpsh7xMCeYFZIf8RD5ea9OHQpKrxwkn5IMHaUnpKbAViorDIcD
FWbH1nroAhQYYbXkTFoqU+pMMiZKY+bHDYtZ9DeRiXsIH2WNER5RiEC9Y0kk8ROp
b3SrfZbSK23Smxi4eBRVbpI41L3o+Pm5TGE03f2WBorc6msE99MuS3MQS4K4SOd1
neDq9BWAcYpAZCd7IJ+9QQoO0q7H4JThcrjJ/2nfR/YA33zcDb5DWgpP3fP9hDCQ
YEV4IrdKcI2TdjHxyIKXBogrm4+UimFbsrXvBtcPqejd
-----END CERTIFICATE-----
Generated at Sat Jun 7 21:06:47 2025 by rpki-client