Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wsFGJdFqxDSrc6ZPuYUM3OEPBt4.roa
File: wsFGJdFqxDSrc6ZPuYUM3OEPBt4.roa (raw, json)
Hash identifier: 5N2lY2rir++DNkU0rNQwk4o3De67eUBe63z0gVaBPpI=
Subject key identifier: C2:C1:46:25:D1:6A:C4:34:AB:73:A6:4F:B9:85:0C:DC:E1:0F:06:DE
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 019918B476A0A1CD1B29E47E6A542D87866B
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wsFGJdFqxDSrc6ZPuYUM3OEPBt4.roa
Signing time: Fri 05 Sep 2025 07:08:23 +0000
ROA not before: Fri 05 Sep 2025 07:08:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64160
IP address blocks: 194.143.203.0/24 maxlen: 24
194.143.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:b4:76:a0:a1:cd:1b:29:e4:7e:6a:54:2d:87:86:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Sep 5 07:08:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2c14625d16ac434ab73a64fb9850cdce10f06de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6a:92:e7:cf:a8:90:5f:57:9a:89:fb:be:e2:
c7:9b:7f:61:07:08:4e:ff:49:6d:63:10:bd:06:75:
40:06:67:00:48:0c:af:63:03:09:7d:55:3d:e9:4c:
eb:d6:c7:fe:b0:6b:39:62:76:b8:fe:7c:02:04:eb:
fc:97:37:1e:83:98:d4:55:89:c2:47:a9:6f:ea:a0:
a7:65:05:27:9c:d0:7d:c7:11:46:78:bd:e7:70:4e:
7a:10:22:09:4e:9d:02:aa:4d:86:27:bb:af:ba:14:
e0:b3:6a:4f:3e:7a:af:25:2a:ee:7a:3a:61:67:d0:
20:72:a7:62:b6:e1:1e:b0:ba:9d:5c:36:c7:c8:20:
c5:ec:ec:00:4c:33:9d:b9:0e:71:3b:35:b4:c1:0b:
99:8b:6f:fd:fb:3f:e2:9c:98:b2:b2:b4:30:1c:0d:
df:22:d6:da:2c:e6:ae:88:4d:fa:bd:81:6d:cf:e6:
93:11:84:51:28:d3:72:50:81:8c:da:d8:02:25:9a:
81:d8:9c:e2:8d:1c:1d:e8:58:15:ae:da:c7:9e:b1:
65:e4:60:af:47:50:eb:bb:47:5f:a0:4f:c6:ef:e5:
cd:51:31:88:49:89:35:c1:ef:cc:ca:9d:0b:7a:a8:
61:05:c4:e4:e3:40:8b:d2:e7:72:48:78:bf:61:42:
e6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C1:46:25:D1:6A:C4:34:AB:73:A6:4F:B9:85:0C:DC:E1:0F:06:DE
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wsFGJdFqxDSrc6ZPuYUM3OEPBt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.143.203.0/24
194.143.209.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:99:8b:47:b6:2c:e3:c0:1b:3f:01:e5:49:c7:da:23:72:37:
ec:be:f1:c2:c6:ec:e5:dd:a6:0b:fe:32:9b:92:1c:26:2e:65:
03:9f:c6:e8:73:31:db:3c:a0:67:d4:b8:9c:5a:15:c6:f2:db:
5a:df:9d:d9:09:2b:d2:cf:12:3e:9c:8c:d7:4c:ce:5c:c5:e4:
93:0e:c4:90:ba:a4:c3:64:99:01:de:0c:b0:27:a1:82:1e:d6:
1b:d9:68:4e:c8:ff:f6:a3:a9:2a:0a:ff:5a:61:9d:f2:b4:84:
f0:dd:47:9f:b3:f5:9e:89:98:9a:37:1e:13:2f:93:7f:86:7f:
c7:fc:65:9e:a0:a0:a0:e3:01:39:78:f3:10:6f:09:41:04:18:
ae:c0:ab:40:22:f0:58:30:80:50:82:88:1a:52:29:19:53:b9:
14:e1:0a:e5:98:fb:9c:88:26:6b:e3:10:9b:ce:d5:af:0a:65:
47:01:2a:cd:9f:ad:ab:4e:49:3c:18:f5:ff:a6:94:eb:81:a9:
59:a0:55:78:85:ed:bb:69:62:a8:93:6d:0c:86:3d:4f:2d:8b:
e5:21:6a:e6:a6:a8:49:14:5f:49:7a:f0:c9:f0:77:d5:8d:6b:
5d:32:47:54:ee:12:73:f1:12:8b:64:cf:50:3b:dc:3a:44:b5:
9a:4f:14:88
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZkYtHagoc0bKeR+alQth4ZrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy
MGFlMmUwHhcNMjUwOTA1MDcwODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmMxNDYyNWQxNmFjNDM0YWI3M2E2NGZiOTg1MGNkY2UxMGYwNmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2qS58+okF9Xmon7vuLHm39hBwhO
/0ltYxC9BnVABmcASAyvYwMJfVU96Uzr1sf+sGs5Yna4/nwCBOv8lzceg5jUVYnC
R6lv6qCnZQUnnNB9xxFGeL3ncE56ECIJTp0Cqk2GJ7uvuhTgs2pPPnqvJSruejph
Z9AgcqdituEesLqdXDbHyCDF7OwATDOduQ5xOzW0wQuZi2/9+z/inJiysrQwHA3f
ItbaLOauiE36vYFtz+aTEYRRKNNyUIGM2tgCJZqB2JzijRwd6FgVrtrHnrFl5GCv
R1Dru0dfoE/G7+XNUTGISYk1we/Myp0LeqhhBcTk40CL0udySHi/YULmJwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMLBRiXRasQ0q3OmT7mFDNzhDwbeMB8GA1UdIwQY
MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt
MWRkZWM0Y2NlMjRjLzEvd3NGR0pkRnF4RFNyYzZaUHVZVU0zT0VQQnQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj
LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwo/LAwQA
wo/RMA0GCSqGSIb3DQEBCwUAA4IBAQAumYtHtizjwBs/AeVJx9ojcjfsvvHCxuzl
3aYL/jKbkhwmLmUDn8boczHbPKBn1LicWhXG8tta353ZCSvSzxI+nIzXTM5cxeST
DsSQuqTDZJkB3gywJ6GCHtYb2WhOyP/2o6kqCv9aYZ3ytITw3Uefs/WeiZiaNx4T
L5N/hn/H/GWeoKCg4wE5ePMQbwlBBBiuwKtAIvBYMIBQgogaUikZU7kU4QrlmPuc
iCZr4xCbztWvCmVHASrNn62rTkk8GPX/ppTrgalZoFV4he27aWKok20Mhj1PLYvl
IWrmpqhJFF9JevDJ8HfVjWtdMkdU7hJz8RKLZM9QO9w6RLWaTxSI
-----END CERTIFICATE-----
Generated at Sat Sep 6 14:20:54 2025 by rpki-client