Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/wyYtlqseGv6gXQkCTy30WJ-H2eE.roa
File: wyYtlqseGv6gXQkCTy30WJ-H2eE.roa (raw, json)
Hash identifier: 0/U6xWPb4mk6ryPiHh563SCZx0Tww+D7flQW+39Amak=
Subject key identifier: C3:26:2D:96:AB:1E:1A:FE:A0:5D:09:02:4F:2D:F4:58:9F:87:D9:E1
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 0197F43D5650DD84989F0F70F3BF093B472E
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/wyYtlqseGv6gXQkCTy30WJ-H2eE.roa
Signing time: Thu 10 Jul 2025 12:09:09 +0000
ROA not before: Thu 10 Jul 2025 12:09:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 266827
IP address blocks: 95.164.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f4:3d:56:50:dd:84:98:9f:0f:70:f3:bf:09:3b:47:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Jul 10 12:09:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3262d96ab1e1afea05d09024f2df4589f87d9e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1b:6e:64:e3:f0:78:33:93:97:5b:fc:e6:72:
16:d3:d5:25:b5:5b:df:52:38:4c:c9:f0:30:41:eb:
0c:66:13:c2:c3:10:0f:e7:d8:7b:63:a7:c1:84:94:
5e:28:15:59:a1:f1:1e:58:4d:8b:da:56:5c:68:92:
20:bb:09:70:1d:ba:d1:5f:3f:67:55:25:7e:36:15:
97:a5:2a:26:de:37:24:20:56:8d:8d:c3:4f:69:6a:
c6:da:20:12:5e:7e:00:54:99:53:d1:85:34:cc:b7:
56:4e:ce:45:79:32:66:9e:20:19:ef:e6:6c:42:cc:
f7:01:bd:93:6d:7b:d9:ac:48:8e:0d:96:cd:4a:94:
3d:e8:ee:23:08:a5:0c:af:c6:ad:00:fb:88:b2:43:
95:fc:22:61:bf:02:26:b7:26:9a:2f:fc:8d:ac:9e:
27:c1:d8:24:d0:08:61:f7:69:af:5a:fa:43:b5:37:
04:a2:d9:bc:4d:39:63:6f:d3:e6:91:7f:01:12:7c:
18:f2:95:3e:50:ce:5c:59:39:e9:3a:50:b2:12:f9:
b6:9c:c7:f9:b5:dc:42:e4:9b:80:00:05:e6:6f:27:
7b:10:d5:05:3a:f6:b7:ed:15:6e:3f:bf:3e:a5:34:
54:f1:d0:63:fe:2d:f4:68:ba:fb:fe:95:91:cd:b8:
54:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:26:2D:96:AB:1E:1A:FE:A0:5D:09:02:4F:2D:F4:58:9F:87:D9:E1
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/wyYtlqseGv6gXQkCTy30WJ-H2eE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.149.0/24
Signature Algorithm: sha256WithRSAEncryption
46:f6:97:ce:d3:a9:23:cf:35:59:8b:29:71:e4:b3:d8:a1:32:
66:3f:8d:05:3e:30:19:a4:bd:6a:e6:29:ab:87:bc:79:78:11:
5e:05:b4:f5:21:d3:71:28:7b:ca:80:12:54:c0:e3:62:30:c0:
68:1c:c6:75:18:87:0c:77:4a:11:88:03:62:83:80:4c:f1:92:
b2:59:92:33:33:07:15:3b:dc:de:c3:3e:f5:30:d5:6e:4a:12:
81:f3:99:d0:64:8a:6d:a6:e0:5d:e8:67:a7:34:b3:b8:c9:ce:
02:c1:17:33:fa:7d:fb:94:a5:fc:8f:f6:93:ec:0a:34:13:02:
ff:32:bb:5c:a1:b0:1e:a5:a8:c9:91:aa:20:31:9c:dc:51:f0:
19:bb:ca:42:80:a0:39:b9:49:60:9d:56:5f:3e:bb:0f:16:18:
e6:1b:d4:f2:90:47:f7:f5:92:26:80:04:43:9e:d5:df:a5:72:
db:d0:01:1d:b4:05:4b:a1:9a:d3:79:fc:de:c0:cb:14:33:71:
86:0f:ac:12:6e:7e:20:d1:f0:27:1e:5d:e8:9c:e7:ba:03:14:
5a:16:1d:c0:26:61:7a:9e:92:fb:1d:4c:9c:15:8e:cb:df:89:
80:f7:37:d1:06:da:8e:50:92:51:8d:ae:8e:d0:13:db:a2:74:
8d:c0:37:20
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZf0PVZQ3YSYnw9w878JO0cuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5OTFjNTZmMTFhNzE3MWM2MTUzMjM5NzY5ZjU1N2JlYmEx
MDE4MmQwHhcNMjUwNzEwMTIwOTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzI2MmQ5NmFiMWUxYWZlYTA1ZDA5MDI0ZjJkZjQ1ODlmODdkOWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xtuZOPweDOTl1v85nIW09UltVvf
UjhMyfAwQesMZhPCwxAP59h7Y6fBhJReKBVZofEeWE2L2lZcaJIguwlwHbrRXz9n
VSV+NhWXpSom3jckIFaNjcNPaWrG2iASXn4AVJlT0YU0zLdWTs5FeTJmniAZ7+Zs
Qsz3Ab2TbXvZrEiODZbNSpQ96O4jCKUMr8atAPuIskOV/CJhvwImtyaaL/yNrJ4n
wdgk0Ahh92mvWvpDtTcEotm8TTljb9PmkX8BEnwY8pU+UM5cWTnpOlCyEvm2nMf5
tdxC5JuAAAXmbyd7ENUFOva37RVuP78+pTRU8dBj/i30aLr7/pWRzbhU4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMMmLZarHhr+oF0JAk8t9Fifh9nhMB8GA1UdIwQY
MBaAFGmRxW8RpxccYVMjl2n1V766EBgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYt
NjVkMTU2NzM0MGZkLzEvd3lZdGxxc2VHdjZnWFFrQ1R5MzBXSi1IMmVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYtNjVkMTU2NzM0MGZk
LzEvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX6SVMA0G
CSqGSIb3DQEBCwUAA4IBAQBG9pfO06kjzzVZiylx5LPYoTJmP40FPjAZpL1q5imr
h7x5eBFeBbT1IdNxKHvKgBJUwONiMMBoHMZ1GIcMd0oRiANig4BM8ZKyWZIzMwcV
O9zewz71MNVuShKB85nQZIptpuBd6GenNLO4yc4CwRcz+n37lKX8j/aT7Ao0EwL/
MrtcobAepajJkaogMZzcUfAZu8pCgKA5uUlgnVZfPrsPFhjmG9TykEf39ZImgARD
ntXfpXLb0AEdtAVLoZrTefzewMsUM3GGD6wSbn4g0fAnHl3onOe6AxRaFh3AJmF6
npL7HUycFY7L34mA9zfRBtqOUJJRja6O0BPbonSNwDcg
-----END CERTIFICATE-----
Generated at Wed Jul 23 12:01:16 2025 by rpki-client