Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ywRbm2MGy9Pqh3-ehWuqRcUrPjs.roa
File: ywRbm2MGy9Pqh3-ehWuqRcUrPjs.roa (raw, json)
Hash identifier: N0QARFLzEHs82916QK/kWwiJmJQXOfGPZtka/iCmHWw=
Subject key identifier: CB:04:5B:9B:63:06:CB:D3:EA:87:7F:9E:85:6B:AA:45:C5:2B:3E:3B
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0197B02631DC5398532AE4FB3BFDDC44CF87
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ywRbm2MGy9Pqh3-ehWuqRcUrPjs.roa
Signing time: Fri 27 Jun 2025 06:49:42 +0000
ROA not before: Fri 27 Jun 2025 06:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 194.231.156.0/22 maxlen: 24
194.231.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b0:26:31:dc:53:98:53:2a:e4:fb:3b:fd:dc:44:cf:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jun 27 06:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb045b9b6306cbd3ea877f9e856baa45c52b3e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ee:02:22:10:33:f4:44:b8:e2:7a:70:c4:29:
2a:68:13:ea:53:b3:63:88:83:ed:0a:65:91:67:7d:
b2:ba:8c:3b:6a:b0:cb:eb:3b:56:ca:f0:5a:90:54:
32:42:4c:57:9e:73:c1:ae:d3:73:46:38:9e:8e:d7:
b0:86:46:79:00:82:fd:84:dc:6a:99:d1:a1:90:a4:
51:54:6b:9b:ca:32:7b:5f:78:c0:f6:62:4e:5e:c1:
2e:ae:16:e1:f3:70:8f:fb:c3:b9:22:35:37:44:57:
fc:3c:74:7a:84:3c:da:f0:87:4e:cc:ad:93:72:30:
54:8d:c5:9d:7c:59:fb:02:d8:12:f2:18:9a:ff:9b:
12:66:47:52:d1:a9:bc:7d:04:8c:2a:c5:05:6f:47:
ad:77:9e:34:55:d1:01:a0:eb:fc:e2:a3:95:8c:61:
04:0e:3c:8d:93:8b:0f:65:c4:0d:ef:14:85:1a:8a:
68:3a:86:3c:22:1e:9d:a7:e9:c3:a2:a8:05:46:48:
08:bc:9f:19:b4:94:8d:c4:7e:25:0c:e7:3d:a9:dc:
8c:0f:76:84:69:53:b7:04:63:9f:b0:2c:e9:f3:bf:
26:a0:8d:4e:47:78:63:66:70:01:74:86:0b:14:4c:
82:67:1b:41:fd:91:ec:63:6c:aa:3d:15:48:fe:88:
af:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:04:5B:9B:63:06:CB:D3:EA:87:7F:9E:85:6B:AA:45:C5:2B:3E:3B
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ywRbm2MGy9Pqh3-ehWuqRcUrPjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.156.0/22
194.231.220.0/22
Signature Algorithm: sha256WithRSAEncryption
24:e6:79:27:f9:22:cf:bf:cd:d3:32:50:1c:59:79:be:65:d4:
a7:19:dc:a3:00:4d:39:21:dc:c9:b2:5c:b2:49:25:62:1b:33:
49:2b:27:13:65:27:46:18:15:3a:70:ab:87:dc:69:ec:fe:9e:
bd:b8:4b:04:e6:5c:4d:6b:d8:16:b7:1d:30:e5:1e:af:a8:0b:
80:1f:ac:fa:96:31:a6:d9:8f:c9:62:c2:dd:ad:28:43:59:6f:
95:5a:aa:30:32:e3:44:86:1d:36:4f:e1:f0:73:1e:22:11:e6:
22:2b:30:ea:20:ad:ea:e4:28:44:d9:a6:5e:c6:cd:8a:e8:fb:
64:f2:67:22:4c:7e:e0:28:e6:75:fb:79:30:67:7d:e9:03:c2:
9b:77:e6:59:a0:0e:53:74:6b:b7:e3:39:c9:97:01:78:1a:ea:
32:5e:17:1f:76:7f:af:5b:f2:cd:74:8f:5c:12:4c:66:f7:69:
69:8a:4c:1a:1d:5a:5f:0a:01:3b:08:4a:80:3d:3c:de:27:b7:
bc:96:90:d5:5b:1a:b7:ac:91:a8:e6:a0:28:6a:b3:33:5c:48:
eb:43:2e:0b:80:e9:c9:6b:02:69:17:4a:91:cd:98:9a:00:f2:
bf:3d:e2:30:36:c7:2b:7e:9b:87:7f:7b:86:d7:ae:d7:96:cb:
a1:66:da:33
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZewJjHcU5hTKuT7O/3cRM+HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjUwNjI3MDY0OTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjA0NWI5YjYzMDZjYmQzZWE4NzdmOWU4NTZiYWE0NWM1MmIzZTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAre4CIhAz9ES44npwxCkqaBPqU7Nj
iIPtCmWRZ32yuow7arDL6ztWyvBakFQyQkxXnnPBrtNzRjiejtewhkZ5AIL9hNxq
mdGhkKRRVGubyjJ7X3jA9mJOXsEurhbh83CP+8O5IjU3RFf8PHR6hDza8IdOzK2T
cjBUjcWdfFn7AtgS8hia/5sSZkdS0am8fQSMKsUFb0etd540VdEBoOv84qOVjGEE
DjyNk4sPZcQN7xSFGopoOoY8Ih6dp+nDoqgFRkgIvJ8ZtJSNxH4lDOc9qdyMD3aE
aVO3BGOfsCzp878moI1OR3hjZnABdIYLFEyCZxtB/ZHsY2yqPRVI/oivBwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMsEW5tjBsvT6od/noVrqkXFKz47MB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEveXdSYm0yTUd5OVBxaDMtZWhXdXFSY1VyUGpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCwuecAwQC
wufcMA0GCSqGSIb3DQEBCwUAA4IBAQAk5nkn+SLPv83TMlAcWXm+ZdSnGdyjAE05
IdzJslyySSViGzNJKycTZSdGGBU6cKuH3Gns/p69uEsE5lxNa9gWtx0w5R6vqAuA
H6z6ljGm2Y/JYsLdrShDWW+VWqowMuNEhh02T+Hwcx4iEeYiKzDqIK3q5ChE2aZe
xs2K6Ptk8mciTH7gKOZ1+3kwZ33pA8Kbd+ZZoA5TdGu34znJlwF4GuoyXhcfdn+v
W/LNdI9cEkxm92lpikwaHVpfCgE7CEqAPTzeJ7e8lpDVWxq3rJGo5qAoarMzXEjr
Qy4LgOnJawJpF0qRzZiaAPK/PeIwNscrfpuHf3uG167XlsuhZtoz
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:37:17 2025 by rpki-client