Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WofcS3PhQWe7Z4H9lRt3qg43-Dg.roa
File: WofcS3PhQWe7Z4H9lRt3qg43-Dg.roa (raw, json)
Hash identifier: P4z9jENX6f07/2mSXEq+++HcWXspRaT30mxeemf0IlM=
Subject key identifier: 5A:87:DC:4B:73:E1:41:67:BB:67:81:FD:95:1B:77:AA:0E:37:F8:38
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019791A5FB931953FCC7E81FFD3C4B0F130C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WofcS3PhQWe7Z4H9lRt3qg43-Dg.roa
Signing time: Sat 21 Jun 2025 08:41:03 +0000
ROA not before: Sat 21 Jun 2025 08:41:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 37.202.193.0/24 maxlen: 24
151.243.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:91:a5:fb:93:19:53:fc:c7:e8:1f:fd:3c:4b:0f:13:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 21 08:41:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a87dc4b73e14167bb6781fd951b77aa0e37f838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a8:d9:74:af:fd:76:de:83:b1:6d:9e:29:26:
5a:28:58:68:db:5d:77:15:a0:39:6e:1d:72:18:64:
41:3a:25:79:7e:ab:75:87:c1:24:61:b6:63:78:0e:
e7:62:18:08:38:48:99:bc:ba:d2:19:bd:ec:b9:df:
52:9c:3c:95:a7:5b:8d:7b:4d:2b:9e:e8:0d:03:e7:
cd:4b:06:0a:fe:16:44:01:1e:41:ca:63:ff:7f:7c:
14:b0:95:74:64:e9:d3:e6:00:5b:3c:6c:9c:74:cd:
41:7c:9d:17:8a:d1:54:be:88:91:9c:7c:96:e0:06:
a0:e5:a5:50:42:ad:8a:8b:bd:8a:ea:61:e5:f7:c6:
43:e0:2e:22:9c:5e:cc:a6:9e:55:74:35:57:a1:6e:
16:14:9d:b4:3c:bf:5a:59:65:4b:f1:50:54:ee:26:
ed:99:57:95:68:ae:bf:24:03:be:d4:67:bd:20:2d:
0f:e2:8d:0b:74:38:fe:bd:38:56:a9:28:73:ed:c0:
e5:4e:3e:b7:c7:3b:2d:8c:44:12:cd:4c:af:51:8b:
06:57:8a:d8:1d:7a:88:fa:32:8e:1e:23:c1:db:e8:
a9:d6:ce:7a:25:3d:83:7b:d1:f9:21:2f:f3:7c:29:
d5:b3:cc:64:7f:13:5c:34:79:fa:3c:4c:c5:d7:68:
9b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:87:DC:4B:73:E1:41:67:BB:67:81:FD:95:1B:77:AA:0E:37:F8:38
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WofcS3PhQWe7Z4H9lRt3qg43-Dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.193.0/24
151.243.188.0/22
Signature Algorithm: sha256WithRSAEncryption
52:38:55:89:76:b3:0c:48:74:46:11:73:d5:29:20:78:c9:97:
06:3c:d3:af:98:2c:a0:48:fb:54:a4:35:40:37:6e:67:03:42:
74:30:a2:de:9d:ea:ce:88:73:2d:17:fb:19:5a:24:ad:5e:3d:
f9:08:a0:5e:69:97:76:76:fa:f6:d2:9b:0b:c1:05:50:5e:c3:
88:99:48:c9:06:14:04:c9:e0:68:da:6f:21:59:3e:cf:f3:bd:
ea:1c:64:37:49:30:a1:e8:f2:36:ef:a5:bc:1d:e9:3f:34:58:
c5:a8:65:73:10:73:72:7a:5b:8f:ce:34:62:8c:b7:5e:4e:1c:
da:dd:78:69:2f:2f:af:86:3a:ce:a3:5f:19:3f:88:ae:13:8c:
53:9f:e3:ed:2c:06:92:94:78:c7:06:c9:33:9d:1f:ef:a3:c8:
29:79:9c:ec:8f:5f:d7:0c:7a:07:51:91:b6:9b:80:b4:8d:e0:
d1:e4:e7:63:3f:22:4f:bb:4c:5a:4e:18:0f:b4:e4:a1:92:4e:
0b:15:a6:8d:0b:4c:8c:8d:d3:45:dc:8d:60:61:cd:79:d7:61:
e5:bf:de:90:89:4f:1f:91:73:25:f1:0a:26:fe:12:4c:58:a4:
fc:f1:59:e3:01:4b:33:87:66:e4:7b:6d:55:98:7c:ea:9f:a4:
ac:ff:8a:7c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZeRpfuTGVP8x+gf/TxLDxMMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNjIxMDg0MTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTg3ZGM0YjczZTE0MTY3YmI2NzgxZmQ5NTFiNzdhYTBlMzdmODM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqjZdK/9dt6DsW2eKSZaKFho2113
FaA5bh1yGGRBOiV5fqt1h8EkYbZjeA7nYhgIOEiZvLrSGb3sud9SnDyVp1uNe00r
nugNA+fNSwYK/hZEAR5BymP/f3wUsJV0ZOnT5gBbPGycdM1BfJ0XitFUvoiRnHyW
4Aag5aVQQq2Ki72K6mHl98ZD4C4inF7Mpp5VdDVXoW4WFJ20PL9aWWVL8VBU7ibt
mVeVaK6/JAO+1Ge9IC0P4o0LdDj+vThWqShz7cDlTj63xzstjEQSzUyvUYsGV4rY
HXqI+jKOHiPB2+ip1s56JT2De9H5IS/zfCnVs8xkfxNcNHn6PEzF12ibgwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFqH3Etz4UFnu2eB/ZUbd6oON/g4MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvV29mY1MzUGhRV2U3WjRIOWxSdDNxZzQzLURnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJcrBAwQC
l/O8MA0GCSqGSIb3DQEBCwUAA4IBAQBSOFWJdrMMSHRGEXPVKSB4yZcGPNOvmCyg
SPtUpDVAN25nA0J0MKLenerOiHMtF/sZWiStXj35CKBeaZd2dvr20psLwQVQXsOI
mUjJBhQEyeBo2m8hWT7P873qHGQ3STCh6PI276W8Hek/NFjFqGVzEHNyeluPzjRi
jLdeThza3XhpLy+vhjrOo18ZP4iuE4xTn+PtLAaSlHjHBskznR/vo8gpeZzsj1/X
DHoHUZG2m4C0jeDR5OdjPyJPu0xaThgPtOShkk4LFaaNC0yMjdNF3I1gYc1512Hl
v96QiU8fkXMl8Qom/hJMWKT88VnjAUszh2bke21VmHzqn6Ss/4p8
-----END CERTIFICATE-----
Generated at Thu Jul 3 20:18:57 2025 by rpki-client