Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/WcOI3xTree4feiB1aUEElS0psWg.roa
File: WcOI3xTree4feiB1aUEElS0psWg.roa (raw, json)
Hash identifier: aiHJErdFTntBFa2VGlw5qxOEBnPaXQitP2e0+IPbQn4=
Subject key identifier: 59:C3:88:DF:14:EB:79:EE:1F:7A:20:75:69:41:04:95:2D:29:B1:68
Certificate issuer: /CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6
Certificate serial: 0196AB561FC94C0F6184CF417E12AC8D8D0F
Authority key identifier: A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/WcOI3xTree4feiB1aUEElS0psWg.roa
Signing time: Wed 07 May 2025 15:21:10 +0000
ROA not before: Wed 07 May 2025 15:21:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31034
IP address blocks: 195.191.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:56:1f:c9:4c:0f:61:84:cf:41:7e:12:ac:8d:8d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6
Validity
Not Before: May 7 15:21:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59c388df14eb79ee1f7a2075694104952d29b168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:79:6f:cc:e2:59:eb:92:cc:33:db:c1:e4:69:
5a:b6:9a:19:26:7a:cc:d6:e4:43:85:f9:df:ed:82:
0b:24:3c:88:0d:63:7b:de:84:16:26:93:39:9f:54:
fa:fb:fb:46:7a:b6:89:83:c2:dd:74:40:8c:fd:83:
fd:56:05:40:3f:ac:a3:2a:c2:11:e1:35:c2:3d:be:
15:6a:da:01:18:0f:94:81:ee:6d:9e:f2:4d:6a:48:
ff:75:0e:f3:bf:33:ab:25:0c:db:9a:a4:f7:df:f5:
a7:4e:58:bc:65:6b:84:23:96:f2:13:7b:7a:27:a2:
2a:93:b3:98:27:22:f3:5c:31:41:01:72:ce:24:7b:
37:6c:56:d1:e9:99:52:96:dd:9c:28:b5:97:ca:ba:
d0:2f:a8:a7:5e:91:35:bb:52:c3:b3:01:69:b5:8c:
c2:7b:b7:28:24:96:dc:2d:3e:19:78:62:c8:2c:e1:
29:2e:65:86:62:26:e7:b0:ee:ee:f1:62:ff:7d:27:
e9:ff:9c:9a:fc:35:fa:82:ac:8a:75:dc:4d:0f:2a:
ca:b7:59:7c:91:d8:48:e4:8e:3b:3a:7d:67:aa:77:
05:33:4f:e1:da:af:50:c9:8b:74:17:8e:6a:a4:6b:
d0:a7:1b:ad:48:80:aa:89:91:12:e0:54:65:31:74:
74:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C3:88:DF:14:EB:79:EE:1F:7A:20:75:69:41:04:95:2D:29:B1:68
X509v3 Authority Key Identifier:
keyid:A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/WcOI3xTree4feiB1aUEElS0psWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.251.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:a9:de:5f:8c:d1:0b:c0:a0:0a:5b:0d:4a:a9:f7:47:f8:95:
13:2e:e9:7b:6e:0c:e2:38:67:ed:57:87:74:01:64:9c:ed:19:
77:49:90:09:ed:ff:e5:b9:70:d4:d6:87:68:1b:13:8e:d3:72:
bb:43:ef:35:c3:8a:96:43:94:71:e4:30:95:de:23:19:e0:f4:
9c:03:ad:bf:50:c6:1c:99:fc:5c:c2:d8:0b:3f:84:98:78:37:
65:cf:c6:7b:e0:67:4c:3c:af:48:14:7e:86:da:e5:41:51:87:
38:c0:d1:1e:ae:5b:e9:6b:fe:02:46:99:b7:30:39:77:e4:c4:
00:7c:91:5c:aa:85:00:a2:58:32:71:91:3d:a5:f9:54:9d:76:
d9:bd:82:2e:b5:80:66:40:a8:b7:be:d6:02:d8:19:be:24:74:
93:46:25:0a:d6:5f:9f:2e:d8:06:6e:aa:c7:33:c3:9f:b7:df:
e5:e4:cb:4e:b9:6d:ad:bf:c4:57:3d:fd:71:ca:af:51:e4:3c:
1f:c3:d3:79:ab:68:47:b5:91:fe:b3:72:34:90:ef:1c:65:40:
65:a1:6f:3b:e2:b1:6d:c8:1c:19:35:7e:d9:7b:9c:ac:3f:ad:
01:72:e6:ef:2b:11:b0:36:b6:cd:b4:65:70:09:1d:5b:28:f3:
dd:03:53:c0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZarVh/JTA9hhM9BfhKsjY0PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExOGYwMmQ1ZWJjOWU4Yjk1MjFhZjcxMzJiMTJjYjZiYjY1
NjkzYzYwHhcNMjUwNTA3MTUyMTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OWMzODhkZjE0ZWI3OWVlMWY3YTIwNzU2OTQxMDQ5NTJkMjliMTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHlvzOJZ65LMM9vB5GlatpoZJnrM
1uRDhfnf7YILJDyIDWN73oQWJpM5n1T6+/tGeraJg8LddECM/YP9VgVAP6yjKsIR
4TXCPb4VatoBGA+Uge5tnvJNakj/dQ7zvzOrJQzbmqT33/WnTli8ZWuEI5byE3t6
J6Iqk7OYJyLzXDFBAXLOJHs3bFbR6ZlSlt2cKLWXyrrQL6inXpE1u1LDswFptYzC
e7coJJbcLT4ZeGLILOEpLmWGYibnsO7u8WL/fSfp/5ya/DX6gqyKddxNDyrKt1l8
kdhI5I47On1nqncFM0/h2q9QyYt0F45qpGvQpxutSICqiZES4FRlMXR0iQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFnDiN8U63nuH3ogdWlBBJUtKbFoMB8GA1UdIwQY
MBaAFKGPAtXryei5Uhr3EysSy2u2VpPGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1k4QzFldko2TGxTR3ZjVEt4TExhN1pXazhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy83MWE5N2MtMzVmNC00ZjIxLWE0M2Et
NzM5NmU0MmIxODMwLzEvV2NPSTN4VHJlZTRmZWlCMWFVRUVsUzBwc1dnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy83MWE5N2MtMzVmNC00ZjIxLWE0M2EtNzM5NmU0MmIxODMw
LzEvb1k4QzFldko2TGxTR3ZjVEt4TExhN1pXazhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7/7MA0G
CSqGSIb3DQEBCwUAA4IBAQA/qd5fjNELwKAKWw1KqfdH+JUTLul7bgziOGftV4d0
AWSc7Rl3SZAJ7f/luXDU1odoGxOO03K7Q+81w4qWQ5Rx5DCV3iMZ4PScA62/UMYc
mfxcwtgLP4SYeDdlz8Z74GdMPK9IFH6G2uVBUYc4wNEerlvpa/4CRpm3MDl35MQA
fJFcqoUAolgycZE9pflUnXbZvYIutYBmQKi3vtYC2Bm+JHSTRiUK1l+fLtgGbqrH
M8Oft9/l5MtOuW2tv8RXPf1xyq9R5Dwfw9N5q2hHtZH+s3I0kO8cZUBloW874rFt
yBwZNX7Ze5ysP60BcubvKxGwNrbNtGVwCR1bKPPdA1PA
-----END CERTIFICATE-----
Generated at Tue May 13 23:17:33 2025 by rpki-client