Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/WdmItzgEujgbNu1eGYJwzawwMog.roa
File: WdmItzgEujgbNu1eGYJwzawwMog.roa (raw, json)
Hash identifier: aIeRx/U40LddmgTD3UvIlve/kjfqwjuwkm6nemky7CA=
Subject key identifier: 59:D9:88:B7:38:04:BA:38:1B:36:ED:5E:19:82:70:CD:AC:30:32:88
Certificate issuer: /CN=9367965e2834f1893cfa8631a484071e6a2d45b7
Certificate serial: 0198850D18B374C770CBCCEDCB236FE2D81D
Authority key identifier: 93:67:96:5E:28:34:F1:89:3C:FA:86:31:A4:84:07:1E:6A:2D:45:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2eWXig08Yk8-oYxpIQHHmotRbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/WdmItzgEujgbNu1eGYJwzawwMog.roa
Signing time: Thu 07 Aug 2025 15:01:24 +0000
ROA not before: Thu 07 Aug 2025 15:01:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60476
IP address blocks: 95.142.206.0/24 maxlen: 24
2a00:bdc0:e006::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2eWXig08Yk8-oYxpIQHHmotRbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 09:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:0d:18:b3:74:c7:70:cb:cc:ed:cb:23:6f:e2:d8:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9367965e2834f1893cfa8631a484071e6a2d45b7
Validity
Not Before: Aug 7 15:01:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59d988b73804ba381b36ed5e198270cdac303288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d6:2c:43:e0:70:1b:fd:8d:d8:38:0f:0e:84:
62:f6:04:7c:49:4d:6b:04:00:c3:61:05:e4:58:b8:
50:6f:30:0d:86:97:dc:65:d6:63:38:1f:54:5d:49:
8d:e7:99:01:28:2c:27:ed:bb:f9:91:b5:c8:37:fc:
df:4e:60:5f:5c:bd:17:d1:49:07:7e:33:09:e1:b1:
82:36:8a:24:5d:b9:c9:6c:3e:ce:e7:1d:8e:92:96:
ba:9e:ed:86:b6:3c:06:0d:ca:67:3a:9c:84:30:1c:
86:59:ad:51:40:e8:f8:33:ca:4d:19:c6:b0:31:d1:
0e:c3:a8:cb:0b:f6:48:53:03:b4:11:c5:59:cf:f2:
f7:62:11:74:8d:99:a7:d7:ec:df:40:07:44:d7:55:
63:d4:83:fe:5d:a5:de:ce:80:89:36:58:5c:c1:c9:
d4:f8:92:37:17:89:6a:6f:87:d2:7c:8d:b9:7c:68:
b7:da:ef:6f:78:61:0e:b7:7f:f9:25:45:43:b8:e5:
ab:29:6c:82:59:26:04:7e:82:47:22:36:bf:1d:95:
35:56:e0:21:17:93:c7:26:b8:6b:34:70:82:9a:74:
36:48:77:65:0c:6e:5b:44:ea:ea:83:ae:69:72:9d:
d3:40:3c:88:fc:c6:ac:31:e0:26:ad:0d:e7:ae:7e:
fa:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D9:88:B7:38:04:BA:38:1B:36:ED:5E:19:82:70:CD:AC:30:32:88
X509v3 Authority Key Identifier:
keyid:93:67:96:5E:28:34:F1:89:3C:FA:86:31:A4:84:07:1E:6A:2D:45:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2eWXig08Yk8-oYxpIQHHmotRbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/WdmItzgEujgbNu1eGYJwzawwMog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.142.206.0/24
IPv6:
2a00:bdc0:e006::/48
Signature Algorithm: sha256WithRSAEncryption
99:f2:20:4a:bf:11:96:a6:0a:44:44:79:9b:fc:fe:27:f8:1c:
99:43:52:8d:1f:77:8c:79:55:74:aa:e6:8a:00:ed:ce:4f:2a:
05:d5:4c:49:31:8d:8d:9f:4f:a9:8e:10:61:33:45:20:1d:9f:
88:d3:a4:cc:27:79:52:fd:e5:77:61:a0:13:b6:d0:70:c5:39:
35:97:4b:22:7d:11:ae:cb:ef:bf:36:07:29:0b:78:79:de:ee:
89:79:b7:da:d6:b8:c2:2e:f4:b8:48:f2:14:d5:9d:3f:72:a9:
40:56:2c:15:62:d6:40:54:0f:7f:d9:04:03:0c:63:06:db:e4:
b1:a1:bf:c5:05:6a:cd:41:a9:54:48:b1:09:78:11:94:3d:1d:
96:a1:90:93:f4:60:6f:ef:2b:ef:d0:fb:16:a0:2f:19:42:bc:
2b:f6:98:35:e2:03:a3:cb:b2:0e:36:5d:fc:5f:16:be:53:c8:
0e:56:1d:e5:b3:45:43:37:2d:a0:1f:b2:0f:1b:14:25:de:f5:
12:55:48:c5:36:b9:04:cc:18:15:25:00:e8:b4:87:aa:64:d0:
54:93:bc:57:df:19:2c:45:47:ac:80:15:07:bc:a3:26:9f:5b:
8a:bb:f5:3f:e5:4a:02:bd:3f:ac:16:29:53:3a:96:03:c3:94:
90:ef:fb:83
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZiFDRizdMdwy8ztyyNv4tgdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjc5NjVlMjgzNGYxODkzY2ZhODYzMWE0ODQwNzFlNmEy
ZDQ1YjcwHhcNMjUwODA3MTUwMTI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OWQ5ODhiNzM4MDRiYTM4MWIzNmVkNWUxOTgyNzBjZGFjMzAzMjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9YsQ+BwG/2N2DgPDoRi9gR8SU1r
BADDYQXkWLhQbzANhpfcZdZjOB9UXUmN55kBKCwn7bv5kbXIN/zfTmBfXL0X0UkH
fjMJ4bGCNookXbnJbD7O5x2Okpa6nu2GtjwGDcpnOpyEMByGWa1RQOj4M8pNGcaw
MdEOw6jLC/ZIUwO0EcVZz/L3YhF0jZmn1+zfQAdE11Vj1IP+XaXezoCJNlhcwcnU
+JI3F4lqb4fSfI25fGi32u9veGEOt3/5JUVDuOWrKWyCWSYEfoJHIja/HZU1VuAh
F5PHJrhrNHCCmnQ2SHdlDG5bROrqg65pcp3TQDyI/MasMeAmrQ3nrn762QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFnZiLc4BLo4GzbtXhmCcM2sMDKIMB8GA1UdIwQY
MBaAFJNnll4oNPGJPPqGMaSEBx5qLUW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJlV1hpZzA4WWs4LW9ZeHBJUUhIbW90UmJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8xODEzYmEtNTA2ZS00NDRlLTljYTQt
ZjA5M2UxN2IyN2VmLzEvV2RtSXR6Z0V1amdiTnUxZUdZSnd6YXd3TW9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8xODEzYmEtNTA2ZS00NDRlLTljYTQtZjA5M2UxN2IyN2Vm
LzEvazJlV1hpZzA4WWs4LW9ZeHBJUUhIbW90UmJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAX47OMA8E
AgACMAkDBwAqAL3A4AYwDQYJKoZIhvcNAQELBQADggEBAJnyIEq/EZamCkREeZv8
/if4HJlDUo0fd4x5VXSq5ooA7c5PKgXVTEkxjY2fT6mOEGEzRSAdn4jTpMwneVL9
5XdhoBO20HDFOTWXSyJ9Ea7L7782BykLeHne7ol5t9rWuMIu9LhI8hTVnT9yqUBW
LBVi1kBUD3/ZBAMMYwbb5LGhv8UFas1BqVRIsQl4EZQ9HZahkJP0YG/vK+/Q+xag
LxlCvCv2mDXiA6PLsg42XfxfFr5TyA5WHeWzRUM3LaAfsg8bFCXe9RJVSMU2uQTM
GBUlAOi0h6pk0FSTvFffGSxFR6yAFQe8oyafW4q79T/lSgK9P6wWKVM6lgPDlJDv
+4M=
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:36:39 2025 by rpki-client