Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w6WISEM6CJLuU9PLengGcdmPrwA.roa
File: w6WISEM6CJLuU9PLengGcdmPrwA.roa (raw, json)
Hash identifier: 1O4sImoNuOaBHbeLrnJJ8YtTRkeHCYdp3+fiR6ysjCI=
Subject key identifier: C3:A5:88:48:43:3A:08:92:EE:53:D3:CB:7A:78:06:71:D9:8F:AF:00
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 019976B16EE2958E60A3998581547EDA9389
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w6WISEM6CJLuU9PLengGcdmPrwA.roa
Signing time: Tue 23 Sep 2025 13:09:23 +0000
ROA not before: Tue 23 Sep 2025 13:09:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211772
IP address blocks: 217.174.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:76:b1:6e:e2:95:8e:60:a3:99:85:81:54:7e:da:93:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Sep 23 13:09:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3a58848433a0892ee53d3cb7a780671d98faf00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f4:47:d9:c9:72:85:5b:b0:bc:f3:2a:38:ed:
26:54:3a:ea:ca:24:a6:2d:40:85:f9:34:8b:20:2b:
55:c4:0d:4c:6d:63:af:4f:df:61:db:fb:03:bb:92:
1e:7a:92:0c:a9:6b:0f:ec:73:91:09:ca:5f:fb:af:
88:b6:e2:22:1a:4c:40:2e:28:51:58:98:64:cd:b0:
96:24:70:99:dd:54:d0:56:f4:f9:a6:e4:c8:fe:a2:
f5:6e:6a:df:d4:0c:15:68:6d:ba:1c:15:51:2e:e5:
a5:ad:f7:00:f0:43:f0:d5:86:55:b9:66:e0:60:07:
20:02:39:3b:54:f8:8e:df:69:cb:3a:b3:1a:f2:3b:
08:2a:7f:db:b7:e4:91:f7:03:68:8f:0e:14:13:e1:
7c:2b:db:3e:30:60:0d:95:d6:6c:55:df:ad:f7:6d:
54:e7:50:7b:16:0b:35:cc:f9:cb:c7:f4:08:4f:eb:
bd:43:3e:22:38:76:8c:68:81:74:01:7b:e3:13:cb:
5e:ef:01:32:08:69:18:8a:9b:41:89:bd:93:cb:3a:
93:59:88:c9:58:50:44:a7:ff:c7:6f:ca:86:e8:e7:
fe:56:fd:a2:c8:2c:3d:1d:2b:f6:be:97:8f:36:c0:
a7:d9:20:e6:ab:fd:74:a7:f0:47:c7:9d:4d:90:aa:
d6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A5:88:48:43:3A:08:92:EE:53:D3:CB:7A:78:06:71:D9:8F:AF:00
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w6WISEM6CJLuU9PLengGcdmPrwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.174.145.0/24
Signature Algorithm: sha256WithRSAEncryption
37:85:e9:bd:14:a3:7e:b6:9f:c0:f7:9f:46:e1:1a:b4:c4:b5:
0b:8c:c3:13:00:82:c9:bd:ce:fc:8b:75:53:b9:4a:a9:81:a1:
e4:b5:28:dc:c3:40:94:57:93:87:4c:a3:e7:a8:28:73:c8:2a:
aa:6c:8b:5d:2c:20:f5:e9:7e:bc:be:09:b7:6b:1f:0d:7c:3f:
06:3b:0a:cb:4c:52:3c:c7:76:33:2e:fb:f6:da:8b:67:50:6d:
c4:8a:5e:cd:02:86:48:52:7d:7e:89:d2:92:84:d3:17:cb:a7:
6b:47:01:63:47:9a:04:48:82:99:f8:4b:25:71:21:5b:79:13:
69:0b:ec:0a:92:d3:1f:cc:07:95:77:3a:0e:2d:4d:c2:5e:e1:
46:7f:60:23:21:4e:00:66:56:9f:7d:0a:d6:0f:c7:c7:f9:51:
df:08:a6:76:c8:f7:15:57:df:d6:01:52:c2:d4:5e:e5:be:9a:
bd:4f:1a:f6:72:e3:4f:f0:07:c9:d3:26:af:48:bb:ec:b4:08:
f0:1c:0e:d1:40:58:79:d6:76:21:97:7d:d5:a8:9d:cb:a8:02:
3e:fa:b3:d4:ec:63:22:05:39:80:fc:ee:01:22:e4:39:24:e4:
1c:1f:75:4a:6e:bf:a7:9f:ac:b4:5a:f6:aa:d9:36:4c:4c:6f:
28:9b:14:00
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZl2sW7ilY5go5mFgVR+2pOJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1
Y2IyYWEwHhcNMjUwOTIzMTMwOTIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2E1ODg0ODQzM2EwODkyZWU1M2QzY2I3YTc4MDY3MWQ5OGZhZjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifRH2clyhVuwvPMqOO0mVDrqyiSm
LUCF+TSLICtVxA1MbWOvT99h2/sDu5IeepIMqWsP7HORCcpf+6+ItuIiGkxALihR
WJhkzbCWJHCZ3VTQVvT5puTI/qL1bmrf1AwVaG26HBVRLuWlrfcA8EPw1YZVuWbg
YAcgAjk7VPiO32nLOrMa8jsIKn/bt+SR9wNojw4UE+F8K9s+MGANldZsVd+t921U
51B7Fgs1zPnLx/QIT+u9Qz4iOHaMaIF0AXvjE8te7wEyCGkYiptBib2TyzqTWYjJ
WFBEp//Hb8qG6Of+Vv2iyCw9HSv2vpePNsCn2SDmq/10p/BHx51NkKrW3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMOliEhDOgiS7lPTy3p4BnHZj68AMB8GA1UdIwQY
MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt
ZGFjYjVmMzU2ZWEzLzEvdzZXSVNFTTZDSkx1VTlQTGVuZ0djZG1QcndBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz
LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2a6RMA0G
CSqGSIb3DQEBCwUAA4IBAQA3hem9FKN+tp/A959G4Rq0xLULjMMTAILJvc78i3VT
uUqpgaHktSjcw0CUV5OHTKPnqChzyCqqbItdLCD16X68vgm3ax8NfD8GOwrLTFI8
x3YzLvv22otnUG3Eil7NAoZIUn1+idKShNMXy6drRwFjR5oESIKZ+EslcSFbeRNp
C+wKktMfzAeVdzoOLU3CXuFGf2AjIU4AZlaffQrWD8fH+VHfCKZ2yPcVV9/WAVLC
1F7lvpq9Txr2cuNP8AfJ0yavSLvstAjwHA7RQFh51nYhl33VqJ3LqAI++rPU7GMi
BTmA/O4BIuQ5JOQcH3VKbr+nn6y0Wvaq2TZMTG8omxQA
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:49:51 2025 by rpki-client