Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WlbaxzcCxxH_pb1_aI7mH5QfYCY.roa
File: WlbaxzcCxxH_pb1_aI7mH5QfYCY.roa (raw, json)
Hash identifier: 1PqCjukbh0Jr8NgtVqdRk8CcITCQxu9C6JshCMV5gOE=
Subject key identifier: 5A:56:DA:C7:37:02:C7:11:FF:A5:BD:7F:68:8E:E6:1F:94:1F:60:26
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0199CD896810C8440F58CD4479E9ECAC5AFB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WlbaxzcCxxH_pb1_aI7mH5QfYCY.roa
Signing time: Fri 10 Oct 2025 09:52:38 +0000
ROA not before: Fri 10 Oct 2025 09:52:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41745
IP address blocks: 31.169.124.0/24 maxlen: 24
31.169.125.0/24 maxlen: 24
31.169.126.0/24 maxlen: 24
31.169.127.0/24 maxlen: 24
45.12.254.0/24 maxlen: 24
45.14.165.0/24 maxlen: 24
45.81.243.0/24 maxlen: 24
45.88.67.0/24 maxlen: 24
84.21.172.0/24 maxlen: 24
85.31.45.0/24 maxlen: 24
85.209.132.0/24 maxlen: 24
85.209.134.0/24 maxlen: 24
87.121.217.0/24 maxlen: 24
93.123.30.0/24 maxlen: 24
94.125.100.0/24 maxlen: 24
94.125.101.0/24 maxlen: 24
94.156.236.0/24 maxlen: 24
109.206.241.0/24 maxlen: 24
171.22.30.0/24 maxlen: 24
185.246.220.0/24 maxlen: 24
192.145.28.0/24 maxlen: 24
192.145.29.0/24 maxlen: 24
192.145.30.0/24 maxlen: 24
192.145.31.0/24 maxlen: 24
193.8.184.0/24 maxlen: 24
193.47.60.0/24 maxlen: 24
193.148.58.0/24 maxlen: 24
193.148.59.0/24 maxlen: 24
193.168.196.0/24 maxlen: 24
193.168.197.0/24 maxlen: 24
193.168.198.0/24 maxlen: 24
193.168.199.0/24 maxlen: 24
212.87.220.0/24 maxlen: 24
212.87.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cd:89:68:10:c8:44:0f:58:cd:44:79:e9:ec:ac:5a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 10 09:52:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a56dac73702c711ffa5bd7f688ee61f941f6026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c8:11:6a:22:38:79:50:66:bf:55:78:ca:e3:
1d:6d:ab:f8:07:da:7f:30:1c:6e:40:18:ec:b9:78:
5d:8b:37:93:ef:cf:58:dc:1a:09:ec:b0:db:2c:e4:
08:6f:c1:f3:e5:d3:48:2f:c3:c5:2b:8d:a0:6d:08:
28:1c:1b:96:59:c4:6b:d4:2e:ac:59:05:b7:15:88:
03:ad:e6:66:97:5f:10:55:b7:f9:c5:c7:67:78:7a:
6f:41:b5:3e:19:f6:9c:b7:8d:28:41:e8:7d:12:7f:
13:8a:b6:39:70:de:2b:c2:58:91:06:94:f9:09:54:
68:95:aa:c0:da:ef:7f:04:0c:c2:2c:0f:cc:b6:a2:
04:29:4d:0c:54:be:73:87:75:fd:e0:71:4f:fd:41:
0e:b1:32:38:82:d6:e7:4f:2a:25:50:d1:bb:8e:55:
5d:d1:9b:25:18:0d:e1:9d:dc:ea:c0:9c:9e:3e:02:
ff:e6:88:bf:04:e9:cb:cb:89:72:8a:40:ce:a7:6c:
9c:d2:7e:cf:fe:26:dd:a6:fe:f9:8a:8f:2c:9f:b4:
23:7b:35:8a:f2:b8:64:59:a2:3f:f8:f6:10:42:dc:
03:8a:8e:3b:72:a1:11:08:c5:07:43:03:6c:c2:ab:
bd:1c:c2:2c:83:9a:5c:c8:91:8c:89:df:48:fa:a2:
da:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:56:DA:C7:37:02:C7:11:FF:A5:BD:7F:68:8E:E6:1F:94:1F:60:26
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WlbaxzcCxxH_pb1_aI7mH5QfYCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.124.0/22
45.12.254.0/24
45.14.165.0/24
45.81.243.0/24
45.88.67.0/24
84.21.172.0/24
85.31.45.0/24
85.209.132.0/24
85.209.134.0/24
87.121.217.0/24
93.123.30.0/24
94.125.100.0/23
94.156.236.0/24
109.206.241.0/24
171.22.30.0/24
185.246.220.0/24
192.145.28.0/22
193.8.184.0/24
193.47.60.0/24
193.148.58.0/23
193.168.196.0/22
212.87.220.0/24
212.87.223.0/24
Signature Algorithm: sha256WithRSAEncryption
07:28:7b:07:6c:05:f6:52:c4:8f:43:5c:46:c3:d7:66:62:3f:
15:6c:c1:6d:54:2c:28:80:2b:e0:d5:dd:55:6c:01:93:b1:30:
88:0d:08:7d:32:f7:5c:e4:03:c0:b5:d6:cc:b4:13:8f:34:34:
27:68:79:ee:b7:c6:90:43:00:c9:db:45:10:9d:97:ca:d4:0b:
6a:b6:cf:30:f2:6d:14:e7:6e:a4:fe:7c:0a:1c:85:85:57:2d:
0e:b2:f8:48:6f:ef:c9:cb:cc:55:1b:04:a1:ec:1f:97:af:df:
dc:f2:11:b0:4b:04:5e:23:ef:b1:4a:06:47:99:e2:60:4d:77:
7a:06:0b:73:64:4e:02:1e:53:f8:e8:ae:79:3a:1e:3f:73:8b:
0e:dc:50:43:bb:20:87:4a:97:bf:d7:1f:73:d2:18:b9:b0:8e:
a2:c5:f8:dc:9f:e4:58:37:58:8b:0f:00:75:de:a6:41:3a:6c:
ee:36:de:37:d8:7c:67:47:f2:6f:1e:35:cc:fb:a4:c8:f6:e1:
c3:f9:6f:16:1b:05:b8:ee:dc:14:a7:e1:8b:f6:49:84:21:3b:
0a:2e:ca:c1:52:2e:a1:2b:1e:28:67:2c:c7:7a:69:4b:3b:d4:
13:43:86:66:b3:85:5c:37:37:20:75:6e:d4:60:81:3a:cb:10:
9f:df:f0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:40:00 2025 by rpki-client