Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/WX-flO47j0Dzy8wTlsPOhW7id6g.roa
File: WX-flO47j0Dzy8wTlsPOhW7id6g.roa (raw, json)
Hash identifier: YZTgWZmsvbkgzrU4SNL12JeB0z2xcsLmQkoG04G1QQg=
Subject key identifier: 59:7F:9F:94:EE:3B:8F:40:F3:CB:CC:13:96:C3:CE:85:6E:E2:77:A8
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0199F93C8D43379C68B491A4ED401FB727E4
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/WX-flO47j0Dzy8wTlsPOhW7id6g.roa
Signing time: Sat 18 Oct 2025 21:31:59 +0000
ROA not before: Sat 18 Oct 2025 21:31:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215136
IP address blocks: 5.83.134.0/24 maxlen: 24
5.175.140.0/24 maxlen: 24
5.175.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f9:3c:8d:43:37:9c:68:b4:91:a4:ed:40:1f:b7:27:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 18 21:31:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=597f9f94ee3b8f40f3cbcc1396c3ce856ee277a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e6:39:50:f4:35:df:ec:fe:8c:75:e7:2d:f1:
33:cb:a4:59:81:48:b6:0f:79:16:62:42:e9:f3:79:
e8:d0:bc:5d:2e:c4:15:13:0f:04:fa:42:cb:80:4c:
8a:09:44:22:a0:e9:d1:f7:8f:03:69:f6:44:55:4a:
4a:ca:5d:12:e9:0f:31:24:c8:4a:2a:5e:68:99:a0:
f9:1e:e7:15:52:55:67:67:8c:e2:42:a1:da:6b:d1:
78:2a:a1:07:ec:94:e2:03:85:b2:6f:80:a2:76:64:
d5:3e:35:dd:9b:6d:51:62:64:91:50:65:c3:6c:71:
b7:71:ca:93:3a:2a:b8:6a:0b:e9:be:ec:38:88:8d:
2f:39:2e:5e:c3:bb:8c:fc:3c:7d:b8:69:a2:a5:9b:
22:5b:0a:4c:15:c0:c3:a7:dd:7d:1e:77:2a:cf:c9:
b0:3a:ee:a6:9c:63:5b:ed:fb:47:08:f4:92:c0:2a:
cb:86:3f:a5:47:23:11:45:cc:46:0a:e7:37:8f:6a:
42:ba:c3:3f:82:b9:36:e1:d3:91:26:61:95:36:5f:
f3:ab:3d:c3:af:21:6e:2d:46:ff:db:b7:a1:b2:f0:
97:28:ee:7f:bb:fd:15:a9:16:4c:f3:24:85:e7:9b:
b6:7d:b1:e6:7a:d9:b8:42:33:cd:c5:ee:29:58:c4:
55:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7F:9F:94:EE:3B:8F:40:F3:CB:CC:13:96:C3:CE:85:6E:E2:77:A8
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/WX-flO47j0Dzy8wTlsPOhW7id6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.134.0/24
5.175.140.0/24
5.175.222.0/24
Signature Algorithm: sha256WithRSAEncryption
db:43:32:01:88:1c:5e:0b:4c:ee:92:0c:14:b0:f7:0a:0a:ae:
ba:74:50:53:59:9c:7c:92:9e:ca:a3:12:2e:27:a6:72:ed:d3:
d6:22:0e:e6:cc:07:f2:5b:37:66:81:05:fd:1a:12:6d:d4:02:
39:f8:98:57:90:b5:55:6a:11:4c:e6:c6:95:85:6b:ef:0d:fc:
0d:03:cd:3e:75:aa:c8:34:f6:2b:8d:0a:c6:69:29:54:b7:2f:
c5:90:fa:3d:b7:29:da:e3:4d:c4:77:ac:b0:3a:53:95:03:65:
0e:91:d3:74:f9:38:51:eb:a7:e8:91:07:32:a7:e7:5e:12:7c:
04:3b:65:aa:d0:50:32:8c:89:03:48:19:32:2f:bf:54:66:08:
7a:63:44:7c:1b:c8:25:e8:f9:9e:aa:b4:6c:c9:f3:ca:24:69:
e5:e1:83:b1:20:76:56:c6:d4:ad:cb:e7:87:bd:e2:d9:74:a0:
c6:92:0a:a1:11:38:40:51:2a:72:14:26:aa:2f:d9:f8:0f:3a:
2d:bb:7c:0a:64:66:c8:0b:da:ac:76:3d:66:df:6e:e3:fa:84:
09:51:9a:32:94:f7:d1:b1:8f:79:ee:4a:94:4e:66:38:6f:10:
08:20:b8:01:f2:0d:95:d4:0c:93:49:f3:d6:f8:c4:dc:ae:e3:
89:cd:77:04
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZn5PI1DN5xotJGk7UAftyfkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUxMDE4MjEzMTU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTdmOWY5NGVlM2I4ZjQwZjNjYmNjMTM5NmMzY2U4NTZlZTI3N2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreY5UPQ13+z+jHXnLfEzy6RZgUi2
D3kWYkLp83no0LxdLsQVEw8E+kLLgEyKCUQioOnR948DafZEVUpKyl0S6Q8xJMhK
Kl5omaD5HucVUlVnZ4ziQqHaa9F4KqEH7JTiA4Wyb4CidmTVPjXdm21RYmSRUGXD
bHG3ccqTOiq4agvpvuw4iI0vOS5ew7uM/Dx9uGmipZsiWwpMFcDDp919Hncqz8mw
Ou6mnGNb7ftHCPSSwCrLhj+lRyMRRcxGCuc3j2pCusM/grk24dORJmGVNl/zqz3D
ryFuLUb/27ehsvCXKO5/u/0VqRZM8ySF55u2fbHmetm4QjPNxe4pWMRVHQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFl/n5TuO49A88vME5bDzoVu4neoMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvV1gtZmxPNDdqMER6eTh3VGxzUE9oVzdpZDZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABVOGAwQA
Ba+MAwQABa/eMA0GCSqGSIb3DQEBCwUAA4IBAQDbQzIBiBxeC0zukgwUsPcKCq66
dFBTWZx8kp7KoxIuJ6Zy7dPWIg7mzAfyWzdmgQX9GhJt1AI5+JhXkLVVahFM5saV
hWvvDfwNA80+darINPYrjQrGaSlUty/FkPo9tyna403Ed6ywOlOVA2UOkdN0+ThR
66fokQcyp+deEnwEO2Wq0FAyjIkDSBkyL79UZgh6Y0R8G8gl6PmeqrRsyfPKJGnl
4YOxIHZWxtSty+eHveLZdKDGkgqhEThAUSpyFCaqL9n4Dzotu3wKZGbIC9qsdj1m
327j+oQJUZoylPfRsY957kqUTmY4bxAIILgB8g2V1AyTSfPW+MTcruOJzXcE
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:26:47 2025 by rpki-client