
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/WQBZ-f5dGsC1cL_jEBOvsIELp80.roa
File: WQBZ-f5dGsC1cL_jEBOvsIELp80.roa (raw, json)
Hash identifier: R9ehHlzYxXlTfaqJUkztXePFQ64EbowiDEZr/EhM2e4=
Subject key identifier: 59:00:59:F9:FE:5D:1A:C0:B5:70:BF:E3:10:13:AF:B0:81:0B:A7:CD
Certificate issuer: /CN=05711532150ce7c97a7ea48c0d77a42e6f0d5fc3
Certificate serial: 0199A8A35DA1909B57AC13F89FFCBEB4889D
Authority key identifier: 05:71:15:32:15:0C:E7:C9:7A:7E:A4:8C:0D:77:A4:2E:6F:0D:5F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/WQBZ-f5dGsC1cL_jEBOvsIELp80.roa
Signing time: Fri 03 Oct 2025 05:55:02 +0000
ROA not before: Fri 03 Oct 2025 05:55:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206962
IP address blocks: 77.95.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a8:a3:5d:a1:90:9b:57:ac:13:f8:9f:fc:be:b4:88:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05711532150ce7c97a7ea48c0d77a42e6f0d5fc3
Validity
Not Before: Oct 3 05:55:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=590059f9fe5d1ac0b570bfe31013afb0810ba7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2d:ce:80:cb:17:55:1d:a9:23:8c:af:ba:56:
6a:96:88:c5:bd:b8:ca:43:dc:fb:5b:15:5d:85:5a:
a1:8b:6c:83:97:62:3b:19:5b:62:8f:ea:0a:0e:ad:
c3:06:f7:4c:12:0a:e8:9d:e4:1b:95:3b:25:48:de:
82:51:3a:9a:68:3f:9b:35:c6:89:4b:8c:74:03:2a:
05:43:0e:53:20:88:2a:0e:4f:4e:67:25:c5:6c:19:
0a:8b:cf:1f:5a:02:92:99:4b:40:72:6d:ed:37:f6:
b9:d6:ea:ae:28:d2:ab:2d:3e:c6:22:c1:56:46:ee:
29:25:7d:8a:80:7e:40:16:62:82:77:a6:af:a4:92:
12:42:02:2e:9b:f1:93:28:ae:05:07:3d:09:a6:07:
1c:88:7d:85:c4:2d:de:6c:06:75:59:7e:e7:c6:79:
e0:78:f4:d3:f6:92:b4:23:60:d6:30:d2:f8:d1:88:
1a:f3:b7:44:11:ce:21:e7:1e:df:8e:01:e7:ce:d7:
9d:42:24:00:3c:a1:2a:ef:f0:0a:71:02:9a:70:aa:
95:3f:ca:82:26:b1:de:cd:a8:96:81:53:d9:f4:ff:
6e:a0:6e:df:c9:39:4a:82:41:6c:07:61:9d:44:a9:
4b:64:3f:eb:81:00:c2:20:7e:5c:39:54:d1:d7:96:
4f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:00:59:F9:FE:5D:1A:C0:B5:70:BF:E3:10:13:AF:B0:81:0B:A7:CD
X509v3 Authority Key Identifier:
keyid:05:71:15:32:15:0C:E7:C9:7A:7E:A4:8C:0D:77:A4:2E:6F:0D:5F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/WQBZ-f5dGsC1cL_jEBOvsIELp80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.216.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:bc:e1:38:50:ef:11:ef:cb:5c:2a:e7:51:6c:dd:37:23:30:
47:a1:09:e7:d5:45:8e:8c:31:e8:16:11:bb:79:14:05:10:02:
9c:90:62:36:45:41:92:5a:d5:52:ab:57:5e:1a:fe:71:20:92:
ff:3a:0a:ec:39:9c:db:fb:33:1a:f8:91:45:57:b8:90:51:2c:
4d:b3:22:e4:1d:57:d0:54:bb:36:c4:cf:4a:ea:2c:57:81:6b:
5a:e4:d3:4b:99:cf:42:22:6b:f0:f0:ee:8f:36:a7:6e:4b:ac:
b0:ef:de:eb:07:48:fd:93:76:f0:79:05:91:47:5f:5f:34:bd:
59:c5:76:a4:b4:41:a7:e8:5a:95:a0:d3:82:8a:28:0f:40:7d:
7b:c5:c9:48:a7:c8:55:9a:4b:3e:b1:da:4c:e5:31:84:d4:9f:
15:d0:0b:56:ec:78:44:f9:6d:f4:f8:81:c9:d0:20:c8:b2:31:
31:37:ac:e4:19:06:f4:93:99:f6:a7:c8:10:02:18:3c:30:92:
73:6e:bf:ca:75:58:1e:65:1e:8c:60:e6:12:f2:e3:81:6a:a4:
8b:7b:95:2a:be:f9:50:a5:e6:73:cc:29:0e:98:bc:1d:86:b9:
3b:0b:f5:0a:00:bc:fa:bb:ac:19:b3:24:3c:65:8b:4f:f5:7f:
67:24:78:25
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZmoo12hkJtXrBP4n/y+tIidMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NzExNTMyMTUwY2U3Yzk3YTdlYTQ4YzBkNzdhNDJlNmYw
ZDVmYzMwHhcNMjUxMDAzMDU1NTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTAwNTlmOWZlNWQxYWMwYjU3MGJmZTMxMDEzYWZiMDgxMGJhN2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6S3OgMsXVR2pI4yvulZqlojFvbjK
Q9z7WxVdhVqhi2yDl2I7GVtij+oKDq3DBvdMEgroneQblTslSN6CUTqaaD+bNcaJ
S4x0AyoFQw5TIIgqDk9OZyXFbBkKi88fWgKSmUtAcm3tN/a51uquKNKrLT7GIsFW
Ru4pJX2KgH5AFmKCd6avpJISQgIum/GTKK4FBz0JpgcciH2FxC3ebAZ1WX7nxnng
ePTT9pK0I2DWMNL40Yga87dEEc4h5x7fjgHnztedQiQAPKEq7/AKcQKacKqVP8qC
JrHezaiWgVPZ9P9uoG7fyTlKgkFsB2GdRKlLZD/rgQDCIH5cOVTR15ZPoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFkAWfn+XRrAtXC/4xATr7CBC6fNMB8GA1UdIwQY
MBaAFAVxFTIVDOfJen6kjA13pC5vDV/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlhFVk1oVU01OGw2ZnFTTURYZWtMbThOWDhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS80ZDg5ZDYtNDQ2NS00MzIxLTkyODIt
N2JjZmQ2NGUwMjg4LzEvV1FCWi1mNWRHc0MxY0xfakVCT3ZzSUVMcDgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS80ZDg5ZDYtNDQ2NS00MzIxLTkyODItN2JjZmQ2NGUwMjg4
LzEvQlhFVk1oVU01OGw2ZnFTTURYZWtMbThOWDhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATV/YMA0G
CSqGSIb3DQEBCwUAA4IBAQA+vOE4UO8R78tcKudRbN03IzBHoQnn1UWOjDHoFhG7
eRQFEAKckGI2RUGSWtVSq1deGv5xIJL/OgrsOZzb+zMa+JFFV7iQUSxNsyLkHVfQ
VLs2xM9K6ixXgWta5NNLmc9CImvw8O6PNqduS6yw797rB0j9k3bweQWRR19fNL1Z
xXaktEGn6FqVoNOCiigPQH17xclIp8hVmks+sdpM5TGE1J8V0AtW7HhE+W30+IHJ
0CDIsjExN6zkGQb0k5n2p8gQAhg8MJJzbr/KdVgeZR6MYOYS8uOBaqSLe5UqvvlQ
peZzzCkOmLwdhrk7C/UKALz6u6wZsyQ8ZYtP9X9nJHgl
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:44:51 2025 by rpki-client