Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WpFV-sOVbVK6x6mNC8RkKz1GUiY.roa
File: WpFV-sOVbVK6x6mNC8RkKz1GUiY.roa (raw, json)
Hash identifier: UxCznUOsDVY4T4Zkfr108cWCuFQbwtO/CUb0BjHDFUI=
Subject key identifier: 5A:91:55:FA:C3:95:6D:52:BA:C7:A9:8D:0B:C4:64:2B:3D:46:52:26
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 01999A89722CD49611C1B1C42EF9A95DEA68
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WpFV-sOVbVK6x6mNC8RkKz1GUiY.roa
Signing time: Tue 30 Sep 2025 12:12:02 +0000
ROA not before: Tue 30 Sep 2025 12:12:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60223
IP address blocks: 195.96.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9a:89:72:2c:d4:96:11:c1:b1:c4:2e:f9:a9:5d:ea:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Sep 30 12:12:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a9155fac3956d52bac7a98d0bc4642b3d465226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9a:95:2e:02:a7:44:bf:1e:70:54:8a:11:b1:
35:6d:d3:92:0f:07:d7:60:5c:57:6a:e3:d9:64:7d:
2e:70:a8:b7:19:61:b4:1e:b8:04:41:0a:71:30:e5:
a5:b2:fc:3b:69:f6:5f:8d:70:85:52:1b:1a:93:ab:
eb:46:16:71:ef:c9:24:51:01:fa:27:8c:d3:82:4d:
bf:ec:49:1c:0c:75:a1:16:29:f7:3a:5b:77:81:d7:
f3:61:f2:50:aa:01:ac:a0:1b:99:3a:91:4b:92:75:
82:50:97:d0:a3:8e:f4:8f:8d:3d:16:b0:9b:cc:99:
c7:5a:59:7d:32:50:33:4d:98:c7:c3:d3:a9:14:fb:
50:e5:fb:f0:6a:96:ef:0b:1d:24:40:d8:d4:aa:49:
76:49:fc:0a:3a:00:b4:7f:24:35:49:0a:89:e2:1f:
62:46:f2:43:f7:76:ae:97:01:ec:08:99:b8:6d:12:
3a:6d:64:54:9c:75:68:2f:bb:b9:1c:d1:82:04:d7:
ad:e5:fd:d6:49:ba:aa:a3:b9:c9:2b:77:ee:84:ae:
0b:c6:be:80:e1:90:7a:c2:b1:ed:0f:ec:5a:30:f9:
ad:b8:9c:36:21:68:f5:bf:98:dc:ce:4a:2f:6d:f7:
4a:11:d8:d9:51:3a:7d:6f:7f:85:78:0b:79:b0:c5:
75:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:91:55:FA:C3:95:6D:52:BA:C7:A9:8D:0B:C4:64:2B:3D:46:52:26
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WpFV-sOVbVK6x6mNC8RkKz1GUiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.129.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:7c:f3:aa:f1:e1:63:9d:c4:eb:e5:af:a3:23:7c:33:e3:0e:
03:f7:b6:9b:9e:bc:21:13:e7:0e:2c:2d:ef:c3:55:0c:20:61:
2b:33:6f:3d:89:8b:af:aa:6c:44:f2:5e:74:ff:11:de:12:6b:
56:38:ee:ab:27:69:b1:a4:66:9a:6e:88:a8:5c:d1:4d:0b:85:
f4:02:c8:35:43:15:8f:6a:81:69:ef:a4:ca:a1:a0:40:38:2a:
29:a6:77:0d:c6:f9:fe:d4:53:3d:4b:d6:55:95:51:fe:3a:9a:
9e:9c:74:dd:1e:85:0e:d5:ec:37:55:cb:68:16:1e:2c:e1:51:
2a:9c:d0:c4:41:9a:5f:ca:78:40:e9:2b:c5:68:10:ad:89:f5:
6d:78:21:ab:ed:46:de:28:0a:e3:66:fb:c0:62:32:fe:f9:2d:
1a:68:cf:05:e2:35:6f:b2:cd:89:7c:71:85:ce:5c:d5:7f:d0:
00:02:b4:ea:e3:00:74:59:4e:97:f3:8c:f8:c3:bf:42:80:15:
6a:e4:4a:bd:7c:f6:f6:ab:2a:71:a4:96:34:8f:c8:51:fd:0f:
88:3f:8f:90:c0:83:e3:2f:fa:d4:aa:57:3c:c0:97:bb:8c:eb:
a5:3d:ae:7c:e8:f6:71:d4:f5:fa:9b:1e:b3:1b:05:28:b8:1b:
34:dc:12:d8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZmaiXIs1JYRwbHELvmpXepoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YWQ2MGRhNTI2NzFlOTA4M2NmMzk4NjRlY2EyYWEyMzI0
MWJlOWUwHhcNMjUwOTMwMTIxMjAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTkxNTVmYWMzOTU2ZDUyYmFjN2E5OGQwYmM0NjQyYjNkNDY1MjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJqVLgKnRL8ecFSKEbE1bdOSDwfX
YFxXauPZZH0ucKi3GWG0HrgEQQpxMOWlsvw7afZfjXCFUhsak6vrRhZx78kkUQH6
J4zTgk2/7EkcDHWhFin3Olt3gdfzYfJQqgGsoBuZOpFLknWCUJfQo470j409FrCb
zJnHWll9MlAzTZjHw9OpFPtQ5fvwapbvCx0kQNjUqkl2SfwKOgC0fyQ1SQqJ4h9i
RvJD93aulwHsCJm4bRI6bWRUnHVoL7u5HNGCBNet5f3WSbqqo7nJK3fuhK4Lxr6A
4ZB6wrHtD+xaMPmtuJw2IWj1v5jczkovbfdKEdjZUTp9b3+FeAt5sMV1LQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFqRVfrDlW1SusepjQvEZCs9RlImMB8GA1UdIwQY
MBaAFFitYNpSZx6Qg885hk7KKqIyQb6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDct
MTFiM2NmM2ZkNGUxLzEvV3BGVi1zT1ZiVks2eDZtTkM4UmtLejFHVWlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDctMTFiM2NmM2ZkNGUx
LzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw2CBMA0G
CSqGSIb3DQEBCwUAA4IBAQBefPOq8eFjncTr5a+jI3wz4w4D97abnrwhE+cOLC3v
w1UMIGErM289iYuvqmxE8l50/xHeEmtWOO6rJ2mxpGaaboioXNFNC4X0Asg1QxWP
aoFp76TKoaBAOCoppncNxvn+1FM9S9ZVlVH+OpqenHTdHoUO1ew3VctoFh4s4VEq
nNDEQZpfynhA6SvFaBCtifVteCGr7UbeKArjZvvAYjL++S0aaM8F4jVvss2JfHGF
zlzVf9AAArTq4wB0WU6X84z4w79CgBVq5Eq9fPb2qypxpJY0j8hR/Q+IP4+QwIPj
L/rUqlc8wJe7jOulPa586PZx1PX6mx6zGwUouBs03BLY
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:35:55 2025 by rpki-client