Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/WVBsvJvxRXXzpiKQ5ooLV7iApwM.roa
File: WVBsvJvxRXXzpiKQ5ooLV7iApwM.roa (raw, json)
Hash identifier: UI0HWLgrfRu9Oc9UqkpdFHFYDHuUCfL1cPPzzUGZoy0=
Subject key identifier: 59:50:6C:BC:9B:F1:45:75:F3:A6:22:90:E6:8A:0B:57:B8:80:A7:03
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 0199E1CDB2DEA0B95DB7F8538ED118ECF1C5
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/WVBsvJvxRXXzpiKQ5ooLV7iApwM.roa
Signing time: Tue 14 Oct 2025 08:19:38 +0000
ROA not before: Tue 14 Oct 2025 08:19:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203936
IP address blocks: 45.144.248.0/22 maxlen: 24
89.40.238.0/24 maxlen: 24
89.43.72.0/24 maxlen: 24
89.43.198.0/24 maxlen: 24
89.44.145.0/24 maxlen: 24
185.249.232.0/24 maxlen: 24
185.253.144.0/22 maxlen: 24
185.253.145.0/24 maxlen: 24
193.39.92.0/24 maxlen: 24
193.39.93.0/24 maxlen: 24
193.39.94.0/24 maxlen: 24
194.15.219.0/24 maxlen: 24
194.15.232.0/24 maxlen: 24
194.15.236.0/24 maxlen: 24
194.26.1.0/24 maxlen: 24
2a0c:1380::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e1:cd:b2:de:a0:b9:5d:b7:f8:53:8e:d1:18:ec:f1:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Oct 14 08:19:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59506cbc9bf14575f3a62290e68a0b57b880a703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:83:f6:cf:1b:c7:00:37:21:9b:57:52:69:c9:
6a:3e:7a:48:79:02:75:25:eb:59:1c:7f:54:4a:53:
fe:2c:cc:8d:e0:f9:3d:c6:bf:20:d0:fd:0c:26:a4:
03:51:77:2d:cb:57:eb:71:b3:99:f5:23:f2:05:46:
08:44:31:c6:50:c7:6a:3d:73:73:be:7b:90:94:55:
d9:31:9b:cc:4f:d9:e9:bf:06:ff:64:f0:24:c5:d0:
cb:e5:e4:dc:35:bb:ca:ef:99:14:a4:e7:54:c2:19:
bc:69:5b:b1:9e:1c:97:72:c7:19:cc:10:f6:03:e1:
53:49:ce:11:9e:0a:69:67:0c:ae:3a:3a:05:a5:23:
97:01:bc:b9:50:77:8f:a4:2d:6e:2b:1f:63:06:bf:
8d:e5:33:85:14:83:f9:5e:99:a4:36:87:34:19:e2:
8b:8f:25:c7:87:be:a5:43:ca:c0:2f:8a:c4:3f:37:
63:38:e9:a9:15:ff:74:73:2a:2f:99:ec:a2:74:9d:
7c:2b:ba:3d:2f:0d:0b:14:76:c2:06:27:08:29:16:
bc:fa:82:94:fb:b3:01:b4:3a:5c:2b:73:57:e3:bf:
7c:c0:94:5c:85:47:ed:59:7b:02:82:98:c0:28:1f:
85:6b:8b:4f:70:4c:8b:b0:a1:a6:0d:be:a5:9f:83:
ba:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:50:6C:BC:9B:F1:45:75:F3:A6:22:90:E6:8A:0B:57:B8:80:A7:03
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/WVBsvJvxRXXzpiKQ5ooLV7iApwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.248.0/22
89.40.238.0/24
89.43.72.0/24
89.43.198.0/24
89.44.145.0/24
185.249.232.0/24
185.253.144.0/22
193.39.92.0-193.39.94.255
194.15.219.0/24
194.15.232.0/24
194.15.236.0/24
194.26.1.0/24
IPv6:
2a0c:1380::/29
Signature Algorithm: sha256WithRSAEncryption
85:e7:36:9a:03:8e:24:28:a3:5a:e6:58:6c:2e:22:c5:9a:90:
b0:1d:9f:18:8f:e0:be:ea:fb:7c:b6:36:60:d4:92:63:17:7e:
f8:1f:8a:2f:44:0c:c2:9d:a0:99:fa:16:8b:aa:1c:b7:56:82:
84:24:79:70:3c:b6:83:74:2b:49:36:58:8c:02:2b:a2:fb:70:
67:54:09:66:f7:f8:c4:0c:d0:46:a8:cd:2c:f7:8d:53:2f:51:
e7:0b:22:63:23:d5:92:65:9e:cc:9b:56:b6:32:1f:13:a7:a6:
1c:52:65:11:77:f3:46:26:aa:91:3c:80:5b:d3:0e:92:45:7f:
5e:c0:94:98:33:f5:64:41:02:de:0d:a5:fa:1a:34:b2:6f:2d:
55:68:58:84:6f:da:83:55:d2:d3:1e:a7:c4:11:aa:0c:f9:0c:
22:e2:26:b5:fa:57:b3:37:a7:ac:a0:f2:fa:2e:0a:70:9a:98:
4a:ed:2c:8f:c3:0f:90:5a:04:31:d4:5f:0d:c9:7b:15:4f:65:
da:2a:3a:b8:6b:f2:42:e5:87:58:68:0a:88:29:6b:62:12:af:
fa:8b:c2:3a:57:7d:f8:4d:1a:34:d9:8e:c1:21:8e:8d:63:f4:
d3:ab:cc:c2:80:3f:b3:7f:c2:52:e4:45:32:78:17:7d:0c:bf:
ee:51:5e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:35:29 2025 by rpki-client