Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/wserKdrEjvEaiB1L0as5xEScHOo.roa
File: wserKdrEjvEaiB1L0as5xEScHOo.roa (raw, json)
Hash identifier: p6zeLIjpAjhjz53tHHHfbEf0nj4XjPM97zZUxXWhby4=
Subject key identifier: C2:C7:AB:29:DA:C4:8E:F1:1A:88:1D:4B:D1:AB:39:C4:44:9C:1C:EA
Certificate issuer: /CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Certificate serial: 01997B27194574D04FAD0C194AA0C3B36CB0
Authority key identifier: AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/wserKdrEjvEaiB1L0as5xEScHOo.roa
Signing time: Wed 24 Sep 2025 09:56:23 +0000
ROA not before: Wed 24 Sep 2025 09:56:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50733
IP address blocks: 89.221.80.0/22 maxlen: 22
89.221.80.0/23 maxlen: 23
89.221.80.0/24 maxlen: 24
89.221.81.0/24 maxlen: 24
89.221.82.0/23 maxlen: 23
89.221.82.0/24 maxlen: 24
89.221.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:7b:27:19:45:74:d0:4f:ad:0c:19:4a:a0:c3:b3:6c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Validity
Not Before: Sep 24 09:56:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2c7ab29dac48ef11a881d4bd1ab39c4449c1cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:27:19:2c:00:25:f4:4e:96:63:c1:97:9b:09:
23:95:3a:ff:ab:ed:41:1b:7e:11:84:56:5b:37:22:
46:dd:90:bb:df:19:c2:74:2f:cb:6f:13:8e:cd:53:
cf:a2:d5:22:16:70:cd:9a:bc:78:96:38:36:6a:8f:
34:b4:9c:8b:00:49:04:e5:15:0a:f2:8f:75:b1:d0:
3a:43:1c:62:2a:96:48:d3:dc:95:49:34:c0:25:c5:
26:64:31:67:b9:3f:89:4d:ce:6b:7b:c2:71:7e:19:
0e:b6:c3:70:c6:f8:7b:fe:e5:82:9a:a3:d2:56:06:
c8:5f:0a:da:09:48:68:2a:67:cb:2c:75:2c:01:18:
54:3d:8c:81:f3:06:96:71:ff:ae:30:39:59:05:e9:
c7:0e:a1:7d:75:64:02:ec:05:2d:76:d4:3d:07:cd:
26:0a:d6:c8:5f:7d:a8:38:fc:8d:86:b1:e7:8b:e1:
8c:c5:64:39:4d:c2:83:e3:90:fa:1e:7e:2b:b6:26:
15:e4:34:e0:e1:52:c2:c6:5e:2d:a0:59:5d:c3:60:
04:a9:01:e0:0b:69:2e:e0:9e:43:e8:26:1d:d7:7f:
3e:45:f9:b2:e8:9c:41:b4:e2:1b:53:ee:51:6f:79:
cd:af:3b:fb:8b:7e:cc:d5:75:80:94:c0:61:f9:24:
18:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C7:AB:29:DA:C4:8E:F1:1A:88:1D:4B:D1:AB:39:C4:44:9C:1C:EA
X509v3 Authority Key Identifier:
keyid:AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/wserKdrEjvEaiB1L0as5xEScHOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.221.80.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:6d:ab:58:ca:aa:bd:25:7b:05:b9:4c:9b:04:d1:a3:11:c1:
e6:02:28:fb:4f:3d:34:0b:73:59:c3:1d:d3:a5:42:68:2d:9b:
47:fc:b0:8d:29:8a:e1:2d:50:bc:26:66:fa:a8:92:1e:d4:a5:
c0:43:fe:60:16:b3:61:41:08:55:24:ff:9b:29:e0:cd:0d:ae:
58:de:97:10:1a:2a:11:ef:5c:02:3e:31:b3:68:96:02:c9:2e:
fa:f5:7d:b8:a7:d1:be:4a:51:f2:19:fa:8b:93:ad:14:f1:92:
f0:10:44:71:20:e9:72:d8:9b:5f:7b:14:da:14:b5:42:76:5e:
51:bf:39:c1:ef:2b:60:5d:4a:e8:1a:5e:c4:f2:0f:8e:41:1f:
ad:a7:a8:8e:b1:17:5a:ae:de:5c:d3:bf:17:d1:73:3a:ad:05:
b7:c9:3d:ec:01:9e:e8:69:de:a8:76:65:d5:f5:03:f1:b0:4b:
ef:32:84:a3:20:2c:eb:d8:eb:a3:a2:10:ac:ee:38:43:4d:c0:
6e:84:d4:9d:54:34:6b:e8:9a:d8:e7:bc:af:88:fe:54:f0:cc:
e0:54:d9:4f:66:d1:17:e7:c3:0b:d4:87:4b:1c:de:e2:fb:84:
24:51:ff:24:e9:cd:06:52:29:b3:55:66:ac:c6:ee:b7:0f:7f:
70:a1:66:92
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZl7JxlFdNBPrQwZSqDDs2ywMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkOTY4MWYxNDRkYjE0MzBhYzMxNWM4MzA2ZTFjMTQ3MzBj
NWZlYzIwHhcNMjUwOTI0MDk1NjIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmM3YWIyOWRhYzQ4ZWYxMWE4ODFkNGJkMWFiMzljNDQ0OWMxY2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuycZLAAl9E6WY8GXmwkjlTr/q+1B
G34RhFZbNyJG3ZC73xnCdC/LbxOOzVPPotUiFnDNmrx4ljg2ao80tJyLAEkE5RUK
8o91sdA6QxxiKpZI09yVSTTAJcUmZDFnuT+JTc5re8JxfhkOtsNwxvh7/uWCmqPS
VgbIXwraCUhoKmfLLHUsARhUPYyB8waWcf+uMDlZBenHDqF9dWQC7AUtdtQ9B80m
CtbIX32oOPyNhrHni+GMxWQ5TcKD45D6Hn4rtiYV5DTg4VLCxl4toFldw2AEqQHg
C2ku4J5D6CYd138+Rfmy6JxBtOIbU+5Rb3nNrzv7i37M1XWAlMBh+SQYzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMLHqynaxI7xGogdS9GrOcREnBzqMB8GA1UdIwQY
MBaAFK2WgfFE2xQwrDFcgwbhwUcwxf7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclphQjhVVGJGRENzTVZ5REJ1SEJSekRGX3NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy80MDViNWYtOGQyNi00ZWUzLWI4N2Yt
YTNhMTNlM2E3ZDgwLzEvd3NlcktkckVqdkVhaUIxTDBhczV4RVNjSE9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy80MDViNWYtOGQyNi00ZWUzLWI4N2YtYTNhMTNlM2E3ZDgw
LzEvclphQjhVVGJGRENzTVZ5REJ1SEJSekRGX3NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWd1QMA0G
CSqGSIb3DQEBCwUAA4IBAQAdbatYyqq9JXsFuUybBNGjEcHmAij7Tz00C3NZwx3T
pUJoLZtH/LCNKYrhLVC8Jmb6qJIe1KXAQ/5gFrNhQQhVJP+bKeDNDa5Y3pcQGioR
71wCPjGzaJYCyS769X24p9G+SlHyGfqLk60U8ZLwEERxIOly2JtfexTaFLVCdl5R
vznB7ytgXUroGl7E8g+OQR+tp6iOsRdart5c078X0XM6rQW3yT3sAZ7oad6odmXV
9QPxsEvvMoSjICzr2OujohCs7jhDTcBuhNSdVDRr6JrY57yviP5U8MzgVNlPZtEX
58ML1IdLHN7i+4QkUf8k6c0GUimzVWasxu63D39woWaS
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:05:06 2025 by rpki-client