Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/WuP_ar5p0VQaYjgm5CdF94AIxBs.roa
File: WuP_ar5p0VQaYjgm5CdF94AIxBs.roa (raw, json)
Hash identifier: ydupRdA76pUpd82bhv9cS8ujQ+gdAK4Xhs2n/s0tNgc=
Subject key identifier: 5A:E3:FF:6A:BE:69:D1:54:1A:62:38:26:E4:27:45:F7:80:08:C4:1B
Certificate issuer: /CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
Certificate serial: 0197F01DB740C9B600828B3B97CD83B871CF
Authority key identifier: B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/WuP_ar5p0VQaYjgm5CdF94AIxBs.roa
Signing time: Wed 09 Jul 2025 16:56:08 +0000
ROA not before: Wed 09 Jul 2025 16:56:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201746
IP address blocks: 45.66.212.0/23 maxlen: 23
45.66.212.0/24 maxlen: 24
45.66.213.0/24 maxlen: 24
45.131.28.0/24 maxlen: 24
94.158.253.0/24 maxlen: 24
94.158.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 19:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f0:1d:b7:40:c9:b6:00:82:8b:3b:97:cd:83:b8:71:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
Validity
Not Before: Jul 9 16:56:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ae3ff6abe69d1541a623826e42745f78008c41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5f:0b:62:46:fd:d1:a8:f6:93:ff:95:76:3d:
bb:b0:0b:38:51:5b:8c:da:02:eb:1e:09:09:47:bb:
29:11:fd:93:98:8f:5c:c6:97:44:2a:2d:df:7a:c7:
e3:a9:1a:13:00:70:53:8e:c7:5c:d3:ed:ff:7c:3c:
dc:51:47:98:9e:5a:d5:47:44:9c:41:1b:e3:b9:d5:
fe:80:05:0a:30:a5:d2:ea:e5:63:ed:ef:00:48:3b:
7c:48:cf:7c:4d:2d:b5:44:4f:c5:e2:35:3d:9a:9f:
4b:5f:26:4e:33:49:b6:55:33:41:cd:47:18:48:68:
60:9f:58:7d:55:99:1c:34:77:23:9e:ad:b6:4e:1b:
35:f0:cb:c8:22:17:eb:a3:41:d6:df:dc:6d:7d:71:
ae:97:6b:01:bd:4c:96:9a:94:77:3a:26:83:56:21:
3a:94:c2:e8:17:12:24:70:4d:b7:62:1a:8b:20:6f:
cb:e9:02:0a:5d:7a:73:ad:01:2e:4b:d2:5a:d4:ef:
9e:93:ef:6d:62:af:0b:a0:a1:df:e4:68:ba:06:65:
92:38:3d:87:2b:d6:00:07:5c:34:32:e2:24:94:62:
54:1b:2d:f3:d2:73:1d:c4:b7:22:67:19:13:6e:c1:
22:e6:d8:3e:27:e6:1e:0e:96:b8:a3:30:3f:6a:f4:
cb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E3:FF:6A:BE:69:D1:54:1A:62:38:26:E4:27:45:F7:80:08:C4:1B
X509v3 Authority Key Identifier:
keyid:B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/WuP_ar5p0VQaYjgm5CdF94AIxBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.212.0/23
45.131.28.0/24
94.158.253.0-94.158.254.255
Signature Algorithm: sha256WithRSAEncryption
05:3a:20:44:05:82:e0:2c:06:be:27:a6:36:39:72:96:3e:a0:
38:3a:35:11:4f:3a:ed:be:a1:cd:10:0f:06:59:e3:bc:50:9f:
a8:30:06:61:cd:30:8a:3a:68:b1:17:86:d6:d7:6d:bd:93:0c:
2e:6f:d3:51:5f:d6:f9:94:c8:ce:e0:e5:5c:aa:ed:1c:97:03:
4d:4e:f0:3c:1f:0b:9f:cd:4b:4a:1e:9e:18:15:8a:b5:b7:96:
77:e9:36:71:e3:6c:02:16:3b:62:d7:9a:85:98:81:e0:7a:80:
85:0f:05:d0:2a:27:4e:c3:92:85:80:f5:43:61:79:7b:70:b1:
df:9d:b4:1c:a0:62:60:88:a9:26:78:04:56:5d:f7:a9:d6:4a:
fe:97:cc:b5:0c:2b:8b:8c:c0:29:45:2a:de:d4:69:39:17:3f:
14:6a:fb:8d:45:cf:97:59:f4:39:44:dc:c6:dd:a5:20:ff:19:
a0:bc:d3:67:d9:18:24:93:9b:90:e5:f9:5c:83:5b:3e:93:ce:
76:7c:3c:f2:e7:1b:30:3b:3a:1d:05:d5:58:68:a9:9b:71:2e:
d0:c9:14:ca:a1:ea:bb:fc:13:a7:b6:f3:db:fd:f2:84:f0:bd:
fb:a3:20:83:81:8c:16:5d:f6:7c:8f:00:d5:0c:74:7f:be:09:
f0:06:d3:51
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZfwHbdAybYAgos7l82DuHHPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMDkzMDg1NDBjNGRmOWI5YmI3ZDYzMjdmYTdiNWQ0OTAw
ODA2OGMwHhcNMjUwNzA5MTY1NjA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWUzZmY2YWJlNjlkMTU0MWE2MjM4MjZlNDI3NDVmNzgwMDhjNDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAml8LYkb90aj2k/+Vdj27sAs4UVuM
2gLrHgkJR7spEf2TmI9cxpdEKi3fesfjqRoTAHBTjsdc0+3/fDzcUUeYnlrVR0Sc
QRvjudX+gAUKMKXS6uVj7e8ASDt8SM98TS21RE/F4jU9mp9LXyZOM0m2VTNBzUcY
SGhgn1h9VZkcNHcjnq22Ths18MvIIhfro0HW39xtfXGul2sBvUyWmpR3OiaDViE6
lMLoFxIkcE23YhqLIG/L6QIKXXpzrQEuS9Ja1O+ek+9tYq8LoKHf5Gi6BmWSOD2H
K9YAB1w0MuIklGJUGy3z0nMdxLciZxkTbsEi5tg+J+YeDpa4ozA/avTLTwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFFrj/2q+adFUGmI4JuQnRfeACMQbMB8GA1UdIwQY
MBaAFLIJMIVAxN+bm7fWMn+ntdSQCAaMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2drd2hVREUzNXVidDlZeWY2ZTExSkFJQm93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84ODBlYjItZmE2NS00N2NhLThhMDAt
NjQ4MGMzZDFmNGU0LzEvV3VQX2FyNXAwVlFhWWpnbTVDZEY5NEFJeEJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi84ODBlYjItZmE2NS00N2NhLThhMDAtNjQ4MGMzZDFmNGU0
LzEvc2drd2hVREUzNXVidDlZeWY2ZTExSkFJQm93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBLULUAwQA
LYMcMAwDBABenv0DBABenv4wDQYJKoZIhvcNAQELBQADggEBAAU6IEQFguAsBr4n
pjY5cpY+oDg6NRFPOu2+oc0QDwZZ47xQn6gwBmHNMIo6aLEXhtbXbb2TDC5v01Ff
1vmUyM7g5Vyq7RyXA01O8DwfC5/NS0oenhgVirW3lnfpNnHjbAIWO2LXmoWYgeB6
gIUPBdAqJ07DkoWA9UNheXtwsd+dtBygYmCIqSZ4BFZd96nWSv6XzLUMK4uMwClF
Kt7UaTkXPxRq+41Fz5dZ9DlE3MbdpSD/GaC802fZGCSTm5Dl+VyDWz6TznZ8PPLn
GzA7Oh0F1VhoqZtxLtDJFMqh6rv8E6e289v98oTwvfujIIOBjBZd9nyPANUMdH++
CfAG01E=
-----END CERTIFICATE-----
Generated at Wed Jul 23 02:00:25 2025 by rpki-client