Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/wtkD-20PxGsfMrgWX8qOHSBsf54.roa
File: wtkD-20PxGsfMrgWX8qOHSBsf54.roa (raw, json)
Hash identifier: xDIqfuZXxf0D/68qMYXi+nQ41Sof9IMvRw4diZNZR0c=
Subject key identifier: C2:D9:03:FB:6D:0F:C4:6B:1F:32:B8:16:5F:CA:8E:1D:20:6C:7F:9E
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0199381E5AA62AE51937242675FD1C69CA9A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/wtkD-20PxGsfMrgWX8qOHSBsf54.roa
Signing time: Thu 11 Sep 2025 09:32:17 +0000
ROA not before: Thu 11 Sep 2025 09:32:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28753
IP address blocks: 193.8.127.0/24 maxlen: 24
2a04:9f40::/29 maxlen: 29
2a06:1184:101::/48 maxlen: 48
2a06:3bc0::/29 maxlen: 29
2a07:8a40::/29 maxlen: 29
2a09:7b00::/29 maxlen: 29
2a0a:2d06:102::/48 maxlen: 48
2a0a:2d06:103::/48 maxlen: 48
2a0a:7d00::/29 maxlen: 29
2a0c:4880::/29 maxlen: 29
2a0c:7886:99::/48 maxlen: 48
2a0c:7886:100::/48 maxlen: 48
2a0e:15c7:99::/48 maxlen: 48
2a0f:17c0::/29 maxlen: 29
2a0f:2500::/29 maxlen: 29
2a0f:d200::/29 maxlen: 29
2a0f:db40::/29 maxlen: 29
2a11:8880::/29 maxlen: 29
2a12:ac43:1312::/48 maxlen: 48
2a12:d5c0::/29 maxlen: 29
2a12:ecc0:158::/48 maxlen: 48
2a12:ecc6:1312::/48 maxlen: 48
2a13:1380::/29 maxlen: 29
2a13:18c6:66::/48 maxlen: 48
2a13:18c6:88::/48 maxlen: 48
2a13:2cc0::/29 maxlen: 29
2a13:2d40::/29 maxlen: 29
2a13:2dc0::/29 maxlen: 29
2a13:2e40::/29 maxlen: 29
2a13:3380::/29 maxlen: 29
2a13:4900::/29 maxlen: 29
2a13:5b80::/29 maxlen: 29
2a13:7900::/29 maxlen: 29
2a13:7d80::/29 maxlen: 29
2a13:8200::/29 maxlen: 29
2a13:9080::/29 maxlen: 29
2a13:9180::/29 maxlen: 29
2a13:9580::/29 maxlen: 29
2a13:9680::/29 maxlen: 29
2a13:c900:77::/48 maxlen: 48
2a13:d100::/29 maxlen: 29
2a13:d700::/29 maxlen: 29
2a13:d900::/29 maxlen: 29
2a13:f900::/29 maxlen: 29
2a13:fb00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:1e:5a:a6:2a:e5:19:37:24:26:75:fd:1c:69:ca:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 11 09:32:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2d903fb6d0fc46b1f32b8165fca8e1d206c7f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b9:8d:07:89:68:00:dc:25:7b:49:df:94:47:
e4:74:9f:76:89:19:cc:a4:fe:97:a8:db:f8:d1:72:
d9:36:25:ed:71:7c:cd:06:2e:b7:bf:31:1a:92:bb:
ee:a0:14:ca:b0:b1:9a:30:85:08:7d:df:24:e3:c2:
2f:5c:46:1a:02:4c:5e:b9:ec:80:2f:57:9c:c6:a8:
c9:61:18:2f:64:f1:a4:ae:2b:5c:80:ab:cf:95:a7:
46:29:e1:98:34:00:cc:ea:19:6f:46:05:c9:ac:28:
aa:43:ab:fe:d8:af:ea:3f:81:bc:43:d5:0e:74:67:
a5:25:d7:f1:3d:01:28:67:7b:3d:9c:85:29:ac:86:
71:22:7c:67:95:53:1f:f7:98:35:47:d1:50:cc:e0:
61:89:7e:1d:bb:28:92:ff:87:13:89:60:a7:c3:ce:
6f:8f:7d:05:b9:79:d3:d4:37:5d:db:ef:d8:e7:9e:
c4:75:32:f4:b4:8c:65:c3:5d:5b:d0:60:c9:bc:60:
71:ce:9c:07:3d:c6:ad:7f:e5:c4:f3:73:53:f4:de:
49:dd:ce:a4:b7:55:9f:fb:31:17:ac:2f:d6:04:db:
d4:bf:f7:b5:83:15:71:3c:63:af:6f:76:01:a6:fc:
2a:57:3f:d4:2c:76:51:07:ed:4c:51:f3:46:cf:14:
df:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D9:03:FB:6D:0F:C4:6B:1F:32:B8:16:5F:CA:8E:1D:20:6C:7F:9E
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/wtkD-20PxGsfMrgWX8qOHSBsf54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.127.0/24
IPv6:
2a04:9f40::/29
2a06:1184:101::/48
2a06:3bc0::/29
2a07:8a40::/29
2a09:7b00::/29
2a0a:2d06:102::/47
2a0a:7d00::/29
2a0c:4880::/29
2a0c:7886:99::/48
2a0c:7886:100::/48
2a0e:15c7:99::/48
2a0f:17c0::/29
2a0f:2500::/29
2a0f:d200::/29
2a0f:db40::/29
2a11:8880::/29
2a12:ac43:1312::/48
2a12:d5c0::/29
2a12:ecc0:158::/48
2a12:ecc6:1312::/48
2a13:1380::/29
2a13:18c6:66::/48
2a13:18c6:88::/48
2a13:2cc0::/29
2a13:2d40::/29
2a13:2dc0::/29
2a13:2e40::/29
2a13:3380::/29
2a13:4900::/29
2a13:5b80::/29
2a13:7900::/29
2a13:7d80::/29
2a13:8200::/29
2a13:9080::/29
2a13:9180::/29
2a13:9580::/29
2a13:9680::/29
2a13:c900:77::/48
2a13:d100::/29
2a13:d700::/29
2a13:d900::/29
2a13:f900::/29
2a13:fb00::/29
Signature Algorithm: sha256WithRSAEncryption
36:3d:21:56:13:a3:e5:37:83:12:db:39:c1:5a:79:bd:63:80:
ec:52:fc:16:7b:11:1c:5a:ed:f1:fa:4a:dd:84:76:61:e5:cd:
f6:ee:e2:90:1b:d4:5c:14:56:92:05:15:c9:b7:dc:83:09:0e:
5b:4f:8e:25:bd:19:da:a3:c1:8c:5b:87:98:8c:06:2e:0d:26:
b8:a9:b1:cb:45:93:c7:ef:7f:52:b4:8a:46:fc:dc:5e:f7:a8:
ea:4d:4e:64:ce:4c:14:13:87:26:69:fa:e7:f1:f1:83:49:4c:
a2:a7:2b:fc:0d:df:a4:f4:c1:99:ab:98:92:db:d6:f3:f5:43:
78:50:8e:f0:9d:97:7c:44:32:0a:b2:5a:b3:65:6d:86:61:36:
78:e7:dc:59:b9:05:6b:65:5a:59:00:f9:af:6c:ed:97:21:91:
0b:c4:6c:09:dc:72:6e:56:1c:33:05:94:03:04:6e:6e:39:57:
3b:e3:da:a1:d4:44:63:c0:89:76:a1:d4:97:fa:38:dc:cf:e6:
23:65:54:86:15:21:c1:ad:76:aa:c3:3a:b2:4c:a0:ab:c0:8f:
e7:00:62:c4:a7:f6:5c:db:d0:0c:8e:d4:9c:76:70:18:05:85:
2b:b7:d8:b8:2e:bc:0e:94:76:6d:f9:e1:af:07:b1:be:7c:5c:
34:49:b5:78
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgISAZk4HlqmKuUZNyQmdf0cacqaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwOTExMDkzMjE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmQ5MDNmYjZkMGZjNDZiMWYzMmI4MTY1ZmNhOGUxZDIwNmM3ZjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLmNB4loANwle0nflEfkdJ92iRnM
pP6XqNv40XLZNiXtcXzNBi63vzEakrvuoBTKsLGaMIUIfd8k48IvXEYaAkxeueyA
L1ecxqjJYRgvZPGkritcgKvPladGKeGYNADM6hlvRgXJrCiqQ6v+2K/qP4G8Q9UO
dGelJdfxPQEoZ3s9nIUprIZxInxnlVMf95g1R9FQzOBhiX4duyiS/4cTiWCnw85v
j30FuXnT1Ddd2+/Y557EdTL0tIxlw11b0GDJvGBxzpwHPcatf+XE83NT9N5J3c6k
t1Wf+zEXrC/WBNvUv/e1gxVxPGOvb3YBpvwqVz/ULHZRB+1MUfNGzxTf7QIDAQAB
o4IDXjCCA1owHQYDVR0OBBYEFMLZA/ttD8RrHzK4Fl/Kjh0gbH+eMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvd3RrRC0yMFB4R3NmTXJnV1g4cU9IU0JzZjU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBcgYIKwYBBQUHAQcBAf8EggFhMIIBXTAMBAIAATAGAwQA
wQh/MIIBSwQCAAIwggFDAwUDKgSfQAMHACoGEYQBAQMFAyoGO8ADBQMqB4pAAwUD
Kgl7AAMHASoKLQYBAgMFAyoKfQADBQMqDEiAAwcAKgx4hgCZAwcAKgx4hgEAAwcA
Kg4VxwCZAwUDKg8XwAMFAyoPJQADBQMqD9IAAwUDKg/bQAMFAyoRiIADBwAqEqxD
ExIDBQMqEtXAAwcAKhLswAFYAwcAKhLsxhMSAwUDKhMTgAMHACoTGMYAZgMHACoT
GMYAiAMFAyoTLMADBQMqEy1AAwUDKhMtwAMFAyoTLkADBQMqEzOAAwUDKhNJAAMF
AyoTW4ADBQMqE3kAAwUDKhN9gAMFAyoTggADBQMqE5CAAwUDKhORgAMFAyoTlYAD
BQMqE5aAAwcAKhPJAAB3AwUDKhPRAAMFAyoT1wADBQMqE9kAAwUDKhP5AAMFAyoT
+wAwDQYJKoZIhvcNAQELBQADggEBADY9IVYTo+U3gxLbOcFaeb1jgOxS/BZ7ERxa
7fH6St2EdmHlzfbu4pAb1FwUVpIFFcm33IMJDltPjiW9GdqjwYxbh5iMBi4NJrip
sctFk8fvf1K0ikb83F73qOpNTmTOTBQThyZp+ufx8YNJTKKnK/wN36T0wZmrmJLb
1vP1Q3hQjvCdl3xEMgqyWrNlbYZhNnjn3Fm5BWtlWlkA+a9s7ZchkQvEbAnccm5W
HDMFlAMEbm45Vzvj2qHURGPAiXah1Jf6ONzP5iNlVIYVIcGtdqrDOrJMoKvAj+cA
YsSn9lzb0AyO1Jx2cBgFhSu32LguvA6Udm354a8Hsb58XDRJtXg=
-----END CERTIFICATE-----
Generated at Mon Sep 15 14:16:53 2025 by rpki-client