Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/WREdXGieNWbgVLEJadO48JSSOug.roa
File: WREdXGieNWbgVLEJadO48JSSOug.roa (raw, json)
Hash identifier: aFFeFtw18cIiv+MmQIoh+4L/P45eBgOQwHmY2ydaShI=
Subject key identifier: 59:11:1D:5C:68:9E:35:66:E0:54:B1:09:69:D3:B8:F0:94:92:3A:E8
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 01980D3C3299C2E38CBD312C59FED66991BE
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/WREdXGieNWbgVLEJadO48JSSOug.roa
Signing time: Tue 15 Jul 2025 08:38:25 +0000
ROA not before: Tue 15 Jul 2025 08:38:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 37.148.128.0/22 maxlen: 24
93.88.153.0/24 maxlen: 24
93.88.154.0/23 maxlen: 24
93.88.157.0/24 maxlen: 24
95.155.133.0/24 maxlen: 24
95.155.134.0/24 maxlen: 24
95.155.159.0/24 maxlen: 24
152.89.84.0/24 maxlen: 24
152.89.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0d:3c:32:99:c2:e3:8c:bd:31:2c:59:fe:d6:69:91:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Jul 15 08:38:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59111d5c689e3566e054b10969d3b8f094923ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0d:9d:36:fe:05:42:28:03:fc:c1:4e:c3:f2:
d4:ba:eb:7c:14:0a:27:fa:67:a4:c8:fa:f6:86:d5:
03:bc:ef:4c:59:05:75:de:f5:43:0a:a8:e9:5b:8e:
3e:23:42:c3:35:91:52:7a:df:4e:83:ff:ef:6c:a2:
2a:4a:98:a9:b2:84:0d:b3:13:58:73:18:9d:77:0c:
b9:1a:86:97:1c:39:21:cc:90:55:81:ea:58:9a:cb:
8c:4c:d2:7f:aa:30:72:5b:6f:d1:6b:2a:01:29:e5:
14:2a:dd:0b:aa:c4:19:ed:ce:3a:c5:a5:c6:ad:d1:
a8:5b:89:23:00:03:92:d3:8e:2d:e0:83:ea:ec:97:
14:f0:4f:11:05:78:84:f7:f9:b0:a8:44:40:81:84:
a5:22:94:b4:08:58:d6:14:6d:a1:1b:3c:4e:b3:0d:
08:34:24:7f:fb:d7:59:78:4a:52:af:50:6d:f1:3d:
12:d8:ac:b9:8a:c0:e5:58:b4:e8:3d:4e:e1:2e:60:
6a:21:1a:48:7b:7f:45:fd:07:d7:8b:d9:d4:2e:b2:
b0:0b:0d:5a:51:06:15:7a:42:95:98:f2:34:f4:23:
4b:e6:44:ed:46:9c:58:cc:66:44:3b:cb:57:ee:d1:
57:af:4b:14:ef:2c:60:a4:78:1c:c1:e5:07:17:06:
3b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:11:1D:5C:68:9E:35:66:E0:54:B1:09:69:D3:B8:F0:94:92:3A:E8
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/WREdXGieNWbgVLEJadO48JSSOug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.128.0/22
93.88.153.0-93.88.155.255
93.88.157.0/24
95.155.133.0-95.155.134.255
95.155.159.0/24
152.89.84.0/24
152.89.87.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:3d:1b:4f:83:f7:2a:b0:e4:45:87:68:c4:5e:31:84:98:6a:
7e:58:5d:72:e7:08:b6:72:42:f9:57:25:fa:98:c0:1e:b1:7e:
bb:1c:4b:7f:b9:27:77:d6:3c:1f:b2:d9:d1:4c:af:d1:5d:00:
f8:5c:48:f1:86:25:73:c6:1b:45:d5:1f:9f:c9:68:ef:6b:d6:
f6:33:95:69:51:d1:63:7c:08:c2:be:65:49:d8:0c:d0:5c:c0:
a8:c6:5e:40:9f:79:0d:2a:f1:77:92:ce:63:b4:cb:dd:1f:96:
15:bf:3f:53:0a:d8:cd:a6:5b:0a:d6:af:9c:1a:0f:47:78:91:
3a:fe:a2:57:22:86:b1:d8:33:b2:27:08:0a:d5:b9:4c:bc:e2:
2d:89:63:3c:37:30:69:08:bd:6c:14:ed:d3:6d:9e:82:7d:50:
68:07:20:41:55:03:c4:d2:82:e2:b4:29:46:eb:25:56:bd:75:
e0:3a:0a:d4:e9:07:14:2e:f8:95:83:47:d0:ce:70:b1:87:40:
92:ad:ca:eb:7f:d4:d9:9f:e2:01:b6:fb:5a:ec:05:05:72:54:
9b:15:7b:9f:fa:63:4d:d0:22:47:97:fb:e0:19:6f:c1:71:b4:
78:47:45:0c:cf:23:f6:39:5d:fd:27:75:9a:e5:cb:05:2a:6c:
61:77:48:d3
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgISAZgNPDKZwuOMvTEsWf7WaZG+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl
OGVmOTQwHhcNMjUwNzE1MDgzODI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTExMWQ1YzY4OWUzNTY2ZTA1NGIxMDk2OWQzYjhmMDk0OTIzYWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlA2dNv4FQigD/MFOw/LUuut8FAon
+mekyPr2htUDvO9MWQV13vVDCqjpW44+I0LDNZFSet9Og//vbKIqSpipsoQNsxNY
cxiddwy5GoaXHDkhzJBVgepYmsuMTNJ/qjByW2/RayoBKeUUKt0LqsQZ7c46xaXG
rdGoW4kjAAOS044t4IPq7JcU8E8RBXiE9/mwqERAgYSlIpS0CFjWFG2hGzxOsw0I
NCR/+9dZeEpSr1Bt8T0S2Ky5isDlWLToPU7hLmBqIRpIe39F/QfXi9nULrKwCw1a
UQYVekKVmPI09CNL5kTtRpxYzGZEO8tX7tFXr0sU7yxgpHgcweUHFwY7DwIDAQAB
o4ICPTCCAjkwHQYDVR0OBBYEFFkRHVxonjVm4FSxCWnTuPCUkjroMB8GA1UdIwQY
MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut
MjEwNTdkMjI4ZDA1LzEvV1JFZFhHaWVOV2JnVkxFSmFkTzQ4SlNTT3VnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1
LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6AwQCJZSAMAwD
BABdWJkDBAJdWJgDBABdWJ0wDAMEAF+bhQMEAF+bhgMEAF+bnwMEAJhZVAMEAJhZ
VzANBgkqhkiG9w0BAQsFAAOCAQEAej0bT4P3KrDkRYdoxF4xhJhqflhdcucItnJC
+Vcl+pjAHrF+uxxLf7knd9Y8H7LZ0Uyv0V0A+FxI8YYlc8YbRdUfn8lo72vW9jOV
aVHRY3wIwr5lSdgM0FzAqMZeQJ95DSrxd5LOY7TL3R+WFb8/UwrYzaZbCtavnBoP
R3iROv6iVyKGsdgzsicICtW5TLziLYljPDcwaQi9bBTt022egn1QaAcgQVUDxNKC
4rQpRuslVr114DoK1OkHFC74lYNH0M5wsYdAkq3K63/U2Z/iAbb7WuwFBXJUmxV7
n/pjTdAiR5f74BlvwXG0eEdFDM8j9jld/Sd1muXLBSpsYXdI0w==
-----END CERTIFICATE-----
Generated at Mon Jul 21 02:31:40 2025 by rpki-client