Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Wws7wvdoFe6FBjh8KmdrIqGM07E.roa
File: Wws7wvdoFe6FBjh8KmdrIqGM07E.roa (raw, json)
Hash identifier: KHqBylO667LAdCCp7mdulK98d+HfBGnKooo5m93xhUI=
Subject key identifier: 5B:0B:3B:C2:F7:68:15:EE:85:06:38:7C:2A:67:6B:22:A1:8C:D3:B1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019A0BCD1E98FE7C2E3FAB64FE9187E8C7C6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Wws7wvdoFe6FBjh8KmdrIqGM07E.roa
Signing time: Wed 22 Oct 2025 12:03:03 +0000
ROA not before: Wed 22 Oct 2025 12:03:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/23 maxlen: 24
87.121.60.0/23 maxlen: 23
87.121.60.0/24 maxlen: 24
87.121.61.0/24 maxlen: 24
93.123.74.0/23 maxlen: 24
94.156.253.0/24 maxlen: 24
185.252.160.0/23 maxlen: 24
212.87.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:cd:1e:98:fe:7c:2e:3f:ab:64:fe:91:87:e8:c7:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 22 12:03:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b0b3bc2f76815ee8506387c2a676b22a18cd3b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:78:38:c9:c6:e3:19:99:14:b0:c4:85:fc:05:
2d:45:01:39:6d:d4:cc:ec:78:8f:f3:3b:aa:38:cb:
e5:9b:32:e0:1b:97:be:8c:ab:77:6c:29:f1:cc:26:
55:4a:41:6b:b6:d7:a0:5e:ea:04:35:17:8f:6b:77:
25:ec:38:ac:72:10:c9:fc:bc:c5:17:92:80:4d:f0:
07:f0:b7:b2:7e:54:7f:63:19:3c:d7:ac:42:2a:a5:
0c:ff:d4:aa:27:bb:e6:e1:82:dd:99:aa:ba:3c:64:
b1:8a:d2:e1:7c:50:33:be:ab:e8:48:53:30:50:6f:
95:22:93:f3:ac:45:43:5f:fd:64:f1:0e:40:9d:3f:
65:8a:1e:9c:73:d4:81:bf:fb:9a:5a:f1:dc:e3:b2:
d2:67:f2:94:74:60:46:9f:90:4d:b5:a3:49:f2:2c:
05:a4:cb:50:80:bc:6f:98:73:82:7f:74:db:d3:1c:
3d:37:65:50:92:4f:ff:d5:da:02:c5:a6:9c:77:47:
61:a2:13:5f:68:58:7f:55:da:26:ef:f4:0f:7c:4c:
3e:1b:91:da:26:89:58:b3:b8:f1:8c:da:7b:d7:94:
50:d8:2c:cd:82:21:f5:16:35:00:4a:ee:ff:35:9b:
76:55:d1:6e:cd:08:1a:53:7e:2e:75:64:a0:bf:7e:
aa:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0B:3B:C2:F7:68:15:EE:85:06:38:7C:2A:67:6B:22:A1:8C:D3:B1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Wws7wvdoFe6FBjh8KmdrIqGM07E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/23
87.121.60.0/23
93.123.74.0/23
94.156.253.0/24
185.252.160.0/23
212.87.204.0/24
Signature Algorithm: sha256WithRSAEncryption
24:d7:8f:ca:25:72:4c:fb:c4:c5:1d:16:96:b7:89:c7:49:2e:
0c:c9:6b:f4:fa:49:82:7f:ce:4d:be:4d:74:86:06:72:4e:20:
d8:66:ee:96:ee:8d:ca:89:c7:5b:d4:e3:03:6b:ff:24:af:2b:
47:a4:d8:45:57:b8:b4:71:06:c0:c8:ac:67:62:aa:0e:8e:30:
cf:8b:5d:95:95:93:02:91:ba:db:61:d5:ca:e0:8f:fa:d9:3d:
3d:6c:8d:87:1b:f7:bf:97:a2:1f:9c:dd:a5:b1:c9:cc:57:dd:
e3:35:fd:bb:c9:52:db:2f:3d:74:f0:f6:c2:cf:47:ea:7f:b4:
68:45:25:58:fa:8c:24:63:58:e1:19:18:26:03:fb:db:b5:98:
9d:1a:9c:dc:17:fa:16:7b:d6:2c:98:ac:83:fe:59:e1:0c:e0:
bf:83:3a:e9:42:59:54:82:0a:7c:06:de:92:7d:fa:aa:dd:2e:
25:e7:9b:c1:c9:2b:95:76:5b:72:47:0d:8c:56:b2:50:3c:8e:
e6:66:e2:1f:1b:1f:71:98:ab:a2:e2:0b:c4:21:d2:dd:9b:cf:
3e:d5:49:7c:c3:66:64:27:7d:05:ca:49:25:37:b3:d3:95:37:
45:ca:16:dc:ec:93:18:a2:50:0a:30:8d:25:7f:7e:60:3f:75:
6d:3c:2c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 13:23:02 2025 by rpki-client