Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/WnJdU5EuKJJiQLi2ThTTX1z2ME4.roa
File: WnJdU5EuKJJiQLi2ThTTX1z2ME4.roa (raw, json)
Hash identifier: o18q2/VBD3/VXv1QOelJTDXH7ACCLyKb+ekuDcYd7kQ=
Subject key identifier: 5A:72:5D:53:91:2E:28:92:62:40:B8:B6:4E:14:D3:5F:5C:F6:30:4E
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 0198E290E8CF60B171A7380D5AB31313EB38
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/WnJdU5EuKJJiQLi2ThTTX1z2ME4.roa
Signing time: Mon 25 Aug 2025 18:50:04 +0000
ROA not before: Mon 25 Aug 2025 18:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209372
IP address blocks: 5.104.72.0/24 maxlen: 24
5.104.74.0/24 maxlen: 24
31.40.194.0/24 maxlen: 24
45.130.184.0/24 maxlen: 24
45.130.185.0/24 maxlen: 24
45.130.186.0/24 maxlen: 24
45.130.187.0/24 maxlen: 24
45.140.4.0/24 maxlen: 24
45.140.6.0/24 maxlen: 24
45.140.7.0/24 maxlen: 24
77.83.20.0/22 maxlen: 24
77.83.48.0/24 maxlen: 24
77.83.49.0/24 maxlen: 24
84.252.64.0/22 maxlen: 24
86.62.53.0/24 maxlen: 24
86.62.54.0/24 maxlen: 24
88.218.80.0/24 maxlen: 24
88.218.239.0/24 maxlen: 24
91.132.126.0/24 maxlen: 24
91.132.127.0/24 maxlen: 24
91.245.239.0/24 maxlen: 24
93.177.92.0/24 maxlen: 24
93.177.93.0/24 maxlen: 24
95.214.83.0/24 maxlen: 24
95.214.92.0/24 maxlen: 24
95.214.93.0/24 maxlen: 24
95.214.95.0/24 maxlen: 24
95.214.244.0/22 maxlen: 24
176.118.188.0/24 maxlen: 24
176.118.189.0/24 maxlen: 24
176.118.191.0/24 maxlen: 24
185.155.100.0/24 maxlen: 24
185.177.76.0/24 maxlen: 24
185.177.77.0/24 maxlen: 24
193.160.68.0/24 maxlen: 24
193.160.72.0/24 maxlen: 24
193.160.74.0/24 maxlen: 24
193.160.75.0/24 maxlen: 24
194.28.157.0/24 maxlen: 24
194.53.188.0/22 maxlen: 24
194.124.41.0/24 maxlen: 24
212.69.135.0/24 maxlen: 24
213.109.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e2:90:e8:cf:60:b1:71:a7:38:0d:5a:b3:13:13:eb:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Aug 25 18:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a725d53912e28926240b8b64e14d35f5cf6304e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d2:ca:31:2e:f1:6b:d2:e2:86:92:4e:10:12:
64:0d:48:a4:38:4c:d4:65:79:9f:81:a7:78:f7:c7:
64:ef:a1:dc:c0:2a:fa:83:e9:69:8f:39:56:43:3d:
40:87:08:4e:d1:ff:d8:8d:46:42:aa:ac:6c:9a:2e:
51:f0:55:bb:c9:86:16:90:32:33:03:2e:13:98:af:
2c:03:5a:75:4a:e6:af:85:35:d0:c6:ff:b0:7e:5a:
92:b2:75:15:13:80:2a:b7:56:19:f7:be:6e:77:35:
ee:8c:60:b7:91:89:4d:64:8f:5c:23:dc:07:2a:59:
3d:37:39:f9:83:45:36:e5:4a:68:f6:c4:e3:95:7d:
78:35:03:11:20:5c:93:36:dc:5a:11:d7:f7:78:34:
8e:a7:21:85:78:40:33:d2:2a:81:a0:01:9c:5f:07:
3c:55:02:54:87:1f:c4:5e:cf:68:d0:3e:f1:df:28:
e7:2e:2e:25:13:46:2c:d3:eb:2c:e3:64:5c:fc:80:
2d:d9:b7:c4:53:fc:c4:1a:e7:fc:3a:4e:90:a2:c9:
95:8d:1f:80:e5:77:ea:90:0e:06:e0:7b:ce:d7:af:
ee:67:53:4c:de:bf:c1:02:68:77:10:13:39:db:d6:
5a:49:68:8c:24:00:31:7d:c5:63:0c:f6:d2:4a:ae:
b2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:72:5D:53:91:2E:28:92:62:40:B8:B6:4E:14:D3:5F:5C:F6:30:4E
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/WnJdU5EuKJJiQLi2ThTTX1z2ME4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.72.0/24
5.104.74.0/24
31.40.194.0/24
45.130.184.0/22
45.140.4.0/24
45.140.6.0/23
77.83.20.0/22
77.83.48.0/23
84.252.64.0/22
86.62.53.0-86.62.54.255
88.218.80.0/24
88.218.239.0/24
91.132.126.0/23
91.245.239.0/24
93.177.92.0/23
95.214.83.0/24
95.214.92.0/23
95.214.95.0/24
95.214.244.0/22
176.118.188.0/23
176.118.191.0/24
185.155.100.0/24
185.177.76.0/23
193.160.68.0/24
193.160.72.0/24
193.160.74.0/23
194.28.157.0/24
194.53.188.0/22
194.124.41.0/24
212.69.135.0/24
213.109.188.0/22
Signature Algorithm: sha256WithRSAEncryption
06:78:aa:b4:78:a1:f4:a8:c5:4f:ca:22:2a:3f:32:7a:ec:4f:
21:4f:52:88:d1:a5:cd:0e:55:8b:f3:03:31:44:26:5a:84:bf:
74:fd:b3:5c:82:b6:98:40:62:a8:fc:e0:7f:e5:ec:62:57:33:
32:77:eb:7e:4b:d6:6e:1b:a4:9c:f6:f6:a6:f9:af:6d:db:82:
90:d5:84:7e:ab:8b:cd:27:25:ee:bd:b2:6f:ec:3e:f2:47:62:
50:1f:3e:f5:fd:7a:74:15:b2:60:37:78:3d:70:49:df:c0:ad:
59:c1:76:ab:18:30:70:92:4f:b8:70:80:c9:91:a4:26:79:3c:
53:6b:41:a0:48:0d:59:5b:97:55:c5:63:19:07:69:62:93:b4:
3b:e4:e1:28:1a:6b:9d:48:62:5f:b9:46:ef:0f:43:22:38:60:
f1:38:0d:e2:77:22:b3:0d:f0:3b:33:98:21:61:0c:5c:f7:f9:
47:11:68:f9:8e:aa:f5:5d:a8:76:83:76:59:75:29:ee:9d:0b:
f1:be:86:d7:7d:2f:e2:19:00:0f:28:2c:2a:cb:53:85:a9:23:
68:3e:f6:f7:f5:db:c9:0e:e0:1f:e3:1d:b3:80:b6:43:20:11:
85:55:2a:a6:13:d8:81:1c:13:ff:7b:21:d0:64:61:5b:ab:da:
2c:b9:c4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:39 2025 by rpki-client