Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/WM-HBipAu21Hq7rXIP7dzts2ClQ.roa
File: WM-HBipAu21Hq7rXIP7dzts2ClQ.roa (raw, json)
Hash identifier: BPBaoNZu9uAiMVDHWsz1m0p7viSij+7z+adFxbit+04=
Subject key identifier: 58:CF:87:06:2A:40:BB:6D:47:AB:BA:D7:20:FE:DD:CE:DB:36:0A:54
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01993949B47534EA73CB18FB13D1F8A29021
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/WM-HBipAu21Hq7rXIP7dzts2ClQ.roa
Signing time: Thu 11 Sep 2025 14:59:15 +0000
ROA not before: Thu 11 Sep 2025 14:59:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 84.32.7.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.48.0/22 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.151.0/24 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.214.0/23 maxlen: 24
84.32.230.0/24 maxlen: 24
84.32.231.0/24 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/23 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
88.216.60.0/22 maxlen: 24
88.216.66.0/23 maxlen: 24
88.216.70.0/24 maxlen: 24
88.216.90.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 21:38:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:49:b4:75:34:ea:73:cb:18:fb:13:d1:f8:a2:90:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Sep 11 14:59:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58cf87062a40bb6d47abbad720feddcedb360a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:36:a5:10:93:98:de:8d:08:fd:c9:5f:52:b9:
7d:fb:38:8d:9f:f7:a1:51:aa:f8:28:fe:4d:6b:ba:
bf:50:a9:1b:82:2d:a2:0d:1f:b1:ba:54:04:0d:49:
cd:d4:ff:41:ce:3c:f0:d6:ea:dd:57:10:ab:54:36:
13:3c:b2:31:65:5e:a8:d0:4b:c3:b5:26:0e:a3:61:
a6:4f:5c:5d:c0:8a:89:3f:34:8e:66:7d:bc:0d:0c:
e9:e1:3f:0d:f0:2b:d0:52:0b:15:07:09:20:7c:ca:
08:07:9e:99:90:91:2a:b3:ba:9d:f4:9b:9f:5d:e8:
e5:ec:7e:76:ce:49:68:c6:e6:b1:5d:26:33:6d:a2:
0e:0c:6f:16:32:c7:c8:67:af:96:4a:a4:3b:e7:6c:
f7:83:08:ca:df:f9:7c:59:86:cd:ab:f8:1d:f0:be:
76:65:cf:89:32:c2:cc:c4:5f:58:ef:03:8d:69:1e:
14:8d:f2:5f:19:8a:ef:be:8e:c3:2b:9d:90:c9:fa:
65:b9:98:90:df:cc:e4:11:3b:c5:e6:0e:a9:9c:d0:
eb:69:30:98:90:90:83:e1:d4:46:01:cb:d1:d6:54:
8b:04:7a:f6:91:ad:e6:34:06:93:df:e1:5d:ee:2c:
65:19:8a:d1:b8:86:87:a9:fb:4c:70:08:69:b3:4c:
2c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CF:87:06:2A:40:BB:6D:47:AB:BA:D7:20:FE:DD:CE:DB:36:0A:54
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/WM-HBipAu21Hq7rXIP7dzts2ClQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.7.0-84.32.8.255
84.32.20.0/22
84.32.46.0-84.32.51.255
84.32.148.0/22
84.32.174.0/23
84.32.214.0/23
84.32.230.0/23
84.32.244.0/22
88.216.22.0/23
88.216.44.0/23
88.216.60.0/22
88.216.66.0/23
88.216.70.0/24
88.216.90.0/24
88.216.93.0/24
88.216.130.0/23
88.216.134.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:f1:5c:90:20:82:46:98:4b:54:51:37:c5:29:4d:63:25:6a:
7a:b7:ef:86:56:d3:55:21:20:05:0b:84:42:83:98:6e:e2:dd:
e1:f7:1c:5c:ff:28:4c:71:5f:89:3c:2e:70:fe:14:20:c9:15:
df:27:3c:e6:fb:3b:63:f0:ab:95:58:63:7d:0a:8d:e0:e7:48:
14:29:69:78:dc:84:16:d7:76:99:af:75:aa:2c:19:81:9b:d8:
1c:ec:f9:56:2d:53:77:60:2e:59:26:9c:30:c9:b7:41:06:0c:
4d:9d:25:8d:80:fb:f9:3f:9d:97:06:e0:52:73:d6:e8:8c:94:
d0:29:2c:ac:95:b4:e8:9b:83:08:36:5b:eb:b6:9f:87:c9:e9:
42:2d:cb:b8:1b:b7:a2:aa:bb:c3:d2:ae:be:f6:d3:ad:65:35:
ed:00:79:6d:94:e6:99:73:a3:1e:6a:05:9f:7a:28:0f:06:79:
a0:97:85:ee:25:45:57:af:27:63:39:11:08:66:c9:86:6f:e2:
e6:52:ae:90:da:f8:4e:99:d7:c3:f4:ed:ad:f9:ce:04:79:9b:
81:b7:be:79:d5:93:e0:c1:62:c3:7d:88:21:7c:c5:54:fc:ca:
39:e8:08:b8:67:cf:ba:e1:54:43:37:1f:65:6f:7c:dc:a9:06:
86:9c:d6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 03:38:49 2025 by rpki-client