Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/Wzq1y0doG8WfM1zNpgf4G6VhY_I.roa
File: Wzq1y0doG8WfM1zNpgf4G6VhY_I.roa (raw, json)
Hash identifier: ANi9PNCi24CfK53dgbxV1jDB/S5TR8D7gFN/whY98FI=
Subject key identifier: 5B:3A:B5:CB:47:68:1B:C5:9F:33:5C:CD:A6:07:F8:1B:A5:61:63:F2
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 0199E6DC68B290A1E5BE5F39662D7874F603
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/Wzq1y0doG8WfM1zNpgf4G6VhY_I.roa
Signing time: Wed 15 Oct 2025 07:53:48 +0000
ROA not before: Wed 15 Oct 2025 07:53:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 195.216.176.0/23 maxlen: 23
213.182.196.0/24 maxlen: 24
213.182.197.0/24 maxlen: 24
213.182.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e6:dc:68:b2:90:a1:e5:be:5f:39:66:2d:78:74:f6:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Oct 15 07:53:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b3ab5cb47681bc59f335ccda607f81ba56163f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3d:92:03:8f:f4:1e:53:f0:3f:10:58:dd:f2:
79:9d:14:18:27:bc:98:26:c4:0a:ea:9d:90:fb:6d:
bf:03:2a:25:1d:10:ee:00:6f:05:08:52:1d:a3:cd:
8f:5b:92:ab:ca:4c:eb:74:af:2d:e1:a0:25:27:f6:
33:52:75:8e:44:66:0f:fd:51:d5:c4:55:50:f3:5f:
6e:35:ba:39:df:d4:64:68:37:03:f5:68:16:4f:a0:
82:52:d5:84:18:4e:74:d3:73:fe:d3:00:7b:c1:84:
33:ca:13:71:0f:6a:48:51:5a:d8:43:16:7f:1d:d3:
73:a5:18:85:c3:8c:35:ab:52:3c:cf:3e:64:6b:ee:
60:f8:e6:68:ed:f1:ca:80:14:40:96:a7:c9:88:3b:
7a:cf:b3:ae:9c:c7:8a:6c:b3:5d:9a:be:80:18:b2:
a8:bf:e4:3d:08:0b:9e:a5:74:f3:da:5b:c3:f5:46:
b6:6b:a7:9e:86:f2:c6:81:ae:2c:e9:58:e0:fa:fe:
ff:96:5c:94:af:0f:8f:84:8c:9a:35:ff:06:2f:4e:
91:f1:9b:d5:8e:9e:a0:e9:db:b7:c7:c5:9b:27:a2:
e2:04:bc:26:80:e5:36:2e:30:6a:9a:41:70:9b:13:
b6:5f:c4:ef:f1:c9:3e:e2:0b:20:37:21:ba:b3:e8:
22:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3A:B5:CB:47:68:1B:C5:9F:33:5C:CD:A6:07:F8:1B:A5:61:63:F2
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/Wzq1y0doG8WfM1zNpgf4G6VhY_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.176.0/23
213.182.196.0/23
213.182.218.0/24
Signature Algorithm: sha256WithRSAEncryption
47:fa:22:34:8f:d4:fd:91:b6:bd:18:22:98:ae:ea:e9:47:0f:
f0:58:79:fa:d6:61:09:21:21:f1:c6:99:b0:19:d5:89:48:92:
74:9f:5e:c3:9a:6d:f7:d4:83:9a:3d:c1:76:8e:f2:ec:d0:13:
13:c0:a5:9f:86:4b:fe:67:1f:31:53:63:9c:5c:a7:95:c2:54:
4d:c6:60:5a:5d:8d:d3:76:e2:c6:4b:ba:e3:4f:d3:5f:8d:db:
2d:60:1a:fb:85:69:98:de:a4:c1:3f:06:51:d6:fc:13:55:19:
68:7c:0e:80:d8:c9:b6:d9:fc:57:b4:57:c8:ff:11:70:79:86:
f0:07:1d:c7:c0:47:aa:17:ee:27:0d:b5:f0:6b:27:96:b4:9f:
12:37:48:84:dd:e3:80:45:67:e5:6b:24:b1:aa:34:dd:77:f5:
3c:7a:7b:58:4f:1b:1c:a3:d9:4f:91:df:04:e0:9b:eb:34:40:
35:3f:1a:9a:bb:45:b3:af:7a:99:0c:46:dd:79:3c:b7:0a:5e:
8f:5a:73:7a:1b:f3:cf:44:9c:63:9a:af:92:e6:69:8e:bb:b1:
03:ab:74:00:28:d5:ba:aa:cc:48:cd:03:3f:5a:0a:4f:06:5e:
06:33:64:0d:c2:66:c2:b3:62:95:92:e3:94:a9:e4:15:90:76:
b3:73:9e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:19:49 2025 by rpki-client