Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/WVXExIOsUuzD4I3TzgSlOau0QaQ.roa
File: WVXExIOsUuzD4I3TzgSlOau0QaQ.roa (raw, json)
Hash identifier: pTI7uh69ubYgLlvdqCFzeXWGgfLVV4/U16+Sy+TrVp4=
Subject key identifier: 59:55:C4:C4:83:AC:52:EC:C3:E0:8D:D3:CE:04:A5:39:AB:B4:41:A4
Certificate issuer: /CN=50980fb6ade858f2652e736993126c85759f06d9
Certificate serial: 0199164B668D16007EC21791890CEB71D0A5
Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/WVXExIOsUuzD4I3TzgSlOau0QaQ.roa
Signing time: Thu 04 Sep 2025 19:54:24 +0000
ROA not before: Thu 04 Sep 2025 19:54:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213541
IP address blocks: 46.148.209.0/24 maxlen: 24
46.148.210.0/24 maxlen: 24
46.148.211.0/24 maxlen: 24
91.204.181.0/24 maxlen: 24
195.234.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:4b:66:8d:16:00:7e:c2:17:91:89:0c:eb:71:d0:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9
Validity
Not Before: Sep 4 19:54:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5955c4c483ac52ecc3e08dd3ce04a539abb441a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:33:c8:c4:12:1d:13:87:e7:1b:bd:6f:ba:30:
c3:f7:d4:b5:04:a5:21:c5:f8:02:0b:fc:59:1f:5d:
36:e8:0f:38:f6:51:a1:91:d0:7a:a7:15:62:92:7b:
1a:65:99:d5:fc:d2:ef:99:b2:39:22:ee:3d:ed:6a:
6b:0b:a5:86:2f:31:2b:b7:e3:36:82:13:aa:e7:2e:
5a:a2:e9:fb:ff:9f:2e:16:e7:9f:65:36:ed:ed:0f:
7f:98:b4:a2:66:f4:4e:fc:d5:ce:6e:45:ae:d9:15:
0f:ae:48:bb:78:d0:26:0a:63:d1:23:32:d9:0b:18:
fb:63:a7:0e:53:3d:93:58:00:a4:74:57:1a:a2:a5:
07:c5:44:ea:3b:6d:9f:ed:c3:76:ce:38:3b:12:1b:
8e:d3:74:12:5f:cd:51:77:b8:46:34:2f:8c:c1:2d:
f6:0b:bb:66:da:68:71:9a:b5:e5:4a:f3:3a:5e:66:
99:1b:19:a7:14:bf:a9:9c:4d:97:ee:8b:75:39:6e:
a9:ea:e7:f7:b7:d4:86:f2:95:84:fc:6d:65:66:b2:
f0:e2:c7:6e:91:57:db:f6:aa:db:42:ce:19:c9:be:
bf:c4:16:01:f0:63:56:bd:10:3b:50:48:a7:4b:fe:
ec:f9:52:23:94:85:53:35:e4:86:d0:39:0e:c3:37:
29:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:55:C4:C4:83:AC:52:EC:C3:E0:8D:D3:CE:04:A5:39:AB:B4:41:A4
X509v3 Authority Key Identifier:
keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/WVXExIOsUuzD4I3TzgSlOau0QaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.209.0-46.148.211.255
91.204.181.0/24
195.234.90.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:39:5f:b7:07:f9:bf:7a:a5:31:df:fb:28:86:1e:d7:e2:dc:
c4:db:0c:16:aa:86:94:a0:44:e2:c0:a2:f2:71:95:3c:66:38:
a7:4f:43:e9:15:3c:25:fd:b0:d2:56:f2:28:30:c9:aa:6e:ea:
f3:b6:6b:46:6f:03:e6:74:65:a2:37:b3:8f:99:ac:74:d8:a2:
73:08:2c:80:ee:ad:b8:04:e4:46:19:d2:ed:7c:db:7f:28:67:
a1:e4:3d:97:27:f8:c8:98:f0:f0:9e:35:5f:e9:9c:32:f7:1f:
1c:64:e5:89:a3:40:8f:84:25:9e:3d:11:d1:18:57:23:20:73:
17:cd:17:46:f8:1e:2e:79:44:ca:03:b0:ea:84:44:1e:5d:99:
d0:d7:02:2a:e4:61:0b:f3:4c:1f:84:86:35:bb:e9:d9:3c:b3:
f3:38:42:53:1d:0f:f8:d1:75:0c:53:b2:9f:43:76:46:5f:ff:
cb:41:21:6a:93:15:fe:5a:94:12:86:89:f4:3b:d5:a1:2e:09:
47:d7:ed:43:ac:d5:aa:1c:3f:90:2e:f7:d5:ef:3e:4f:df:b2:
86:c0:4a:3a:d4:93:43:d5:36:f7:43:b5:0c:1d:5c:e3:ab:7e:
ad:03:f9:c2:74:1d:22:33:49:78:9c:a7:28:ef:1c:07:9c:be:
b6:77:16:bb
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZkWS2aNFgB+wheRiQzrcdClMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwOTgwZmI2YWRlODU4ZjI2NTJlNzM2OTkzMTI2Yzg1NzU5
ZjA2ZDkwHhcNMjUwOTA0MTk1NDI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTU1YzRjNDgzYWM1MmVjYzNlMDhkZDNjZTA0YTUzOWFiYjQ0MWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojPIxBIdE4fnG71vujDD99S1BKUh
xfgCC/xZH1026A849lGhkdB6pxViknsaZZnV/NLvmbI5Iu497WprC6WGLzErt+M2
ghOq5y5aoun7/58uFuefZTbt7Q9/mLSiZvRO/NXObkWu2RUPrki7eNAmCmPRIzLZ
Cxj7Y6cOUz2TWACkdFcaoqUHxUTqO22f7cN2zjg7EhuO03QSX81Rd7hGNC+MwS32
C7tm2mhxmrXlSvM6XmaZGxmnFL+pnE2X7ot1OW6p6uf3t9SG8pWE/G1lZrLw4sdu
kVfb9qrbQs4Zyb6/xBYB8GNWvRA7UEinS/7s+VIjlIVTNeSG0DkOwzcpDQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFFlVxMSDrFLsw+CN084EpTmrtEGkMB8GA1UdIwQY
MBaAFFCYD7at6FjyZS5zaZMSbIV1nwbZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUpnUHRxM29XUEpsTG5OcGt4SnNoWFdmQnRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEt
Y2NhNzlhNjk4MjBhLzEvV1ZYRXhJT3NVdXpENEkzVHpnU2xPYXUwUWFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEtY2NhNzlhNjk4MjBh
LzEvVUpnUHRxM29XUEpsTG5OcGt4SnNoWFdmQnRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAAulNED
BAIulNADBABbzLUDBADD6lowDQYJKoZIhvcNAQELBQADggEBAF05X7cH+b96pTHf
+yiGHtfi3MTbDBaqhpSgROLAovJxlTxmOKdPQ+kVPCX9sNJW8igwyapu6vO2a0Zv
A+Z0ZaI3s4+ZrHTYonMILIDurbgE5EYZ0u18238oZ6HkPZcn+MiY8PCeNV/pnDL3
Hxxk5YmjQI+EJZ49EdEYVyMgcxfNF0b4Hi55RMoDsOqERB5dmdDXAirkYQvzTB+E
hjW76dk8s/M4QlMdD/jRdQxTsp9DdkZf/8tBIWqTFf5alBKGifQ71aEuCUfX7UOs
1aocP5Au99XvPk/fsobASjrUk0PVNvdDtQwdXOOrfq0D+cJ0HSIzSXicpyjvHAec
vrZ3Frs=
-----END CERTIFICATE-----
Generated at Sat Sep 6 17:19:10 2025 by rpki-client