Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/WLAdp4BUO5ff9F0lr6Jk8VSWpWY.roa
File: WLAdp4BUO5ff9F0lr6Jk8VSWpWY.roa (raw, json)
Hash identifier: OQTSFNF21T7EtLt4TGNG5Xy1DNbLGA46p0s3D8MDuzk=
Subject key identifier: 58:B0:1D:A7:80:54:3B:97:DF:F4:5D:25:AF:A2:64:F1:54:96:A5:66
Certificate issuer: /CN=73e373fee780eeab2a90422d0ad514e084a8d611
Certificate serial: 019A1187CA7460E043945C76979E4A4F086A
Authority key identifier: 73:E3:73:FE:E7:80:EE:AB:2A:90:42:2D:0A:D5:14:E0:84:A8:D6:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/WLAdp4BUO5ff9F0lr6Jk8VSWpWY.roa
Signing time: Thu 23 Oct 2025 14:45:03 +0000
ROA not before: Thu 23 Oct 2025 14:45:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8468
IP address blocks: 88.83.96.0/24 maxlen: 24
88.83.104.0/24 maxlen: 24
88.83.106.0/24 maxlen: 24
88.83.109.0/24 maxlen: 24
88.83.111.0/24 maxlen: 24
88.83.116.0/24 maxlen: 24
88.83.118.0/23 maxlen: 24
88.83.124.0/23 maxlen: 24
88.83.126.0/24 maxlen: 24
195.80.2.0/24 maxlen: 24
195.80.14.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.mft
rsync://rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:11:87:ca:74:60:e0:43:94:5c:76:97:9e:4a:4f:08:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73e373fee780eeab2a90422d0ad514e084a8d611
Validity
Not Before: Oct 23 14:45:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58b01da780543b97dff45d25afa264f15496a566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:35:c9:ac:75:75:8f:73:25:2e:a7:55:4b:69:
13:4f:f6:57:1b:3b:37:30:a3:3d:b0:6a:c8:38:b6:
1e:04:12:8b:ec:28:e8:9b:8d:b7:57:49:84:55:76:
63:d0:07:a8:81:6e:2a:2a:b4:35:ca:ef:54:22:3e:
ef:81:0b:45:2c:3c:35:00:74:84:4b:bb:ab:bd:00:
e7:e6:1f:cb:72:d5:47:ee:65:43:b1:b3:12:06:32:
0b:19:29:8c:b9:ac:41:eb:f5:4c:fe:d7:f6:26:ef:
e3:c9:69:c7:35:fb:fc:5d:9b:05:fb:76:a7:c4:9a:
f4:e7:06:3d:e4:9c:c2:87:c2:71:32:a4:01:5a:35:
75:e1:69:47:24:c3:76:b4:a9:27:79:25:b8:52:f6:
a5:ba:4a:b3:70:38:f6:49:5d:db:32:c2:df:14:4c:
ae:ec:5e:93:f0:74:75:a8:c0:aa:81:5f:f8:4d:b6:
cc:07:4b:26:0d:04:0d:21:ae:7b:e6:3f:fc:2b:47:
be:3a:42:eb:28:99:37:06:da:97:85:5e:5b:d4:b1:
2f:92:58:66:cf:cd:86:d0:8f:9b:60:ef:11:41:22:
37:85:48:d3:37:3c:68:0d:1e:25:af:e1:54:50:4f:
80:2d:5c:b2:aa:3f:9e:43:1d:e0:c2:e6:22:64:9f:
3d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B0:1D:A7:80:54:3B:97:DF:F4:5D:25:AF:A2:64:F1:54:96:A5:66
X509v3 Authority Key Identifier:
keyid:73:E3:73:FE:E7:80:EE:AB:2A:90:42:2D:0A:D5:14:E0:84:A8:D6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/WLAdp4BUO5ff9F0lr6Jk8VSWpWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.83.96.0/24
88.83.104.0/24
88.83.106.0/24
88.83.109.0/24
88.83.111.0/24
88.83.116.0/24
88.83.118.0/23
88.83.124.0-88.83.126.255
195.80.2.0/24
195.80.14.0/23
Signature Algorithm: sha256WithRSAEncryption
71:67:1b:e5:0f:52:8f:f0:a8:de:fb:6c:65:3f:98:d2:66:fd:
97:c1:0e:05:e9:24:21:3e:b3:6a:8b:ed:a0:4d:91:91:7c:de:
f1:f2:c8:ac:97:8b:bb:0a:f4:a9:02:61:5d:da:5f:7d:1c:46:
4c:96:3b:e3:61:96:64:28:8b:a8:61:cd:c8:4e:39:81:94:e9:
9a:10:fc:de:f0:e0:cb:d0:33:88:c7:9b:40:ce:30:9a:d4:b7:
fe:fd:81:b2:56:bd:7d:b1:2c:6c:f6:a5:31:dd:eb:b2:8b:4f:
f1:cf:bc:6b:39:d4:8b:cf:d8:b6:75:7c:97:b5:6b:8d:d7:9b:
65:20:11:dc:38:72:73:7d:49:b8:89:7e:16:45:fb:ae:27:da:
47:0b:5a:9e:d5:c5:fd:71:91:2f:3e:a8:7f:6f:a6:40:e6:9c:
b7:7a:a5:4d:ec:18:64:c2:f2:e5:e1:ad:75:07:c7:14:62:2c:
45:87:38:fa:9c:9e:c5:83:0f:88:67:eb:0b:55:70:21:0b:9b:
10:14:cc:e7:ad:4f:21:8b:d1:c8:18:6e:59:e0:4b:a5:45:c9:
81:2a:dc:85:36:0a:b8:e6:09:b2:45:ca:23:0a:e8:f3:4a:f6:
94:48:42:42:f7:d4:ee:f9:70:1a:86:99:a8:38:3a:74:07:70:
fe:ad:e3:d9
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgISAZoRh8p0YOBDlFx2l55KTwhqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZTM3M2ZlZTc4MGVlYWIyYTkwNDIyZDBhZDUxNGUwODRh
OGQ2MTEwHhcNMjUxMDIzMTQ0NTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGIwMWRhNzgwNTQzYjk3ZGZmNDVkMjVhZmEyNjRmMTU0OTZhNTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTXJrHV1j3MlLqdVS2kTT/ZXGzs3
MKM9sGrIOLYeBBKL7Cjom423V0mEVXZj0AeogW4qKrQ1yu9UIj7vgQtFLDw1AHSE
S7urvQDn5h/LctVH7mVDsbMSBjILGSmMuaxB6/VM/tf2Ju/jyWnHNfv8XZsF+3an
xJr05wY95JzCh8JxMqQBWjV14WlHJMN2tKkneSW4UvalukqzcDj2SV3bMsLfFEyu
7F6T8HR1qMCqgV/4TbbMB0smDQQNIa575j/8K0e+OkLrKJk3BtqXhV5b1LEvklhm
z82G0I+bYO8RQSI3hUjTNzxoDR4lr+FUUE+ALVyyqj+eQx3gwuYiZJ89ewIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFFiwHaeAVDuX3/RdJa+iZPFUlqVmMB8GA1UdIwQY
MBaAFHPjc/7ngO6rKpBCLQrVFOCEqNYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYy1Oel91ZUE3cXNxa0VJdEN0VVU0SVNvMWhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9lMGU0MzMtOWIzNi00N2E2LTkzYTIt
MDQxZmQ0YzZmZmQ0LzEvV0xBZHA0QlVPNWZmOUYwbHI2Sms4VlNXcFdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9lMGU0MzMtOWIzNi00N2E2LTkzYTItMDQxZmQ0YzZmZmQ0
LzEvYy1Oel91ZUE3cXNxa0VJdEN0VVU0SVNvMWhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQAWFNgAwQA
WFNoAwQAWFNqAwQAWFNtAwQAWFNvAwQAWFN0AwQBWFN2MAwDBAJYU3wDBABYU34D
BADDUAIDBAHDUA4wDQYJKoZIhvcNAQELBQADggEBAHFnG+UPUo/wqN77bGU/mNJm
/ZfBDgXpJCE+s2qL7aBNkZF83vHyyKyXi7sK9KkCYV3aX30cRkyWO+NhlmQoi6hh
zchOOYGU6ZoQ/N7w4MvQM4jHm0DOMJrUt/79gbJWvX2xLGz2pTHd67KLT/HPvGs5
1IvP2LZ1fJe1a43Xm2UgEdw4cnN9SbiJfhZF+64n2kcLWp7Vxf1xkS8+qH9vpkDm
nLd6pU3sGGTC8uXhrXUHxxRiLEWHOPqcnsWDD4hn6wtVcCELmxAUzOetTyGL0cgY
blngS6VFyYEq3IU2CrjmCbJFyiMK6PNK9pRIQkL31O75cBqGmag4OnQHcP6t49k=
-----END CERTIFICATE-----
Generated at Mon Oct 27 22:01:51 2025 by rpki-client