Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/c_WaIBnmwgOMansalo80haBbckc.roa
File: c_WaIBnmwgOMansalo80haBbckc.roa (raw, json)
Hash identifier: BcLK6S38UaAJrjpQaQWnvBPLWGy7y46urwtCTteCVfY=
Subject key identifier: 73:F5:9A:20:19:E6:C2:03:8C:6A:7B:1A:96:8F:34:85:A0:5B:72:47
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019A67D4E8F53C5D381F203D38A700A64A22
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/c_WaIBnmwgOMansalo80haBbckc.roa
Signing time: Sun 09 Nov 2025 08:56:37 +0000
ROA not before: Sun 09 Nov 2025 08:56:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 45.8.21.0/24 maxlen: 24
185.199.54.0/24 maxlen: 24
194.76.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Nov 2025 15:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:67:d4:e8:f5:3c:5d:38:1f:20:3d:38:a7:00:a6:4a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Nov 9 08:56:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73f59a2019e6c2038c6a7b1a968f3485a05b7247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:98:12:61:6d:44:a2:e5:4b:89:46:ca:eb:45:
3a:63:a1:5c:e6:6a:2d:1f:1f:9b:22:1b:cd:34:06:
b6:93:54:38:78:45:a6:63:a6:70:a5:26:3f:b1:f8:
ec:58:82:2b:e2:05:b7:d8:6b:8c:6a:ee:83:2e:1f:
6f:8a:2a:8c:79:4e:f9:08:46:14:7a:be:ef:a3:f0:
d8:3f:40:53:cc:ad:ce:88:95:8c:76:4e:cf:c3:25:
ba:fd:b9:58:2b:f3:05:63:f7:31:7c:b7:ec:f6:2c:
8d:f1:de:d5:cb:61:9b:cb:43:2c:8d:0a:14:71:79:
fb:19:5c:69:9d:91:43:ce:ee:82:ef:4c:bc:73:4c:
46:9e:06:c9:39:c2:39:71:35:06:71:38:15:d8:72:
ab:fd:84:85:76:43:e2:da:0d:da:49:cd:82:15:cd:
81:43:21:b6:6c:fd:a5:b5:fe:21:cb:46:9b:3f:d5:
98:eb:90:45:2a:af:6d:10:0b:24:36:c6:87:99:82:
21:45:b6:c6:e8:cc:a1:5e:66:c5:e9:01:ab:21:c6:
43:ff:51:2b:d8:5b:25:1b:df:07:14:1f:9f:28:49:
dc:2e:7c:51:a8:69:0a:3d:01:99:07:f9:65:aa:5b:
ac:27:b7:f1:30:05:dd:e4:72:5d:78:d3:76:53:5a:
b7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F5:9A:20:19:E6:C2:03:8C:6A:7B:1A:96:8F:34:85:A0:5B:72:47
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/c_WaIBnmwgOMansalo80haBbckc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
185.199.54.0/24
194.76.169.0/24
Signature Algorithm: sha256WithRSAEncryption
56:ff:96:f4:7f:c8:c5:49:33:16:50:d1:6a:62:0c:96:c5:b6:
95:50:32:2c:c7:a1:75:86:ea:b2:ec:2a:e1:dd:85:49:00:54:
ef:c8:c3:b8:a8:a4:af:05:d3:05:07:39:4a:b5:1f:18:5a:79:
af:53:65:46:6f:92:86:ef:71:6b:13:fc:89:b6:ba:26:4f:04:
ac:ec:36:35:e5:3a:05:63:43:fd:d1:fa:60:85:3f:34:ba:3d:
48:ad:7c:b6:d5:ce:78:43:10:bc:d2:85:84:bc:0d:07:7d:75:
11:22:f2:a4:8e:8b:bb:5f:45:d8:25:52:14:eb:ef:d1:a5:a4:
d3:21:aa:6b:ae:fd:0e:80:94:5b:3b:c7:50:30:b2:9a:92:1a:
b7:5a:c9:1a:c9:7c:e7:7e:e1:1f:4d:74:a7:78:4c:29:01:6f:
d1:78:3c:90:77:86:dc:9a:e6:b6:2d:85:fb:50:53:f5:4d:f9:
76:39:83:49:7a:f9:53:ba:4b:60:c4:95:f0:f3:13:9d:5d:34:
18:eb:c0:d7:93:48:79:90:c8:27:72:f3:5c:0e:e2:a8:2a:6e:
69:2f:50:af:f6:44:87:27:90:95:19:33:35:c6:cc:11:0f:3b:
a6:d6:9a:e1:72:73:09:7a:7a:48:4e:6a:e9:ed:73:c7:68:53:
22:c2:58:ed
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZpn1Oj1PF04HyA9OKcApkoiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjUxMTA5MDg1NjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2Y1OWEyMDE5ZTZjMjAzOGM2YTdiMWE5NjhmMzQ4NWEwNWI3MjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55gSYW1EouVLiUbK60U6Y6Fc5mot
Hx+bIhvNNAa2k1Q4eEWmY6ZwpSY/sfjsWIIr4gW32GuMau6DLh9viiqMeU75CEYU
er7vo/DYP0BTzK3OiJWMdk7PwyW6/blYK/MFY/cxfLfs9iyN8d7Vy2Gby0MsjQoU
cXn7GVxpnZFDzu6C70y8c0xGngbJOcI5cTUGcTgV2HKr/YSFdkPi2g3aSc2CFc2B
QyG2bP2ltf4hy0abP9WY65BFKq9tEAskNsaHmYIhRbbG6MyhXmbF6QGrIcZD/1Er
2FslG98HFB+fKEncLnxRqGkKPQGZB/llqlusJ7fxMAXd5HJdeNN2U1q3wwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHP1miAZ5sIDjGp7GpaPNIWgW3JHMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvY19XYUlCbm13Z09NYW5zYWxvODBoYUJiY2tjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALQgVAwQA
ucc2AwQAwkypMA0GCSqGSIb3DQEBCwUAA4IBAQBW/5b0f8jFSTMWUNFqYgyWxbaV
UDIsx6F1huqy7Crh3YVJAFTvyMO4qKSvBdMFBzlKtR8YWnmvU2VGb5KG73FrE/yJ
tromTwSs7DY15ToFY0P90fpghT80uj1IrXy21c54QxC80oWEvA0HfXURIvKkjou7
X0XYJVIU6+/RpaTTIaprrv0OgJRbO8dQMLKakhq3WskayXznfuEfTXSneEwpAW/R
eDyQd4bcmua2LYX7UFP1Tfl2OYNJevlTuktgxJXw8xOdXTQY68DXk0h5kMgncvNc
DuKoKm5pL1Cv9kSHJ5CVGTM1xswRDzum1prhcnMJenpITmrp7XPHaFMiwljt
-----END CERTIFICATE-----
Generated at Sat Nov 15 23:02:00 2025 by rpki-client