Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/WSAATKY7-7A7ZVEM3s66FwiZjGE.roa
File: WSAATKY7-7A7ZVEM3s66FwiZjGE.roa (raw, json)
Hash identifier: c1lGRALfc8/M15erBxzGa+hQ0ul0F00CtdZficzkgCA=
Subject key identifier: 59:20:00:4C:A6:3B:FB:B0:3B:65:51:0C:DE:CE:BA:17:08:99:8C:61
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01995B9946B73465A9D410E1838DD73D37C5
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/WSAATKY7-7A7ZVEM3s66FwiZjGE.roa
Signing time: Thu 18 Sep 2025 06:53:15 +0000
ROA not before: Thu 18 Sep 2025 06:53:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 77.76.4.0/22 maxlen: 22
78.128.10.0/23 maxlen: 23
78.128.12.0/22 maxlen: 22
78.128.16.0/20 maxlen: 20
78.128.36.0/22 maxlen: 22
78.128.40.0/23 maxlen: 23
78.128.52.0/22 maxlen: 22
78.128.56.0/22 maxlen: 22
78.128.82.0/23 maxlen: 23
78.128.84.0/22 maxlen: 22
78.128.88.0/22 maxlen: 22
78.128.96.0/23 maxlen: 23
78.128.100.0/22 maxlen: 22
78.128.104.0/22 maxlen: 22
78.128.116.0/23 maxlen: 23
78.142.9.0/24 maxlen: 24
78.142.10.0/23 maxlen: 23
78.142.12.0/22 maxlen: 22
78.142.30.0/23 maxlen: 23
83.222.190.0/23 maxlen: 23
84.201.224.0/20 maxlen: 20
91.148.162.0/23 maxlen: 23
91.148.164.0/23 maxlen: 23
91.148.169.0/24 maxlen: 24
91.148.170.0/23 maxlen: 23
91.148.172.0/22 maxlen: 22
91.148.176.0/21 maxlen: 21
91.148.186.0/24 maxlen: 24
130.185.227.0/24 maxlen: 24
185.81.120.0/23 maxlen: 23
193.24.240.0/22 maxlen: 22
193.200.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5b:99:46:b7:34:65:a9:d4:10:e1:83:8d:d7:3d:37:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Sep 18 06:53:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5920004ca63bfbb03b65510cdeceba1708998c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:56:67:d3:91:a5:b8:51:51:97:40:9f:28:d5:
08:b3:7f:c2:de:ad:d8:c4:5c:77:4d:ef:e3:32:c6:
99:35:cb:d1:4c:52:d6:43:8a:58:80:3d:86:1e:86:
0f:ff:60:84:eb:e9:fc:2a:f7:f6:9d:c9:db:ff:82:
47:1d:76:e1:4f:97:f4:f1:e2:84:f9:9b:d1:16:13:
84:a8:99:51:b8:5c:46:2b:14:3b:95:cb:84:66:73:
5c:a8:db:04:9f:e1:dc:e9:35:4f:53:bb:bc:41:e4:
3f:3f:99:ae:b6:ce:0c:bf:78:de:1e:a0:d8:bb:31:
a0:ea:a3:06:ce:91:44:cf:49:55:c7:45:bf:1d:da:
be:7b:41:cd:a4:92:46:78:1b:35:d8:05:dc:9a:bf:
42:ce:ef:b4:33:f3:f2:2d:1e:52:d0:d8:35:1f:6a:
c3:5d:ff:b8:c1:40:16:db:4d:a3:fe:b9:a2:7e:1a:
2c:cf:dd:1d:b5:b8:39:74:3c:90:5c:be:90:a6:ee:
ef:78:76:16:01:c9:95:23:f8:83:ff:23:71:80:de:
bd:c2:68:94:69:c9:1e:1a:23:d4:9d:3d:e8:00:6e:
c4:9b:ba:0e:75:ba:bd:91:9d:6d:f8:1a:c6:a0:ee:
43:28:a7:ad:01:41:e1:79:fb:0b:33:22:f3:90:3a:
91:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:20:00:4C:A6:3B:FB:B0:3B:65:51:0C:DE:CE:BA:17:08:99:8C:61
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/WSAATKY7-7A7ZVEM3s66FwiZjGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.76.4.0/22
78.128.10.0-78.128.31.255
78.128.36.0-78.128.41.255
78.128.52.0-78.128.59.255
78.128.82.0-78.128.91.255
78.128.96.0/23
78.128.100.0-78.128.107.255
78.128.116.0/23
78.142.9.0-78.142.15.255
78.142.30.0/23
83.222.190.0/23
84.201.224.0/20
91.148.162.0-91.148.165.255
91.148.169.0-91.148.183.255
91.148.186.0/24
130.185.227.0/24
185.81.120.0/23
193.24.240.0/22
193.200.14.0/23
Signature Algorithm: sha256WithRSAEncryption
64:a3:ac:ed:b9:d3:f6:46:bc:8f:cb:fd:f4:78:01:01:d7:41:
69:80:72:4f:44:ce:9d:e5:2b:d3:e8:ab:a9:a5:fc:81:65:23:
ab:ac:ab:0d:ae:9d:a3:64:0e:10:eb:af:69:df:13:6e:c8:25:
3d:10:ff:fb:50:ae:11:64:e0:8a:ba:4b:de:d7:eb:72:74:da:
d9:15:c1:ff:f2:cc:e8:76:72:8b:56:2c:de:16:dd:60:d1:da:
b6:4a:78:87:70:f9:e2:81:57:f4:9e:f5:62:9c:7d:90:a8:f8:
53:1a:06:3d:26:9e:a1:6d:d2:7a:2b:56:97:13:1d:19:3e:18:
ba:19:e6:a0:67:01:79:80:fc:72:72:3a:ec:72:cb:ea:f8:44:
a1:39:1a:3a:0b:d7:90:27:c1:24:82:f8:86:96:86:e0:d0:3e:
40:dc:c7:85:af:94:31:dc:ad:f5:0c:b4:ef:a7:39:db:6a:60:
e0:eb:e4:66:fa:fc:1c:a8:37:43:85:77:b5:32:8c:d7:ae:4b:
ed:6d:ab:e6:84:e4:73:33:3b:2c:83:1b:bf:b3:35:ed:e8:d2:
d7:46:c3:bc:b1:8b:a4:36:6a:4d:8c:7c:4f:b4:fe:dc:ab:d0:
d4:af:4b:34:6f:c7:cd:92:53:1b:e9:7b:9d:d5:b4:39:a0:ff:
d8:3b:c4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 13:59:20 2025 by rpki-client