Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/WGll_MRpK6w13NzAbMEmFXTFuwg.roa
File: WGll_MRpK6w13NzAbMEmFXTFuwg.roa (raw, json)
Hash identifier: OH8pFqF4rEeHvnmLrvEOHGpagE/vMqnUQLXCYvmfljQ=
Subject key identifier: 58:69:65:FC:C4:69:2B:AC:35:DC:DC:C0:6C:C1:26:15:74:C5:BB:08
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019759983988F1B50C3092D55809651F073C
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/WGll_MRpK6w13NzAbMEmFXTFuwg.roa
Signing time: Tue 10 Jun 2025 11:27:17 +0000
ROA not before: Tue 10 Jun 2025 11:27:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2588
IP address blocks: 46.19.200.0/21 maxlen: 21
80.81.32.0/19 maxlen: 24
80.81.35.0/24 maxlen: 24
83.223.128.0/19 maxlen: 19
83.223.145.0/24 maxlen: 24
83.223.155.0/24 maxlen: 24
85.254.0.0/17 maxlen: 17
85.254.6.0/24 maxlen: 24
85.254.49.0/24 maxlen: 24
85.254.50.0/24 maxlen: 24
85.254.56.0/24 maxlen: 24
85.254.57.0/24 maxlen: 24
85.254.60.0/24 maxlen: 24
85.254.61.0/24 maxlen: 24
85.254.69.0/24 maxlen: 24
85.254.128.0/18 maxlen: 18
85.254.132.0/24 maxlen: 24
85.254.147.0/24 maxlen: 24
85.254.160.0/24 maxlen: 24
91.190.32.0/19 maxlen: 24
91.190.36.0/24 maxlen: 24
91.190.52.0/24 maxlen: 24
91.190.56.0/23 maxlen: 24
91.190.60.0/24 maxlen: 24
94.101.224.0/20 maxlen: 20
109.205.120.0/21 maxlen: 21
109.205.127.0/24 maxlen: 24
159.148.0.0/16 maxlen: 16
159.148.0.0/24 maxlen: 24
159.148.1.0/24 maxlen: 24
159.148.2.0/24 maxlen: 24
159.148.3.0/24 maxlen: 24
159.148.4.0/24 maxlen: 24
159.148.5.0/24 maxlen: 24
159.148.6.0/24 maxlen: 24
159.148.7.0/24 maxlen: 24
159.148.8.0/24 maxlen: 24
159.148.9.0/24 maxlen: 24
159.148.10.0/24 maxlen: 24
159.148.11.0/24 maxlen: 24
159.148.12.0/24 maxlen: 24
159.148.13.0/24 maxlen: 24
159.148.14.0/24 maxlen: 24
159.148.15.0/24 maxlen: 24
159.148.16.0/24 maxlen: 24
159.148.17.0/24 maxlen: 24
159.148.18.0/24 maxlen: 24
159.148.19.0/24 maxlen: 24
159.148.20.0/24 maxlen: 24
159.148.21.0/24 maxlen: 24
159.148.22.0/24 maxlen: 24
159.148.24.0/24 maxlen: 24
159.148.25.0/24 maxlen: 24
159.148.28.0/24 maxlen: 24
159.148.29.0/24 maxlen: 24
159.148.31.0/24 maxlen: 24
159.148.32.0/24 maxlen: 24
159.148.33.0/24 maxlen: 24
159.148.34.0/24 maxlen: 24
159.148.35.0/24 maxlen: 24
159.148.36.0/24 maxlen: 24
159.148.37.0/24 maxlen: 24
159.148.39.0/24 maxlen: 24
159.148.40.0/24 maxlen: 24
159.148.41.0/24 maxlen: 24
159.148.42.0/24 maxlen: 24
159.148.43.0/24 maxlen: 24
159.148.45.0/24 maxlen: 24
159.148.46.0/24 maxlen: 24
159.148.47.0/24 maxlen: 24
159.148.48.0/24 maxlen: 24
159.148.49.0/24 maxlen: 24
159.148.50.0/24 maxlen: 24
159.148.51.0/24 maxlen: 24
159.148.52.0/24 maxlen: 24
159.148.53.0/24 maxlen: 24
159.148.55.0/24 maxlen: 24
159.148.56.0/24 maxlen: 24
159.148.57.0/24 maxlen: 24
159.148.59.0/24 maxlen: 24
159.148.60.0/24 maxlen: 24
159.148.61.0/24 maxlen: 24
159.148.63.0/24 maxlen: 24
159.148.64.0/24 maxlen: 24
159.148.65.0/24 maxlen: 24
159.148.67.0/24 maxlen: 24
159.148.68.0/24 maxlen: 24
159.148.69.0/24 maxlen: 24
159.148.70.0/24 maxlen: 24
159.148.71.0/24 maxlen: 24
159.148.72.0/24 maxlen: 24
159.148.75.0/24 maxlen: 24
159.148.76.0/24 maxlen: 24
159.148.78.0/24 maxlen: 24
159.148.79.0/24 maxlen: 24
159.148.80.0/24 maxlen: 24
159.148.81.0/24 maxlen: 24
159.148.82.0/24 maxlen: 24
159.148.83.0/24 maxlen: 24
159.148.84.0/24 maxlen: 24
159.148.85.0/24 maxlen: 24
159.148.86.0/24 maxlen: 24
159.148.87.0/24 maxlen: 24
159.148.91.0/24 maxlen: 24
159.148.92.0/24 maxlen: 24
159.148.93.0/24 maxlen: 24
159.148.94.0/24 maxlen: 24
159.148.95.0/24 maxlen: 24
159.148.96.0/24 maxlen: 24
159.148.97.0/24 maxlen: 24
159.148.100.0/24 maxlen: 24
159.148.101.0/24 maxlen: 24
159.148.106.0/24 maxlen: 24
159.148.107.0/24 maxlen: 24
159.148.108.0/24 maxlen: 24
159.148.110.0/24 maxlen: 24
159.148.111.0/24 maxlen: 24
159.148.112.0/24 maxlen: 24
159.148.113.0/24 maxlen: 24
159.148.115.0/24 maxlen: 24
159.148.116.0/24 maxlen: 24
159.148.117.0/24 maxlen: 24
159.148.118.0/24 maxlen: 24
159.148.120.0/24 maxlen: 24
159.148.121.0/24 maxlen: 24
159.148.122.0/24 maxlen: 24
159.148.123.0/24 maxlen: 24
159.148.127.0/24 maxlen: 24
159.148.129.0/24 maxlen: 24
159.148.132.0/24 maxlen: 24
159.148.133.0/24 maxlen: 24
159.148.135.0/24 maxlen: 24
159.148.139.0/24 maxlen: 24
159.148.145.0/24 maxlen: 24
159.148.146.0/24 maxlen: 24
159.148.151.0/24 maxlen: 24
159.148.152.0/24 maxlen: 24
159.148.153.0/24 maxlen: 24
159.148.154.0/24 maxlen: 24
159.148.155.0/24 maxlen: 24
159.148.156.0/24 maxlen: 24
159.148.159.0/24 maxlen: 24
159.148.161.0/24 maxlen: 24
159.148.162.0/24 maxlen: 24
159.148.164.0/24 maxlen: 24
159.148.168.0/24 maxlen: 24
159.148.170.0/24 maxlen: 24
159.148.175.0/24 maxlen: 24
159.148.178.0/24 maxlen: 24
159.148.185.0/24 maxlen: 24
159.148.186.0/24 maxlen: 24
159.148.187.0/24 maxlen: 24
159.148.188.0/24 maxlen: 24
159.148.189.0/24 maxlen: 24
159.148.192.0/24 maxlen: 24
159.148.193.0/24 maxlen: 24
159.148.194.0/24 maxlen: 24
159.148.195.0/24 maxlen: 24
159.148.196.0/24 maxlen: 24
159.148.201.0/24 maxlen: 24
159.148.202.0/24 maxlen: 24
159.148.205.0/24 maxlen: 24
159.148.206.0/24 maxlen: 24
159.148.207.0/24 maxlen: 24
159.148.209.0/24 maxlen: 24
159.148.210.0/24 maxlen: 24
159.148.211.0/24 maxlen: 24
159.148.212.0/24 maxlen: 24
159.148.213.0/24 maxlen: 24
159.148.214.0/24 maxlen: 24
159.148.215.0/24 maxlen: 24
159.148.217.0/24 maxlen: 24
159.148.219.0/24 maxlen: 24
159.148.221.0/24 maxlen: 24
159.148.223.0/24 maxlen: 24
159.148.227.0/24 maxlen: 24
159.148.228.0/24 maxlen: 24
159.148.229.0/24 maxlen: 24
159.148.230.0/24 maxlen: 24
159.148.232.0/24 maxlen: 24
159.148.233.0/24 maxlen: 24
159.148.235.0/24 maxlen: 24
159.148.237.0/24 maxlen: 24
159.148.238.0/24 maxlen: 24
159.148.250.0/24 maxlen: 24
159.148.251.0/24 maxlen: 24
159.148.252.0/24 maxlen: 24
159.148.252.2/32 maxlen: 32
159.148.254.0/24 maxlen: 24
185.27.92.0/22 maxlen: 22
217.69.112.0/20 maxlen: 20
217.69.113.0/24 maxlen: 24
2a02:610::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:98:39:88:f1:b5:0c:30:92:d5:58:09:65:1f:07:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jun 10 11:27:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=586965fcc4692bac35dcdcc06cc1261574c5bb08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:89:0a:97:d0:2e:fc:e1:ca:c1:d8:c9:ac:13:
d8:3f:4f:77:1a:d6:6b:dd:6a:7f:2f:54:9b:f3:97:
f4:9a:c4:e0:3d:46:1c:46:80:9f:1c:73:58:89:47:
03:0e:2f:7c:5f:10:82:57:ec:e5:d3:65:70:d8:d4:
ea:a5:e5:c7:91:0b:b7:c0:90:bd:9f:48:ba:74:ac:
ad:e2:13:4e:cd:a3:b5:2d:90:30:44:64:cd:ef:23:
5c:32:f5:7b:42:cc:44:51:77:5a:47:28:42:17:80:
57:fe:45:1d:0d:be:d3:c9:af:d6:05:af:73:34:b1:
39:34:41:35:9f:02:76:4c:9d:f8:26:c0:62:22:b7:
1c:b1:b2:98:e5:53:07:aa:f3:56:fb:a1:fc:2e:a2:
20:e5:3f:a7:86:7a:7e:50:5b:0f:f5:59:c8:6c:79:
63:8c:ed:f3:0f:33:27:e5:d0:58:a2:bb:1b:56:49:
90:2c:54:94:c5:f0:c9:51:c2:df:0d:95:3a:e9:91:
e1:5c:20:10:c6:9e:62:78:17:bd:c2:3b:e0:6f:cb:
1d:47:c5:72:cf:7c:12:e7:8d:88:f6:3c:79:9a:f8:
f2:e6:d9:2f:e6:a4:49:bb:69:02:6f:41:15:e0:ba:
fc:98:78:96:47:e3:a9:55:6a:d5:49:5c:2c:90:af:
02:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:69:65:FC:C4:69:2B:AC:35:DC:DC:C0:6C:C1:26:15:74:C5:BB:08
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/WGll_MRpK6w13NzAbMEmFXTFuwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.200.0/21
80.81.32.0/19
83.223.128.0/19
85.254.0.0-85.254.191.255
91.190.32.0/19
94.101.224.0/20
109.205.120.0/21
159.148.0.0/16
185.27.92.0/22
217.69.112.0/20
IPv6:
2a02:610::/32
Signature Algorithm: sha256WithRSAEncryption
90:ae:e1:29:cb:2d:55:cc:9e:34:59:16:b2:4d:0a:73:27:d7:
09:03:2c:68:07:e3:22:51:e8:8c:da:06:45:f2:6e:9f:90:a6:
25:a3:41:45:90:96:f8:67:17:5b:9e:fd:46:ac:dd:9a:a8:d1:
18:4c:66:1c:a9:d2:c1:8e:0b:6b:12:2b:6c:23:ff:8f:82:60:
1f:e5:24:12:6e:d7:e0:a6:8c:c4:c9:30:df:72:8c:3e:23:ab:
1a:5a:df:91:0e:c8:6b:6a:9a:eb:e2:2d:15:0b:06:16:d5:61:
fb:c1:e9:16:fa:db:6d:cd:e5:63:84:c1:f1:55:8c:68:6d:5c:
9d:83:50:02:45:64:7d:0f:98:b0:60:83:3b:47:a1:0a:55:d9:
b9:6b:96:0f:5d:d8:7a:82:ef:bd:83:07:c4:92:08:3f:ed:a8:
c1:e3:ae:67:9b:3c:47:5e:9b:b6:ae:e5:7c:74:32:0b:60:51:
8d:11:23:35:3d:61:03:c9:36:ef:9f:de:d7:5f:ea:f1:e4:2d:
4e:fd:e5:99:24:77:9c:1c:f5:8b:d7:8e:25:b8:52:b4:bd:5f:
18:cf:05:6c:02:19:f4:de:e9:2e:94:da:04:35:2d:0e:58:67:
12:48:fa:05:a1:6d:8a:f0:d5:eb:f7:29:7f:a7:a2:9d:9d:2d:
22:fd:77:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:00:43 2025 by rpki-client