Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/wWFtuE7HJfgEwRH-36sPOPtRBoo.roa
File: wWFtuE7HJfgEwRH-36sPOPtRBoo.roa (raw, json)
Hash identifier: w2vo1FFWsSlxWTTySRIcQYR6PKxSQ53/GNeJtT7ES0w=
Subject key identifier: C1:61:6D:B8:4E:C7:25:F8:04:C1:11:FE:DF:AB:0F:38:FB:51:06:8A
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01986031BD0B3FC7859A9E33F56372DFA8B2
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/wWFtuE7HJfgEwRH-36sPOPtRBoo.roa
Signing time: Thu 31 Jul 2025 11:15:29 +0000
ROA not before: Thu 31 Jul 2025 11:15:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6830
IP address blocks: 80.81.39.0/24 maxlen: 24
80.81.48.0/24 maxlen: 24
80.81.53.0/24 maxlen: 24
80.81.58.0/24 maxlen: 24
80.255.224.0/20 maxlen: 20
83.223.128.0/24 maxlen: 24
83.223.129.0/24 maxlen: 24
83.223.130.0/24 maxlen: 24
83.223.134.0/24 maxlen: 24
83.223.135.0/24 maxlen: 24
83.223.137.0/24 maxlen: 24
83.223.142.0/24 maxlen: 24
83.223.144.0/24 maxlen: 24
83.223.153.0/24 maxlen: 24
83.223.154.0/24 maxlen: 24
83.223.157.0/24 maxlen: 24
85.254.52.0/24 maxlen: 24
85.254.53.0/24 maxlen: 24
85.254.54.0/24 maxlen: 24
85.254.55.0/24 maxlen: 24
85.254.66.0/24 maxlen: 24
85.254.67.0/24 maxlen: 24
91.190.38.0/24 maxlen: 24
91.190.39.0/24 maxlen: 24
91.190.47.0/24 maxlen: 24
91.190.61.0/24 maxlen: 24
94.101.226.0/24 maxlen: 24
94.101.237.0/24 maxlen: 24
159.148.148.0/24 maxlen: 24
159.148.149.0/24 maxlen: 24
159.148.181.0/24 maxlen: 24
159.148.240.0/24 maxlen: 24
185.7.237.0/24 maxlen: 24
185.7.238.0/24 maxlen: 24
185.7.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:60:31:bd:0b:3f:c7:85:9a:9e:33:f5:63:72:df:a8:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jul 31 11:15:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1616db84ec725f804c111fedfab0f38fb51068a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:2d:39:6b:7d:a7:f4:d6:76:44:3c:e3:31:9a:
67:e7:be:73:36:7f:03:f5:31:dc:a3:29:25:35:31:
da:40:61:f7:70:c6:ef:c1:7b:9c:5d:cb:46:03:24:
25:9e:6a:21:db:51:07:49:85:52:60:28:12:ab:fc:
65:6e:9f:72:73:99:e6:f7:ca:e1:4c:d6:03:28:4d:
57:d6:6e:93:42:fc:7b:05:5a:e5:b7:a3:bb:4a:6b:
7c:65:fd:6a:14:8d:7f:01:2c:99:d3:7f:a9:14:81:
9d:71:6f:b2:f3:a0:db:67:94:7f:b4:18:6a:58:5a:
55:42:c1:bc:f8:35:70:a6:ee:a9:23:88:2f:61:8c:
af:d3:28:76:2b:a1:4d:e5:1b:0a:2d:f1:be:db:81:
cc:d1:35:bb:f1:b8:e3:a9:35:b0:1d:e8:6f:90:94:
f1:58:6f:67:39:d5:1a:90:ac:24:f4:b1:a3:30:18:
a7:62:0f:f8:12:15:d3:b9:97:52:1d:c7:89:18:53:
e0:e4:3e:35:14:ae:43:81:7f:26:a2:ba:62:ec:0f:
39:d0:ce:3e:ef:aa:7f:bb:dc:b8:b8:81:27:70:a9:
e1:82:0e:39:61:8f:70:10:1c:0f:cf:1e:fa:d4:de:
a7:75:3f:8e:80:00:35:e9:45:ac:48:34:74:36:f6:
bf:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:61:6D:B8:4E:C7:25:F8:04:C1:11:FE:DF:AB:0F:38:FB:51:06:8A
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/wWFtuE7HJfgEwRH-36sPOPtRBoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.81.39.0/24
80.81.48.0/24
80.81.53.0/24
80.81.58.0/24
80.255.224.0/20
83.223.128.0-83.223.130.255
83.223.134.0/23
83.223.137.0/24
83.223.142.0/24
83.223.144.0/24
83.223.153.0-83.223.154.255
83.223.157.0/24
85.254.52.0/22
85.254.66.0/23
91.190.38.0/23
91.190.47.0/24
91.190.61.0/24
94.101.226.0/24
94.101.237.0/24
159.148.148.0/23
159.148.181.0/24
159.148.240.0/24
185.7.237.0-185.7.239.255
Signature Algorithm: sha256WithRSAEncryption
37:c8:88:1b:0e:79:73:1d:a7:c7:d0:94:d6:39:a6:b9:53:16:
95:17:ee:a8:a8:ad:8d:16:0a:00:84:e1:3f:88:82:55:0e:fe:
25:1c:07:c9:76:6c:ae:ea:69:14:df:f0:1d:ee:27:e3:13:85:
d8:89:72:f6:6a:a1:c9:51:c2:b9:dd:2d:9a:ee:8b:73:2d:6f:
69:bc:bc:7e:e1:f5:d6:f3:b0:6d:ab:30:ad:4b:51:c2:03:9c:
9e:62:cf:9a:43:48:56:a3:7f:de:97:ed:90:57:35:89:4a:c5:
bd:ab:30:2c:87:22:f6:1f:99:c0:47:ee:19:17:16:13:0c:2d:
28:24:0c:95:d0:ba:3c:4d:f0:0c:84:cc:aa:18:4b:c2:a7:b0:
74:0f:d7:11:2b:f5:e4:85:1b:7a:a8:6d:6f:2b:ce:82:d2:51:
c3:ee:a9:f8:06:1a:6c:14:81:82:b5:f0:4f:92:a4:20:3b:14:
6f:55:bc:7e:4e:f7:4d:bc:56:ef:4a:af:c5:a1:af:2a:57:af:
50:2e:d4:84:08:25:b2:50:3d:1a:73:91:c6:ec:17:74:c5:61:
4d:60:7f:95:76:a9:0a:b5:bf:c4:03:29:4b:ff:f4:e1:de:24:
06:88:c6:56:ba:00:14:b9:2d:6b:2a:74:a2:4f:24:4f:db:de:
be:ce:c6:67
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgISAZhgMb0LP8eFmp4z9WNy36iyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm
YzQxZWMwHhcNMjUwNzMxMTExNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTYxNmRiODRlYzcyNWY4MDRjMTExZmVkZmFiMGYzOGZiNTEwNjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+S05a32n9NZ2RDzjMZpn575zNn8D
9THcoyklNTHaQGH3cMbvwXucXctGAyQlnmoh21EHSYVSYCgSq/xlbp9yc5nm98rh
TNYDKE1X1m6TQvx7BVrlt6O7Smt8Zf1qFI1/ASyZ03+pFIGdcW+y86DbZ5R/tBhq
WFpVQsG8+DVwpu6pI4gvYYyv0yh2K6FN5RsKLfG+24HM0TW78bjjqTWwHehvkJTx
WG9nOdUakKwk9LGjMBinYg/4EhXTuZdSHceJGFPg5D41FK5DgX8morpi7A850M4+
76p/u9y4uIEncKnhgg45YY9wEBwPzx761N6ndT+OgAA16UWsSDR0Nva/UwIDAQAB
o4ICqjCCAqYwHQYDVR0OBBYEFMFhbbhOxyX4BMER/t+rDzj7UQaKMB8GA1UdIwQY
MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt
NTU1NGQ2ZTE2ODZmLzEvd1dGdHVFN0hKZmdFd1JILTM2c1BPUHRSQm9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm
LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG/BggrBgEFBQcBBwEB/wSBrzCBrDCBqQQCAAEwgaIDBABQ
UScDBABQUTADBABQUTUDBABQUToDBARQ/+AwDAMEB1PfgAMEAFPfggMEAVPfhgME
AFPfiQMEAFPfjgMEAFPfkDAMAwQAU9+ZAwQAU9+aAwQAU9+dAwQCVf40AwQBVf5C
AwQBW74mAwQAW74vAwQAW749AwQAXmXiAwQAXmXtAwQBn5SUAwQAn5S1AwQAn5Tw
MAwDBAC5B+0DBAS5B+AwDQYJKoZIhvcNAQELBQADggEBADfIiBsOeXMdp8fQlNY5
prlTFpUX7qiorY0WCgCE4T+IglUO/iUcB8l2bK7qaRTf8B3uJ+MThdiJcvZqoclR
wrndLZrui3Mtb2m8vH7h9dbzsG2rMK1LUcIDnJ5iz5pDSFajf96X7ZBXNYlKxb2r
MCyHIvYfmcBH7hkXFhMMLSgkDJXQujxN8AyEzKoYS8KnsHQP1xEr9eSFG3qobW8r
zoLSUcPuqfgGGmwUgYK18E+SpCA7FG9VvH5O9028Vu9Kr8WhrypXr1Au1IQIJbJQ
PRpzkcbsF3TFYU1gf5V2qQq1v8QDKUv/9OHeJAaIxla6ABS5LWsqdKJPJE/b3r7O
xmc=
-----END CERTIFICATE-----
Generated at Mon Aug 4 19:10:32 2025 by rpki-client