Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/WDGhLh_QbejYGcneV6yaeoiIs-U.roa
File: WDGhLh_QbejYGcneV6yaeoiIs-U.roa (raw, json)
Hash identifier: yPuYFA6FJseif/+fS5zGWG8PLkzAcwNO2Btgl7LpTKc=
Subject key identifier: 58:31:A1:2E:1F:D0:6D:E8:D8:19:C9:DE:57:AC:9A:7A:88:88:B3:E5
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019A0C3926CF9E458860B502ABA82A8E4F0C
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/WDGhLh_QbejYGcneV6yaeoiIs-U.roa
Signing time: Wed 22 Oct 2025 14:01:03 +0000
ROA not before: Wed 22 Oct 2025 14:01:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34304
IP address blocks: 80.96.99.0/24 maxlen: 24
80.96.106.0/24 maxlen: 24
81.180.252.0/23 maxlen: 23
217.156.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:39:26:cf:9e:45:88:60:b5:02:ab:a8:2a:8e:4f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Oct 22 14:01:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5831a12e1fd06de8d819c9de57ac9a7a8888b3e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:45:7a:37:f5:dd:06:3a:49:a2:e6:4b:27:2f:
af:ea:47:9f:f1:7a:64:2c:70:91:7f:9c:3b:6b:3c:
fa:37:36:6a:a8:d1:08:c6:39:d0:2d:bc:1a:3f:77:
57:78:44:1e:6b:bc:66:c2:fb:0a:aa:75:82:93:d6:
28:d8:e6:13:ec:86:f9:1c:6f:01:a5:ae:a6:df:55:
df:86:bf:22:d1:77:52:ef:f5:f3:bf:7f:43:4f:f5:
c9:5b:21:5f:25:8a:81:64:0f:64:e3:02:40:d8:62:
a6:a4:fb:81:9a:da:e0:41:d3:00:e5:6f:67:1f:e5:
ad:a6:41:9d:f2:13:ae:4f:0d:75:8e:38:38:aa:a9:
10:c8:79:e5:64:e3:da:03:4e:0e:84:5b:5e:fd:02:
2d:1d:73:7f:48:59:41:f2:8e:80:98:99:41:42:27:
a8:45:ca:ec:c6:28:ff:f0:2a:d6:94:8b:f8:d3:1b:
35:62:8e:a1:66:13:f0:4e:c4:57:c2:d5:0f:4a:65:
f9:4c:71:e6:7d:24:99:a1:4e:e4:5c:50:60:dd:6c:
ca:17:cf:4c:9d:54:b8:13:41:7d:26:d3:31:1c:03:
d9:0d:5d:99:c2:46:07:d5:b4:1c:74:60:ac:80:d1:
b9:a1:e3:1a:e7:bd:e1:9b:6e:d6:97:cb:78:87:9c:
ab:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:31:A1:2E:1F:D0:6D:E8:D8:19:C9:DE:57:AC:9A:7A:88:88:B3:E5
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/WDGhLh_QbejYGcneV6yaeoiIs-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.99.0/24
80.96.106.0/24
81.180.252.0/23
217.156.56.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:3b:b0:06:7b:a0:f3:75:5f:5a:10:02:77:49:ba:54:41:5c:
5b:25:4b:b8:7b:fe:30:b7:5b:35:6c:bf:fe:59:6d:8e:81:f0:
25:56:d1:b1:bc:f8:43:d5:b8:7d:e1:4f:b8:73:b9:a7:04:09:
b8:4f:29:4d:bf:bf:12:15:c3:a9:14:43:bf:7e:fa:29:e2:60:
24:64:eb:df:07:21:f2:c0:f8:67:bc:57:fc:f9:e9:83:7c:73:
e7:a4:66:e4:8e:cf:ef:1a:3c:78:ce:18:4a:1c:ce:b7:4f:1d:
22:7e:36:e1:61:95:6e:95:e6:ee:56:ba:b7:83:88:90:df:3a:
0b:82:6b:95:2f:96:7d:bf:d9:e0:20:ce:c2:88:d4:e0:75:fd:
59:04:7c:1e:9e:af:6e:4c:ff:5c:d9:ef:eb:de:c6:6b:e8:e5:
a4:66:a2:c6:a6:1d:5d:f4:60:bd:cf:e9:e6:89:63:33:6e:97:
24:c3:6e:41:d1:43:68:2b:6a:99:e3:d4:63:6e:52:1b:3d:d7:
73:2e:61:d4:48:e0:87:ac:63:0d:71:77:6d:20:82:f8:49:61:
a9:08:03:eb:57:fa:2a:0b:9c:b7:c0:98:d2:96:f9:1e:f7:ee:
de:73:d4:3c:9c:36:b1:dd:a1:81:5f:5a:db:61:72:f0:7a:c5:
88:8e:76:75
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZoMOSbPnkWIYLUCq6gqjk8MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjUxMDIyMTQwMTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODMxYTEyZTFmZDA2ZGU4ZDgxOWM5ZGU1N2FjOWE3YTg4ODhiM2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkV6N/XdBjpJouZLJy+v6kef8Xpk
LHCRf5w7azz6NzZqqNEIxjnQLbwaP3dXeEQea7xmwvsKqnWCk9Yo2OYT7Ib5HG8B
pa6m31Xfhr8i0XdS7/Xzv39DT/XJWyFfJYqBZA9k4wJA2GKmpPuBmtrgQdMA5W9n
H+WtpkGd8hOuTw11jjg4qqkQyHnlZOPaA04OhFte/QItHXN/SFlB8o6AmJlBQieo
Rcrsxij/8CrWlIv40xs1Yo6hZhPwTsRXwtUPSmX5THHmfSSZoU7kXFBg3WzKF89M
nVS4E0F9JtMxHAPZDV2ZwkYH1bQcdGCsgNG5oeMa573hm27Wl8t4h5yr4wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFFgxoS4f0G3o2BnJ3lesmnqIiLPlMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvV0RHaExoX1FiZWpZR2NuZVY2eWFlb2lJcy1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUGBjAwQA
UGBqAwQBUbT8AwQA2Zw4MA0GCSqGSIb3DQEBCwUAA4IBAQCLO7AGe6DzdV9aEAJ3
SbpUQVxbJUu4e/4wt1s1bL/+WW2OgfAlVtGxvPhD1bh94U+4c7mnBAm4TylNv78S
FcOpFEO/fvop4mAkZOvfByHywPhnvFf8+emDfHPnpGbkjs/vGjx4zhhKHM63Tx0i
fjbhYZVulebuVrq3g4iQ3zoLgmuVL5Z9v9ngIM7CiNTgdf1ZBHwenq9uTP9c2e/r
3sZr6OWkZqLGph1d9GC9z+nmiWMzbpckw25B0UNoK2qZ49RjblIbPddzLmHUSOCH
rGMNcXdtIIL4SWGpCAPrV/oqC5y3wJjSlvke9+7ec9Q8nDax3aGBX1rbYXLwesWI
jnZ1
-----END CERTIFICATE-----
Generated at Wed Nov 5 18:30:10 2025 by rpki-client