Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/wbrCWR_cVe_TXaWmFcux22egTcg.roa
File: wbrCWR_cVe_TXaWmFcux22egTcg.roa (raw, json)
Hash identifier: sFYCXmhjjVhaC9+7fn5FtqITfOd6Kw8Gm3v8ZVp9JGQ=
Subject key identifier: C1:BA:C2:59:1F:DC:55:EF:D3:5D:A5:A6:15:CB:B1:DB:67:A0:4D:C8
Certificate issuer: /CN=66df7742890173927935206a28efbf48123e787c
Certificate serial: 01987934054302D8353D1E8E55E6CAB78B9C
Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/wbrCWR_cVe_TXaWmFcux22egTcg.roa
Signing time: Tue 05 Aug 2025 07:48:28 +0000
ROA not before: Tue 05 Aug 2025 07:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5413
IP address blocks: 5.22.224.0/21 maxlen: 21
45.83.76.0/22 maxlen: 22
45.83.76.0/24 maxlen: 24
62.44.64.0/19 maxlen: 19
62.69.32.0/19 maxlen: 19
62.72.128.0/19 maxlen: 19
62.105.64.0/18 maxlen: 18
62.232.0.0/16 maxlen: 16
77.44.0.0/17 maxlen: 17
77.73.120.0/21 maxlen: 21
77.107.128.0/18 maxlen: 18
78.41.208.0/21 maxlen: 21
78.141.0.0/18 maxlen: 18
80.64.48.0/20 maxlen: 20
80.69.128.0/20 maxlen: 20
80.89.80.0/20 maxlen: 20
80.234.128.0/17 maxlen: 17
82.195.96.0/19 maxlen: 19
83.219.32.0/19 maxlen: 19
89.145.192.0/18 maxlen: 18
93.92.120.0/21 maxlen: 21
93.95.104.0/21 maxlen: 21
94.30.0.0/17 maxlen: 17
109.170.128.0/17 maxlen: 17
130.185.64.0/21 maxlen: 21
176.35.0.0/16 maxlen: 16
185.3.76.0/22 maxlen: 22
185.138.152.0/22 maxlen: 22
185.196.204.0/22 maxlen: 22
193.41.96.0/21 maxlen: 21
193.192.64.0/19 maxlen: 19
193.242.113.0/24 maxlen: 24
193.242.115.0/24 maxlen: 24
193.242.116.0/24 maxlen: 24
194.1.210.0/24 maxlen: 24
194.79.240.0/22 maxlen: 22
194.79.241.0/24 maxlen: 24
194.126.64.0/19 maxlen: 19
194.143.160.0/19 maxlen: 19
194.153.0.0/19 maxlen: 19
194.154.160.0/19 maxlen: 19
195.38.64.0/19 maxlen: 19
195.70.64.0/19 maxlen: 19
195.147.0.0/16 maxlen: 16
195.147.4.0/24 maxlen: 24
195.224.0.0/16 maxlen: 16
195.226.32.0/19 maxlen: 19
212.19.64.0/19 maxlen: 19
212.35.224.0/19 maxlen: 19
212.88.32.0/19 maxlen: 19
212.102.214.0/24 maxlen: 24
212.103.224.0/19 maxlen: 19
212.241.128.0/17 maxlen: 17
213.205.128.0/18 maxlen: 18
217.67.48.0/20 maxlen: 20
2001:b98::/29 maxlen: 29
2001:b98::/32 maxlen: 32
2a04:b2c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:34:05:43:02:d8:35:3d:1e:8e:55:e6:ca:b7:8b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66df7742890173927935206a28efbf48123e787c
Validity
Not Before: Aug 5 07:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1bac2591fdc55efd35da5a615cbb1db67a04dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8d:4e:9f:e2:40:80:64:4b:89:fc:0f:22:9b:
41:6b:34:1a:c8:28:97:80:28:60:5f:0c:bd:ab:65:
f7:73:6a:5b:78:3c:96:dc:6c:7f:e3:09:65:57:f6:
94:e3:ce:04:3d:e4:fa:a7:34:a1:02:9a:88:46:6c:
36:de:18:c0:b6:77:32:e7:15:dc:3a:0a:2b:6a:27:
b6:fc:43:be:e2:c4:85:54:01:b3:46:9a:be:41:2a:
92:82:fd:88:67:be:20:28:e2:ee:ce:22:76:48:38:
8e:1c:ec:7f:9d:ea:d5:97:a0:6a:a3:42:09:82:de:
8f:20:95:34:c6:5c:00:a9:61:e4:24:e8:52:00:d3:
bf:0b:cb:0a:4d:fe:5b:db:c2:93:49:fb:1c:1e:0c:
b1:ce:28:af:fc:1c:60:7e:df:97:4e:37:f1:c5:40:
c9:09:34:e7:3b:9e:59:87:de:d5:61:8d:5e:74:3a:
19:ff:45:04:03:72:a4:0b:d1:d1:ff:49:54:55:94:
e1:c1:75:6c:7a:03:b5:d4:17:f9:05:b8:b0:a6:98:
9d:ad:68:70:66:62:7f:45:2b:27:17:52:8c:87:12:
e6:70:de:b9:0f:f7:c5:92:ba:81:1d:fc:75:63:f9:
fd:35:18:fa:be:90:6b:bd:67:b3:3f:72:6f:68:4f:
ab:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BA:C2:59:1F:DC:55:EF:D3:5D:A5:A6:15:CB:B1:DB:67:A0:4D:C8
X509v3 Authority Key Identifier:
keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/wbrCWR_cVe_TXaWmFcux22egTcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.224.0/21
45.83.76.0/22
62.44.64.0/19
62.69.32.0/19
62.72.128.0/19
62.105.64.0/18
62.232.0.0/16
77.44.0.0/17
77.73.120.0/21
77.107.128.0/18
78.41.208.0/21
78.141.0.0/18
80.64.48.0/20
80.69.128.0/20
80.89.80.0/20
80.234.128.0/17
82.195.96.0/19
83.219.32.0/19
89.145.192.0/18
93.92.120.0/21
93.95.104.0/21
94.30.0.0/17
109.170.128.0/17
130.185.64.0/21
176.35.0.0/16
185.3.76.0/22
185.138.152.0/22
185.196.204.0/22
193.41.96.0/21
193.192.64.0/19
193.242.113.0/24
193.242.115.0-193.242.116.255
194.1.210.0/24
194.79.240.0/22
194.126.64.0/19
194.143.160.0/19
194.153.0.0/19
194.154.160.0/19
195.38.64.0/19
195.70.64.0/19
195.147.0.0/16
195.224.0.0/16
195.226.32.0/19
212.19.64.0/19
212.35.224.0/19
212.88.32.0/19
212.102.214.0/24
212.103.224.0/19
212.241.128.0/17
213.205.128.0/18
217.67.48.0/20
IPv6:
2001:b98::/29
2a04:b2c0::/29
Signature Algorithm: sha256WithRSAEncryption
a1:64:4c:d0:83:f9:bc:8e:8f:7f:ad:d5:f6:0b:b4:05:a6:64:
f5:d6:4b:f9:99:da:55:3d:59:14:ce:9e:06:ef:c6:a2:b4:51:
c2:76:cb:4f:02:71:b8:ab:51:1b:59:f7:a1:35:27:03:9c:2e:
d7:33:7f:81:5e:34:a9:79:28:8b:e6:2b:52:9a:14:0f:de:aa:
6c:0c:96:d9:4e:71:ea:e6:55:c0:da:ab:5e:5a:b2:d8:9d:76:
41:77:5f:28:f6:f5:61:a4:38:ec:e3:b5:d5:5b:a8:12:30:7a:
f5:af:e0:eb:95:44:b1:4d:1d:b4:4f:72:d6:d7:06:35:28:f9:
46:ec:94:85:2f:40:54:f0:3e:66:f9:f8:25:f9:66:47:30:a4:
8a:87:cc:ec:bc:9c:fb:45:62:c4:46:c9:5f:4c:38:73:7f:99:
d9:30:9d:2d:dd:ec:7e:e6:00:19:1a:5b:07:27:b2:0b:50:cf:
1e:39:31:e3:3e:7e:19:2d:1f:f4:91:4a:94:f3:8f:55:8f:b0:
5e:f2:e6:9e:1c:cc:ef:8b:e8:c5:26:fa:aa:ba:6f:9c:7e:cc:
24:14:30:7e:e4:74:97:2f:5e:b8:97:43:00:be:1b:b6:ae:da:
ed:3f:04:55:d0:30:a5:f9:63:dc:79:ef:b0:8e:ef:94:b1:a5:
01:8b:0f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:52:16 2025 by rpki-client