Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/WBSDkIaVRxspnZB85zHlZDMPBvE.roa
File: WBSDkIaVRxspnZB85zHlZDMPBvE.roa (raw, json)
Hash identifier: dKGj0UbI6Hyodic4ujzyMQO0izNi4N6MDbaDGIVHoXI=
Subject key identifier: 58:14:83:90:86:95:47:1B:29:9D:90:7C:E7:31:E5:64:33:0F:06:F1
Certificate issuer: /CN=718654cb8ed3f55d5c60972d310f5ed6204b4fe5
Certificate serial: 019A354B11117B4E53203CBB66B1F2F352E3
Authority key identifier: 71:86:54:CB:8E:D3:F5:5D:5C:60:97:2D:31:0F:5E:D6:20:4B:4F:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/WBSDkIaVRxspnZB85zHlZDMPBvE.roa
Signing time: Thu 30 Oct 2025 13:25:03 +0000
ROA not before: Thu 30 Oct 2025 13:25:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13099
IP address blocks: 213.172.70.0/24 maxlen: 24
213.172.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:35:4b:11:11:7b:4e:53:20:3c:bb:66:b1:f2:f3:52:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718654cb8ed3f55d5c60972d310f5ed6204b4fe5
Validity
Not Before: Oct 30 13:25:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=581483908695471b299d907ce731e564330f06f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ae:e0:e8:85:03:e2:cf:0f:2b:a3:c2:55:e9:
be:42:d9:56:39:e3:fd:e8:9e:9e:fa:0c:8a:ce:16:
f2:3b:2c:51:c4:e7:cb:74:65:7a:9c:5b:26:4c:2b:
15:b0:3a:cc:0f:64:c1:1e:e6:ce:72:c5:95:f2:e5:
44:88:69:ff:b5:ab:f8:52:63:ec:54:e6:17:5c:1f:
e6:bf:65:23:d1:54:5e:54:26:a8:31:c2:5c:90:d3:
0a:97:39:2d:80:99:39:f1:9b:af:2a:25:b1:32:88:
f7:83:3a:b7:ee:a4:48:ae:c5:b8:30:1f:81:80:4c:
aa:a1:e2:b2:c5:77:9c:c2:c1:88:c4:f8:03:89:26:
54:e7:14:16:71:2e:d1:e0:8b:99:f0:b7:d0:95:92:
a3:4a:ae:58:8e:1c:d6:48:38:7c:3d:b5:2e:b2:89:
84:54:ad:b2:0c:ea:7d:26:1a:0a:a2:a0:89:c7:01:
29:b5:84:d3:df:4d:df:5d:b3:d0:37:82:82:a5:85:
b7:3d:4d:b8:96:1c:57:89:cb:40:4c:42:81:79:98:
98:a2:ad:0a:13:80:dd:4b:8d:f4:dd:a8:de:f2:20:
02:6c:80:ae:d8:41:22:a7:e4:ec:ba:cb:58:0a:d1:
d0:92:b6:81:23:c7:38:1f:86:70:7d:bb:0a:e7:44:
f6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:14:83:90:86:95:47:1B:29:9D:90:7C:E7:31:E5:64:33:0F:06:F1
X509v3 Authority Key Identifier:
keyid:71:86:54:CB:8E:D3:F5:5D:5C:60:97:2D:31:0F:5E:D6:20:4B:4F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/WBSDkIaVRxspnZB85zHlZDMPBvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.172.70.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:b4:d6:d7:54:6c:6b:a0:26:b8:08:b6:da:39:31:9b:58:ca:
0b:4d:de:8f:4c:ab:86:5a:3e:96:54:d3:fd:6c:0b:af:80:04:
1e:17:03:f5:c3:9d:7b:1d:ad:7d:8c:d9:ad:50:6e:9e:2b:d0:
1c:01:be:d5:80:d1:d7:d9:b8:d9:f1:cc:75:22:06:09:8f:d0:
ca:a5:f7:1e:7f:6a:81:37:4a:4a:50:88:0b:5e:bf:9a:5b:ca:
75:e2:d5:20:cc:40:0b:34:b7:2d:3e:eb:20:b9:71:da:b3:e0:
21:9c:ae:ad:24:7c:3a:40:a3:72:3e:61:e6:42:b5:f7:a0:e4:
af:65:fb:47:3d:4f:cd:10:e6:c9:17:c5:22:02:2d:6c:92:31:
4e:74:53:fe:1b:70:eb:5e:c4:59:e6:26:a4:b8:49:e8:c4:6e:
d2:51:03:0f:d9:1a:e7:16:69:9e:ff:2e:c0:9a:90:d7:d3:e1:
1b:d4:d0:c4:04:ec:5d:60:08:88:6c:f9:69:ca:0b:14:18:0f:
12:ae:20:1c:c1:31:79:5c:3e:0a:ec:54:d5:59:c8:68:a3:f4:
d2:82:9c:9f:83:c8:6b:ed:61:6d:91:c2:60:cc:6d:dc:70:2a:
c5:b2:69:2d:71:9b:fe:08:28:a8:a2:d8:22:85:86:a1:c0:dd:
45:b7:58:30
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZo1SxERe05TIDy7ZrHy81LjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxODY1NGNiOGVkM2Y1NWQ1YzYwOTcyZDMxMGY1ZWQ2MjA0
YjRmZTUwHhcNMjUxMDMwMTMyNTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODE0ODM5MDg2OTU0NzFiMjk5ZDkwN2NlNzMxZTU2NDMzMGYwNmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuq7g6IUD4s8PK6PCVem+QtlWOeP9
6J6e+gyKzhbyOyxRxOfLdGV6nFsmTCsVsDrMD2TBHubOcsWV8uVEiGn/tav4UmPs
VOYXXB/mv2Uj0VReVCaoMcJckNMKlzktgJk58ZuvKiWxMoj3gzq37qRIrsW4MB+B
gEyqoeKyxXecwsGIxPgDiSZU5xQWcS7R4IuZ8LfQlZKjSq5YjhzWSDh8PbUusomE
VK2yDOp9JhoKoqCJxwEptYTT303fXbPQN4KCpYW3PU24lhxXictATEKBeZiYoq0K
E4DdS4303aje8iACbICu2EEip+TsustYCtHQkraBI8c4H4ZwfbsK50T26wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFgUg5CGlUcbKZ2QfOcx5WQzDwbxMB8GA1UdIwQY
MBaAFHGGVMuO0/VdXGCXLTEPXtYgS0/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1laVXk0N1Q5VjFjWUpjdE1ROWUxaUJMVC1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9mZmU1NjctMjdlNi00YTY0LWJhZjQt
YTI4YmNlNWQ1ZGE1LzEvV0JTRGtJYVZSeHNwblpCODV6SGxaRE1QQnZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9mZmU1NjctMjdlNi00YTY0LWJhZjQtYTI4YmNlNWQ1ZGE1
LzEvY1laVXk0N1Q5VjFjWUpjdE1ROWUxaUJMVC1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1axGMA0G
CSqGSIb3DQEBCwUAA4IBAQBatNbXVGxroCa4CLbaOTGbWMoLTd6PTKuGWj6WVNP9
bAuvgAQeFwP1w517Ha19jNmtUG6eK9AcAb7VgNHX2bjZ8cx1IgYJj9DKpfcef2qB
N0pKUIgLXr+aW8p14tUgzEALNLctPusguXHas+AhnK6tJHw6QKNyPmHmQrX3oOSv
ZftHPU/NEObJF8UiAi1skjFOdFP+G3DrXsRZ5iakuEnoxG7SUQMP2RrnFmme/y7A
mpDX0+Eb1NDEBOxdYAiIbPlpygsUGA8SriAcwTF5XD4K7FTVWchoo/TSgpyfg8hr
7WFtkcJgzG3ccCrFsmktcZv+CCiootgihYahwN1Ft1gw
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:33:01 2025 by rpki-client