Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/010e95-49b7-4edd-8d0d-395d4eec831e/1/WEHSBYEle2jq0AGr5T_ZCXDbcWw.roa
File: WEHSBYEle2jq0AGr5T_ZCXDbcWw.roa (raw, json)
Hash identifier: Lv81OKPJ4F7icP9BLtyJCp3qBs5iXrzmNThhpwrXttc=
Subject key identifier: 58:41:D2:05:81:25:7B:68:EA:D0:01:AB:E5:3F:D9:09:70:DB:71:6C
Certificate issuer: /CN=1e74df4ad48ff211a0635b37f037977819cd4276
Certificate serial: 019A501F2B751C137A6AE52FF9A6A1725867
Authority key identifier: 1E:74:DF:4A:D4:8F:F2:11:A0:63:5B:37:F0:37:97:78:19:CD:42:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnTfStSP8hGgY1s38DeXeBnNQnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/010e95-49b7-4edd-8d0d-395d4eec831e/1/WEHSBYEle2jq0AGr5T_ZCXDbcWw.roa
Signing time: Tue 04 Nov 2025 18:26:51 +0000
ROA not before: Tue 04 Nov 2025 18:26:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35359
IP address blocks: 85.119.40.0/21 maxlen: 21
85.119.40.0/24 maxlen: 24
85.119.41.0/24 maxlen: 24
85.119.42.0/24 maxlen: 24
85.119.43.0/24 maxlen: 24
85.119.44.0/24 maxlen: 24
85.119.45.0/24 maxlen: 24
85.119.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/010e95-49b7-4edd-8d0d-395d4eec831e/1/HnTfStSP8hGgY1s38DeXeBnNQnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/010e95-49b7-4edd-8d0d-395d4eec831e/1/HnTfStSP8hGgY1s38DeXeBnNQnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnTfStSP8hGgY1s38DeXeBnNQnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:1f:2b:75:1c:13:7a:6a:e5:2f:f9:a6:a1:72:58:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e74df4ad48ff211a0635b37f037977819cd4276
Validity
Not Before: Nov 4 18:26:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5841d20581257b68ead001abe53fd90970db716c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5c:a0:3b:84:5f:77:b6:11:a1:b5:8c:07:6d:
c2:fc:87:3f:1e:ac:65:7c:5b:6d:d6:5c:33:4f:46:
a9:71:b3:a9:39:e3:56:58:68:6a:e0:1d:91:20:84:
fc:a2:de:a8:33:08:d0:b7:93:4b:99:24:52:da:e6:
f7:12:9f:58:17:5a:ef:4e:e7:1c:28:7e:07:82:0b:
58:0a:59:75:24:04:01:ee:6c:d6:d0:6f:f4:56:e4:
82:39:d4:7c:cf:ce:ed:ae:26:3e:2a:42:ad:52:91:
ad:ed:2c:7a:7b:ab:aa:14:43:fb:58:5d:51:7f:93:
38:f0:cf:24:9f:a7:00:64:58:21:97:6b:c3:dc:08:
d9:ff:b7:e1:ff:38:43:33:77:69:1a:25:b1:fa:70:
34:89:00:b6:be:91:7e:67:6f:02:d3:5d:ae:0e:fa:
7c:ee:c4:77:0c:3e:86:3b:0b:67:6f:38:81:64:7d:
b5:63:8c:b3:ec:18:25:51:20:4c:a7:49:a4:81:9c:
58:fa:49:fd:64:56:f4:d3:b2:bd:61:2f:77:7f:d9:
f3:cf:03:f9:13:2d:35:53:05:c1:0d:bf:b9:e4:70:
d9:84:4e:94:c6:c5:b7:5d:1d:99:14:ca:e6:93:fc:
e2:e2:d0:d0:c7:c7:43:85:17:0c:80:63:8b:26:c3:
60:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:41:D2:05:81:25:7B:68:EA:D0:01:AB:E5:3F:D9:09:70:DB:71:6C
X509v3 Authority Key Identifier:
keyid:1E:74:DF:4A:D4:8F:F2:11:A0:63:5B:37:F0:37:97:78:19:CD:42:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnTfStSP8hGgY1s38DeXeBnNQnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/010e95-49b7-4edd-8d0d-395d4eec831e/1/WEHSBYEle2jq0AGr5T_ZCXDbcWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/010e95-49b7-4edd-8d0d-395d4eec831e/1/HnTfStSP8hGgY1s38DeXeBnNQnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.119.40.0/21
Signature Algorithm: sha256WithRSAEncryption
61:a4:f3:ae:03:60:58:7c:0d:4d:7a:ed:a0:d7:ab:33:d7:21:
25:0e:e9:a5:c4:fa:6d:18:0b:75:84:dd:82:87:ca:f0:9f:04:
09:1c:b5:04:51:13:b7:86:fb:d9:cd:92:ff:ba:db:07:cf:69:
f6:25:3f:e3:30:af:b3:01:b0:26:32:1a:4d:04:8d:5d:95:f6:
c3:ee:04:41:c4:64:41:12:78:cb:a3:78:84:02:94:be:21:94:
35:57:2e:e0:49:8c:d1:d0:7d:ad:b6:98:d0:7f:18:f5:32:31:
21:94:3d:50:2b:bd:9b:82:2a:8a:4a:c3:d4:63:3a:b0:bb:ad:
d4:2f:29:6c:89:c5:24:f4:e9:ba:e6:93:5e:60:1b:9e:e1:93:
55:2d:a1:a1:a4:a2:ea:3c:24:61:67:82:82:0f:ac:fc:56:a6:
f9:dd:e5:0f:89:69:87:98:d5:15:b1:51:fb:1b:29:af:c5:7d:
f1:ab:56:c5:d7:af:34:fb:3c:d1:a8:72:bc:5c:7e:06:ef:be:
36:f8:b2:bd:ee:e2:a9:82:5f:6c:c4:50:6f:13:49:6e:dc:8a:
a0:5b:4f:7b:16:78:f7:0f:3d:0e:83:9c:d8:84:4f:36:55:0a:
a5:9b:f4:ab:80:e2:45:c1:e1:7d:22:c9:b2:5a:47:ad:8b:7b:
44:b3:90:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:20:56 2025 by rpki-client