Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/WWGuxWwOFY21-sq4HIC0wykVe34.roa
File: WWGuxWwOFY21-sq4HIC0wykVe34.roa (raw, json)
Hash identifier: ZuT+qy1+UQCBXgp7r/Oc3Ne9tNd80nEcuH10OPYp4Ng=
Subject key identifier: 59:61:AE:C5:6C:0E:15:8D:B5:FA:CA:B8:1C:80:B4:C3:29:15:7B:7E
Certificate issuer: /CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Certificate serial: 01987AB65F2BCE8FD86990C5AFBE568C348C
Authority key identifier: 94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/WWGuxWwOFY21-sq4HIC0wykVe34.roa
Signing time: Tue 05 Aug 2025 14:50:28 +0000
ROA not before: Tue 05 Aug 2025 14:50:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204957
IP address blocks: 5.34.176.0/23 maxlen: 23
5.34.178.0/23 maxlen: 23
45.90.56.0/22 maxlen: 22
62.233.57.0/24 maxlen: 24
82.117.252.0/23 maxlen: 23
82.117.254.0/24 maxlen: 24
82.117.255.0/24 maxlen: 24
82.118.20.0/22 maxlen: 22
85.90.196.0/24 maxlen: 24
85.90.199.0/24 maxlen: 24
195.123.232.0/22 maxlen: 22
195.123.236.0/22 maxlen: 22
195.123.240.0/22 maxlen: 22
195.123.244.0/22 maxlen: 22
195.211.96.0/23 maxlen: 23
195.211.98.0/23 maxlen: 23
217.12.194.0/24 maxlen: 24
217.12.206.0/23 maxlen: 23
2a05:9400::/32 maxlen: 32
2a05:9401::/32 maxlen: 32
2a05:9402::/32 maxlen: 32
2a05:9403::/32 maxlen: 32
2a05:9404::/32 maxlen: 32
2a05:9405::/32 maxlen: 32
2a05:9406::/32 maxlen: 32
2a12:6fc0::/32 maxlen: 32
2a12:6fc1::/32 maxlen: 32
2a12:6fc2::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:b6:5f:2b:ce:8f:d8:69:90:c5:af:be:56:8c:34:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Validity
Not Before: Aug 5 14:50:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5961aec56c0e158db5facab81c80b4c329157b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b5:36:dc:59:ec:66:ae:ca:3e:77:72:3d:fe:
2e:d9:f9:8c:4a:da:b6:99:22:fd:7e:40:1d:d7:67:
f5:85:e7:2e:6f:9c:97:a5:89:33:f7:c3:24:05:11:
ab:7f:72:cb:82:c0:bc:65:68:e2:94:b9:89:81:50:
c3:10:31:e9:2c:43:b8:d1:11:49:ca:82:0a:18:8f:
2d:15:a0:27:20:2e:35:62:cd:38:b7:a2:96:49:4f:
99:dd:30:62:d6:1c:c8:88:3c:90:57:f8:ce:98:0d:
39:bc:ab:a1:b1:81:3b:81:d5:0a:73:4a:9c:e4:9e:
a5:07:48:86:88:98:04:17:1c:27:df:f3:a8:69:2c:
53:69:b6:98:ac:6b:ec:1a:5c:c3:9e:e0:aa:64:81:
b4:cb:eb:5d:30:20:04:e9:80:ee:38:cf:01:86:38:
7d:6e:3d:38:f9:9d:c8:db:87:f0:51:11:36:69:6b:
34:6b:0e:4b:b2:05:14:29:9f:c7:8b:bb:f0:fb:df:
ec:0e:1c:6c:f9:19:31:cc:52:f7:36:3f:3d:be:5b:
f6:7a:31:c0:08:d3:ea:24:9d:21:96:86:a2:4e:74:
bd:3d:32:d6:05:16:67:2a:89:57:50:ef:03:b9:c5:
66:52:c4:54:d6:79:a7:9b:9c:cb:d1:c2:b5:54:a3:
e8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:61:AE:C5:6C:0E:15:8D:B5:FA:CA:B8:1C:80:B4:C3:29:15:7B:7E
X509v3 Authority Key Identifier:
keyid:94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/WWGuxWwOFY21-sq4HIC0wykVe34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.176.0/22
45.90.56.0/22
62.233.57.0/24
82.117.252.0/22
82.118.20.0/22
85.90.196.0/24
85.90.199.0/24
195.123.232.0-195.123.247.255
195.211.96.0/22
217.12.194.0/24
217.12.206.0/23
IPv6:
2a05:9400::-2a05:9406:ffff:ffff:ffff:ffff:ffff:ffff
2a12:6fc0::-2a12:6fc2:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
43:14:a8:2b:4e:33:42:33:e1:88:87:b7:c6:39:8f:3a:49:e5:
0b:a7:da:14:2c:49:33:ec:ed:50:43:7c:4f:cc:c6:6d:27:00:
7e:27:54:50:56:d1:c8:e9:da:5e:c0:b1:e4:c0:f0:0b:02:e8:
d6:27:25:86:6b:f7:cb:96:bf:96:a8:df:33:a2:0b:18:66:fa:
7f:64:c6:4d:a6:4a:40:c8:f5:5c:2f:f4:78:f5:cd:79:dd:27:
5f:39:f3:75:20:01:64:bf:e9:b6:3f:b3:07:c9:8f:f0:93:62:
4f:f8:a6:60:7d:df:5f:5c:3e:8d:ca:1b:16:5e:18:a2:e3:98:
f3:f5:95:77:f0:82:2c:72:a9:42:76:13:03:fd:e2:d9:bc:72:
74:79:df:75:a1:6e:3f:01:39:9e:b2:b5:7c:d6:a5:b9:16:4e:
79:92:fa:bc:f8:33:ad:57:b7:66:2f:d6:50:44:7c:af:e5:85:
b1:ee:3a:01:c5:a3:97:21:41:2b:20:9e:90:67:85:bc:1e:3d:
0f:85:eb:1f:0e:bf:56:7a:8a:ec:3c:82:7a:21:e9:52:40:03:
81:0a:a6:51:3e:76:14:28:5a:01:36:6a:e4:7a:21:53:2c:f2:
a4:3a:70:7e:10:0f:59:2f:01:1a:e6:d7:e1:d2:ee:18:08:51:
a4:49:53:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:52:26 2025 by rpki-client