Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/Wehue_-HxeDHkmX7UNgERXyOUfg.roa
File: Wehue_-HxeDHkmX7UNgERXyOUfg.roa (raw, json)
Hash identifier: D2snlKMJEA3g9LqAQOT1ggpVBQhz+mPpIae+KNFmfEQ=
Subject key identifier: 59:E8:6E:7B:FF:87:C5:E0:C7:92:65:FB:50:D8:04:45:7C:8E:51:F8
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 019A2B3BAFAAD8ACB75862EDACE2E7F7F74B
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/Wehue_-HxeDHkmX7UNgERXyOUfg.roa
Signing time: Tue 28 Oct 2025 14:32:03 +0000
ROA not before: Tue 28 Oct 2025 14:32:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 92.50.14.0/24 maxlen: 24
92.50.15.0/24 maxlen: 24
92.50.16.0/24 maxlen: 24
92.50.17.0/24 maxlen: 24
92.50.18.0/24 maxlen: 24
92.50.19.0/24 maxlen: 24
92.50.20.0/24 maxlen: 24
92.50.21.0/24 maxlen: 24
92.50.22.0/24 maxlen: 24
92.50.23.0/24 maxlen: 24
92.50.24.0/24 maxlen: 24
92.50.25.0/24 maxlen: 24
92.50.26.0/24 maxlen: 24
92.50.27.0/24 maxlen: 24
92.50.28.0/24 maxlen: 24
92.50.29.0/24 maxlen: 24
92.50.30.0/24 maxlen: 24
92.50.31.0/24 maxlen: 24
92.50.32.0/24 maxlen: 24
92.50.33.0/24 maxlen: 24
92.50.34.0/24 maxlen: 24
92.50.35.0/24 maxlen: 24
92.50.36.0/24 maxlen: 24
92.50.37.0/24 maxlen: 24
92.50.38.0/24 maxlen: 24
92.50.39.0/24 maxlen: 24
92.50.40.0/24 maxlen: 24
92.50.41.0/24 maxlen: 24
92.50.42.0/24 maxlen: 24
92.50.43.0/24 maxlen: 24
92.50.44.0/24 maxlen: 24
92.50.45.0/24 maxlen: 24
92.50.46.0/24 maxlen: 24
92.50.47.0/24 maxlen: 24
92.50.48.0/24 maxlen: 24
92.50.49.0/24 maxlen: 24
92.50.50.0/24 maxlen: 24
92.50.51.0/24 maxlen: 24
92.50.52.0/24 maxlen: 24
92.50.53.0/24 maxlen: 24
92.50.54.0/24 maxlen: 24
92.50.55.0/24 maxlen: 24
92.50.56.0/24 maxlen: 24
92.50.57.0/24 maxlen: 24
92.50.58.0/24 maxlen: 24
92.50.59.0/24 maxlen: 24
92.50.60.0/24 maxlen: 24
92.50.61.0/24 maxlen: 24
92.50.62.0/24 maxlen: 24
92.50.63.0/24 maxlen: 24
147.136.78.0/24 maxlen: 24
147.136.79.0/24 maxlen: 24
147.136.84.0/24 maxlen: 24
147.136.86.0/24 maxlen: 24
147.136.87.0/24 maxlen: 24
168.199.133.0/24 maxlen: 24
168.199.134.0/24 maxlen: 24
168.199.135.0/24 maxlen: 24
168.199.136.0/24 maxlen: 24
168.199.137.0/24 maxlen: 24
168.199.138.0/24 maxlen: 24
168.199.139.0/24 maxlen: 24
168.199.140.0/24 maxlen: 24
168.199.141.0/24 maxlen: 24
168.199.142.0/24 maxlen: 24
168.199.143.0/24 maxlen: 24
168.199.144.0/24 maxlen: 24
168.199.145.0/24 maxlen: 24
168.199.146.0/24 maxlen: 24
168.199.147.0/24 maxlen: 24
168.199.148.0/24 maxlen: 24
168.199.149.0/24 maxlen: 24
168.199.150.0/24 maxlen: 24
168.199.151.0/24 maxlen: 24
168.199.152.0/24 maxlen: 24
168.199.153.0/24 maxlen: 24
168.199.154.0/24 maxlen: 24
168.199.155.0/24 maxlen: 24
168.199.156.0/24 maxlen: 24
168.199.157.0/24 maxlen: 24
168.199.158.0/24 maxlen: 24
168.199.159.0/24 maxlen: 24
168.199.164.0/24 maxlen: 24
168.199.166.0/24 maxlen: 24
168.199.167.0/24 maxlen: 24
168.199.168.0/24 maxlen: 24
168.199.174.0/24 maxlen: 24
168.199.192.0/24 maxlen: 24
168.199.193.0/24 maxlen: 24
168.199.202.0/24 maxlen: 24
168.199.203.0/24 maxlen: 24
168.199.204.0/24 maxlen: 24
168.199.206.0/24 maxlen: 24
168.199.208.0/24 maxlen: 24
168.199.211.0/24 maxlen: 24
168.199.216.0/24 maxlen: 24
168.199.217.0/24 maxlen: 24
168.199.218.0/24 maxlen: 24
168.199.219.0/24 maxlen: 24
168.199.220.0/24 maxlen: 24
168.199.221.0/24 maxlen: 24
168.199.222.0/24 maxlen: 24
168.199.223.0/24 maxlen: 24
168.199.224.0/24 maxlen: 24
168.199.226.0/24 maxlen: 24
168.199.228.0/24 maxlen: 24
168.199.229.0/24 maxlen: 24
168.199.230.0/24 maxlen: 24
168.199.232.0/24 maxlen: 24
168.199.240.0/24 maxlen: 24
168.199.241.0/24 maxlen: 24
168.199.242.0/24 maxlen: 24
168.199.243.0/24 maxlen: 24
168.199.244.0/24 maxlen: 24
168.199.245.0/24 maxlen: 24
168.199.246.0/24 maxlen: 24
168.199.247.0/24 maxlen: 24
168.199.248.0/24 maxlen: 24
168.199.249.0/24 maxlen: 24
168.199.250.0/24 maxlen: 24
168.199.251.0/24 maxlen: 24
168.199.252.0/24 maxlen: 24
168.199.253.0/24 maxlen: 24
168.199.254.0/24 maxlen: 24
168.199.255.0/24 maxlen: 24
185.100.58.0/24 maxlen: 24
192.95.85.0/24 maxlen: 24
192.95.86.0/24 maxlen: 24
192.95.91.0/24 maxlen: 24
2001:678:8b4::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:3b:af:aa:d8:ac:b7:58:62:ed:ac:e2:e7:f7:f7:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Oct 28 14:32:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59e86e7bff87c5e0c79265fb50d804457c8e51f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ec:71:33:5c:07:1d:ed:72:f7:c1:29:20:e7:
98:f6:77:c3:f1:9e:26:d0:79:3e:fa:f5:20:09:e7:
be:04:26:7a:6e:11:96:ee:8a:08:bd:69:40:f2:6c:
f2:4a:da:25:ce:ff:a2:b6:0c:69:a2:37:ca:8d:96:
ab:91:82:12:8e:b2:d7:c4:2c:68:c8:b8:2c:a8:b1:
b6:50:68:3f:21:5b:7f:f5:e8:50:c9:a9:72:4a:e0:
e0:65:47:3c:7e:05:52:95:80:8f:09:16:00:4d:67:
00:e9:0f:78:e8:23:d0:ab:cf:7f:24:88:ac:0a:24:
17:f9:d8:ea:a3:e3:37:12:83:c4:df:d2:cf:83:45:
d2:5f:93:59:77:cc:98:62:bf:e1:40:91:88:bc:cd:
35:d0:9e:52:49:e4:75:79:7f:67:80:f6:66:29:60:
8a:ce:0d:ba:30:ce:8a:82:4d:67:d6:71:95:2f:25:
df:41:b1:b4:ab:a7:3f:b1:16:4c:84:1f:4a:5d:dd:
fd:ab:be:e8:b8:a6:85:c1:fa:bd:57:c6:93:1a:3b:
8c:70:66:f4:3b:a1:de:aa:1f:27:cb:2e:9e:e7:79:
7c:dd:bb:d9:81:51:64:0f:49:4d:14:03:5b:58:35:
ba:a8:19:b8:53:7b:b7:95:62:5f:66:c4:45:c9:2b:
6f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E8:6E:7B:FF:87:C5:E0:C7:92:65:FB:50:D8:04:45:7C:8E:51:F8
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/Wehue_-HxeDHkmX7UNgERXyOUfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.50.14.0-92.50.63.255
147.136.78.0/23
147.136.84.0/24
147.136.86.0/23
168.199.133.0-168.199.159.255
168.199.164.0/24
168.199.166.0-168.199.168.255
168.199.174.0/24
168.199.192.0/23
168.199.202.0-168.199.204.255
168.199.206.0/24
168.199.208.0/24
168.199.211.0/24
168.199.216.0-168.199.224.255
168.199.226.0/24
168.199.228.0-168.199.230.255
168.199.232.0/24
168.199.240.0/20
185.100.58.0/24
192.95.85.0-192.95.86.255
192.95.91.0/24
IPv6:
2001:678:8b4::/48
Signature Algorithm: sha256WithRSAEncryption
4a:92:29:e4:b7:e0:90:de:1a:3d:11:a8:ee:27:31:e8:c0:a8:
59:59:62:d8:6c:a8:6d:d4:eb:99:81:75:1b:4f:57:21:22:c4:
af:18:37:22:80:2e:91:e7:42:69:29:d0:67:44:af:54:53:0f:
7c:c4:fa:67:14:d1:e5:0c:d9:7c:07:3b:f2:91:ea:9f:75:34:
33:7b:11:a8:e2:e8:9a:79:e9:83:14:c1:1a:e0:68:01:d7:9f:
af:9a:98:22:fe:cd:b0:71:d7:ee:75:4b:24:97:41:a9:0d:6a:
22:23:4b:2e:3b:56:50:7c:b0:b0:bd:24:55:03:23:5b:3f:77:
bd:90:88:c0:46:1c:e2:f9:4e:9e:ef:dc:29:cb:bb:82:4b:09:
91:71:9f:ef:91:50:1e:4e:14:b9:01:a9:03:60:52:45:a1:b9:
af:ae:77:11:3c:49:ab:bd:86:46:cf:ca:5f:8f:79:53:13:52:
cb:18:c1:f3:dc:01:e7:84:07:41:0f:bd:51:f1:8d:6f:0f:73:
22:9f:75:81:45:55:a7:e8:e0:fb:5a:bc:cb:6e:29:38:5c:a5:
24:31:54:88:bb:52:b8:61:5a:56:21:17:fa:5f:07:1f:57:45:
ef:68:0f:78:5e:e0:15:5a:fa:6f:15:fa:1e:d8:49:4a:19:eb:
ab:6e:99:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:38:20 2025 by rpki-client