Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/WQwpfImRvEjprBMZ7RT8VyCcJJE.roa
File: WQwpfImRvEjprBMZ7RT8VyCcJJE.roa (raw, json)
Hash identifier: cJJ+wKMG21Vgdcj91hphdVBR1WAPx0N5h9uVseAGk0w=
Subject key identifier: 59:0C:29:7C:89:91:BC:48:E9:AC:13:19:ED:14:FC:57:20:9C:24:91
Certificate issuer: /CN=3210620d9889ffa1dd2e8911c416eebcc9711d2f
Certificate serial: 019F23687A2AF6B5A8071B6394E46158DAA5
Authority key identifier: 32:10:62:0D:98:89:FF:A1:DD:2E:89:11:C4:16:EE:BC:C9:71:1D:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MhBiDZiJ_6HdLokRxBbuvMlxHS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/WQwpfImRvEjprBMZ7RT8VyCcJJE.roa
Signing time: Thu 02 Jul 2026 15:17:57 +0000
ROA not before: Thu 02 Jul 2026 15:17:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5466
IP address blocks: 51.171.0.0/16 maxlen: 16
62.77.160.0/19 maxlen: 19
82.141.192.0/18 maxlen: 18
83.70.0.0/15 maxlen: 15
83.174.160.0/19 maxlen: 19
86.40.0.0/13 maxlen: 13
86.43.56.0/24 maxlen: 24
86.43.60.0/24 maxlen: 24
86.43.88.0/24 maxlen: 24
86.43.151.0/24 maxlen: 24
95.44.0.0/15 maxlen: 15
159.134.0.0/16 maxlen: 16
159.134.0.0/24 maxlen: 24
159.134.191.0/24 maxlen: 24
159.134.237.0/24 maxlen: 24
159.134.250.0/24 maxlen: 24
185.57.112.0/22 maxlen: 22
194.106.128.0/19 maxlen: 19
194.125.128.0/18 maxlen: 18
194.125.192.0/19 maxlen: 19
195.7.32.0/19 maxlen: 19
213.94.128.0/17 maxlen: 17
213.190.128.0/19 maxlen: 19
217.183.0.0/16 maxlen: 16
2001:bb0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/MhBiDZiJ_6HdLokRxBbuvMlxHS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/MhBiDZiJ_6HdLokRxBbuvMlxHS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MhBiDZiJ_6HdLokRxBbuvMlxHS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:7a:2a:f6:b5:a8:07:1b:63:94:e4:61:58:da:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3210620d9889ffa1dd2e8911c416eebcc9711d2f
Validity
Not Before: Jul 2 15:17:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=590c297c8991bc48e9ac1319ed14fc57209c2491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:55:19:4e:b9:06:9d:bc:13:fc:3b:50:29:79:
dd:f5:81:94:e5:64:8d:c2:d6:49:44:79:2b:bc:c2:
08:62:19:03:9d:44:3c:b2:4a:08:c5:3a:95:7d:3a:
e8:cc:4c:2a:ff:31:a8:51:33:39:bd:46:86:eb:3f:
1e:b5:a5:9b:6c:34:cc:94:a1:a4:20:48:62:d2:c3:
9c:d1:8b:2f:ec:a8:fb:23:02:24:d0:4c:10:5f:45:
68:be:0a:5b:e6:3d:67:19:9c:e5:59:c4:42:5b:fa:
fc:33:8e:ca:84:d4:cb:4e:1f:01:21:7f:ba:6e:31:
59:75:ac:30:2e:9a:6b:93:a6:e7:fb:4f:62:d6:e0:
26:27:e7:c1:ba:94:ba:ca:09:23:37:54:33:2e:df:
4d:a8:58:cd:7c:78:bd:22:7c:c2:93:5f:79:e6:d2:
b9:79:1c:fd:2e:c4:36:13:f9:0d:e0:46:06:a3:bc:
2a:f7:43:1d:da:98:cc:81:5e:e5:9e:fd:1f:a9:2b:
bf:61:c7:06:ff:93:73:64:8e:6b:c3:ba:9e:d6:dc:
58:67:d1:aa:88:b0:07:f9:a0:a7:b2:a7:f3:79:ca:
67:c0:63:cc:a8:3c:2f:9a:d2:17:ea:2a:16:67:9f:
4d:af:33:9b:19:f2:32:94:26:70:14:bc:6e:7a:be:
94:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:0C:29:7C:89:91:BC:48:E9:AC:13:19:ED:14:FC:57:20:9C:24:91
X509v3 Authority Key Identifier:
keyid:32:10:62:0D:98:89:FF:A1:DD:2E:89:11:C4:16:EE:BC:C9:71:1D:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MhBiDZiJ_6HdLokRxBbuvMlxHS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/WQwpfImRvEjprBMZ7RT8VyCcJJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/MhBiDZiJ_6HdLokRxBbuvMlxHS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.171.0.0/16
62.77.160.0/19
82.141.192.0/18
83.70.0.0/15
83.174.160.0/19
86.40.0.0/13
95.44.0.0/15
159.134.0.0/16
185.57.112.0/22
194.106.128.0/19
194.125.128.0-194.125.223.255
195.7.32.0/19
213.94.128.0/17
213.190.128.0/19
217.183.0.0/16
IPv6:
2001:bb0::/29
Signature Algorithm: sha256WithRSAEncryption
75:a1:d7:4b:2e:9f:aa:96:b4:15:6f:bf:e4:99:2c:3f:49:cc:
ec:cf:d0:9f:23:00:8a:82:f9:c0:b7:a7:d8:8a:03:26:31:72:
66:cc:48:c3:89:b7:1e:db:a5:f5:23:56:56:7d:1b:01:a3:ac:
38:a4:8c:e3:f9:92:ea:db:cc:89:fc:8c:c1:cd:71:19:39:8f:
17:9d:bc:99:d5:9f:d9:d8:5a:67:51:0f:9b:d7:c0:a8:4a:2f:
b5:1c:62:ad:7b:78:3e:e5:4d:bc:4c:c7:b8:7c:a7:c2:d5:75:
07:cf:d4:7c:0e:da:f5:42:6f:85:12:36:3a:a6:1e:73:79:4e:
ee:fb:83:16:68:d7:7a:1a:f4:6b:75:cf:62:c8:0d:51:55:65:
90:9c:6d:69:f4:a3:f1:91:94:a8:b4:73:fd:9a:08:2b:df:95:
ce:aa:5d:ce:a9:86:f4:2e:f3:0e:dc:71:05:c9:5b:75:d4:72:
0d:87:10:f2:d2:bd:9c:54:13:ea:85:b7:60:9f:c9:a7:07:30:
8d:8b:8b:cf:dd:88:a2:20:3e:5b:4e:66:97:d1:35:1a:23:34:
d5:3a:8b:a3:82:85:cb:1f:6c:86:19:33:17:0c:9c:09:88:6c:
62:f5:85:60:3f:9b:27:a6:6d:7e:3a:1a:0f:42:e8:57:34:cf:
af:04:e1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:58:40 2026 by rpki-client