Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/WPGIrlL6-56XMTh0N9exkn0C7KU.roa
File:                     WPGIrlL6-56XMTh0N9exkn0C7KU.roa (raw, json)
Hash identifier:          XhH/KoKDVsAzKRkfI7VSMtAGYqImKs/WXMlYwDShz10=
Subject key identifier:   58:F1:88:AE:52:FA:FB:9E:97:31:38:74:37:D7:B1:92:7D:02:EC:A5
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       019FC226E3E9B54969867CC2A97485A7ECAB
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/WPGIrlL6-56XMTh0N9exkn0C7KU.roa
Signing time:             Sun 02 Aug 2026 11:05:56 +0000
ROA not before:           Sun 02 Aug 2026 11:05:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     59796
IP address blocks:        5.175.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Aug 2026 14:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:c2:26:e3:e9:b5:49:69:86:7c:c2:a9:74:85:a7:ec:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Aug  2 11:05:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=58f188ae52fafb9e9731387437d7b1927d02eca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:13:d4:6e:e2:20:33:72:ea:fe:a5:f1:fa:98:
                    37:2b:81:33:83:76:7a:47:01:f4:ff:3d:b6:24:1f:
                    ec:d4:94:b5:21:d7:90:04:9d:6c:36:33:0f:9c:e8:
                    e8:74:0b:14:6a:35:8b:0e:24:6e:fd:a8:a2:fd:0c:
                    17:5a:03:4d:96:43:ef:3c:9b:53:4b:2f:95:bc:d9:
                    4f:44:d7:d2:1b:ea:e9:39:34:fc:b1:3b:e4:5d:d1:
                    96:20:ac:fc:fb:91:7d:b3:fd:7f:74:28:ab:d7:fb:
                    fc:6f:67:ac:b2:39:23:b8:d1:06:d0:89:a1:58:1d:
                    6e:08:43:ef:a4:9c:a2:39:01:48:7f:35:9c:04:c0:
                    12:7d:c2:f4:b5:53:aa:f7:e9:30:f5:0c:93:c9:a7:
                    38:f8:61:98:09:fc:81:5b:a6:56:a0:b9:4b:da:0c:
                    ec:ff:3f:4a:f7:3e:0c:10:d6:90:2a:9b:0c:ea:f0:
                    9e:7d:8e:fc:06:23:71:24:b5:2f:4b:10:9d:d0:24:
                    78:dd:8b:32:e0:59:82:0c:e9:08:ac:6a:90:e4:4c:
                    12:ed:a7:9a:08:d7:5c:cd:f9:ad:43:b8:27:4d:21:
                    df:2d:a0:c7:4b:f9:ca:37:8a:85:a0:65:44:2e:0a:
                    a1:19:ac:0d:c6:63:61:ca:6f:b7:8e:0b:d7:42:b9:
                    de:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F1:88:AE:52:FA:FB:9E:97:31:38:74:37:D7:B1:92:7D:02:EC:A5
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/WPGIrlL6-56XMTh0N9exkn0C7KU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.175.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:91:5f:63:ac:3d:be:e3:83:5c:08:e3:7a:31:5e:33:7a:07:
         9e:e9:4b:3e:24:1f:8d:c5:a8:01:17:52:7c:bc:47:a9:f6:dc:
         7e:55:27:40:19:a2:15:6d:17:de:ad:17:c0:3e:fc:7c:24:28:
         dc:5f:d1:ce:2b:2e:0a:32:82:e1:c9:7c:4e:dc:0e:2e:96:fe:
         2d:cc:b9:40:ca:e9:e3:d6:a7:c4:88:3d:a0:1f:79:27:88:6e:
         cc:9b:91:4e:11:6a:63:5b:58:5b:7c:45:56:10:32:8e:ff:c4:
         b1:a3:62:b0:9d:2b:57:2b:5d:5b:96:64:23:0a:38:db:fc:b2:
         16:00:3f:a3:4c:f5:a3:3d:6e:7d:28:f4:a6:6a:b4:32:79:bf:
         3b:fc:e1:da:20:9f:f8:00:00:83:a9:ca:e8:4b:6a:77:63:d7:
         03:e6:69:4c:ca:d2:93:07:3c:ad:89:e4:78:1d:f7:d6:8b:a5:
         24:ed:af:f9:2f:43:2b:73:6d:e9:99:1b:15:f5:02:4d:2d:0d:
         9d:3a:78:4b:20:ea:30:e7:f7:00:ea:8e:ba:98:d8:51:26:67:
         63:4a:29:9d:b5:ef:11:52:8a:17:6e:91:26:7b:b9:09:6b:4d:
         e7:f2:80:6e:ea:7d:ac:1c:2c:6b:5e:56:b2:5b:9d:40:9b:3b:
         06:7b:d2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 21:26:55 2026 by rpki-client