Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/WUaBz28e2W0xUefV3bolJS92Btw.roa
File: WUaBz28e2W0xUefV3bolJS92Btw.roa (raw, json)
Hash identifier: uxs4VTLGZmXHL35HMBbvKwueYF9qCUBG2PPZnVqWWnY=
Subject key identifier: 59:46:81:CF:6F:1E:D9:6D:31:51:E7:D5:DD:BA:25:25:2F:76:06:DC
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A1528D00C78FCAC509FC10D15762DB0927
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/WUaBz28e2W0xUefV3bolJS92Btw.roa
Signing time: Mon 19 Oct 2026 05:05:34 +0000
ROA not before: Mon 19 Oct 2026 05:05:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198596
IP address blocks: 5.231.23.0/24 maxlen: 24
77.90.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 04:11:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:52:8d:00:c7:8f:ca:c5:09:fc:10:d1:57:62:db:09:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 19 05:05:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=594681cf6f1ed96d3151e7d5ddba25252f7606dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2f:17:6e:be:a3:9f:1d:34:7e:6a:d1:5b:5f:
7a:6e:42:3c:db:1c:63:92:57:71:ed:01:d3:9a:7b:
d3:48:64:93:95:01:fd:fe:03:82:f1:63:56:10:36:
b5:af:aa:cc:4f:d3:a4:63:d2:c8:56:6c:be:35:9e:
b2:ee:b0:dd:13:d0:38:4c:7d:90:d9:21:d2:c4:08:
11:93:81:53:a2:9d:ef:1a:87:39:33:a9:6b:91:37:
61:76:37:6c:00:fa:06:59:f8:d6:e2:b7:d7:3e:d5:
c6:cc:7b:48:98:07:ae:52:25:58:e1:60:2a:24:42:
b3:b9:39:ed:ff:a9:12:32:c0:0a:cc:90:8e:5b:06:
37:78:a0:25:aa:b5:74:ae:73:01:da:df:98:b8:aa:
bc:76:96:41:32:50:83:09:0a:40:9a:f6:5f:22:86:
65:5a:96:5e:fa:7d:bf:c7:ae:e1:c9:c9:f5:79:f9:
59:e6:67:c6:ab:3e:79:39:4e:6a:af:4b:ce:ed:47:
6a:73:3e:3a:f4:0b:07:a9:3f:7c:72:a3:a7:47:89:
b8:cc:14:04:31:55:b5:aa:6f:0f:6a:22:32:38:87:
59:ef:f0:1f:f7:ea:15:4e:75:28:de:23:ef:2f:0e:
3d:90:f9:81:99:fe:8f:e1:04:75:be:e4:a5:19:0c:
a2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:46:81:CF:6F:1E:D9:6D:31:51:E7:D5:DD:BA:25:25:2F:76:06:DC
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/WUaBz28e2W0xUefV3bolJS92Btw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.23.0/24
77.90.59.0/24
Signature Algorithm: sha256WithRSAEncryption
79:18:2e:97:c6:46:5a:14:c3:0a:ec:21:c8:00:02:3e:75:b6:
11:01:8e:36:c1:04:e6:f0:af:ee:da:8a:d4:fe:86:8b:62:05:
83:57:56:8a:17:4a:1b:b5:de:61:bb:2a:0f:63:57:e5:a5:69:
c6:90:8e:36:3c:43:5a:f8:31:3a:f9:62:c6:a4:92:5b:d9:16:
c9:5e:69:38:65:ae:b0:f1:cc:60:26:b7:d1:e0:43:88:df:01:
98:c6:b8:c5:b9:92:a6:79:03:38:e8:0e:fa:62:60:a2:e9:f6:
87:5c:4e:b5:9e:74:b5:85:3f:df:15:82:09:cb:9a:ac:ca:09:
38:c8:2e:41:90:be:79:02:ff:e3:3a:d7:64:32:95:73:a2:c4:
37:1b:15:88:bc:7f:04:4b:7d:80:03:0d:18:79:40:a8:50:76:
35:5d:9e:fe:1a:7e:92:47:9d:61:ed:15:98:6d:d3:1e:1e:09:
60:26:a9:6f:97:a0:db:f5:06:8a:a6:0f:b1:02:7b:57:3c:69:
6e:fd:70:6b:0b:85:a2:93:1c:ca:4f:87:2b:1f:7d:2e:ef:70:
ed:7d:9d:08:7e:c1:ba:a6:78:90:21:2c:09:b3:e5:d5:2f:7e:
36:67:42:c2:b4:39:53:6a:06:2d:99:8c:49:9e:a2:28:70:4b:
36:b5:c0:7a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaFSjQDHj8rFCfwQ0Vdi2wknMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYxMDE5MDUwNTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTQ2ODFjZjZmMWVkOTZkMzE1MWU3ZDVkZGJhMjUyNTJmNzYwNmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvy8Xbr6jnx00fmrRW196bkI82xxj
kldx7QHTmnvTSGSTlQH9/gOC8WNWEDa1r6rMT9OkY9LIVmy+NZ6y7rDdE9A4TH2Q
2SHSxAgRk4FTop3vGoc5M6lrkTdhdjdsAPoGWfjW4rfXPtXGzHtImAeuUiVY4WAq
JEKzuTnt/6kSMsAKzJCOWwY3eKAlqrV0rnMB2t+YuKq8dpZBMlCDCQpAmvZfIoZl
WpZe+n2/x67hycn1eflZ5mfGqz55OU5qr0vO7Udqcz469AsHqT98cqOnR4m4zBQE
MVW1qm8PaiIyOIdZ7/Af9+oVTnUo3iPvLw49kPmBmf6P4QR1vuSlGQyihwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFlGgc9vHtltMVHn1d26JSUvdgbcMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvV1VhQnoyOGUyVzB4VWVmVjNib2xKUzkyQnR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABecXAwQA
TVo7MA0GCSqGSIb3DQEBCwUAA4IBAQB5GC6XxkZaFMMK7CHIAAI+dbYRAY42wQTm
8K/u2orU/oaLYgWDV1aKF0obtd5huyoPY1flpWnGkI42PENa+DE6+WLGpJJb2RbJ
Xmk4Za6w8cxgJrfR4EOI3wGYxrjFuZKmeQM46A76YmCi6faHXE61nnS1hT/fFYIJ
y5qsygk4yC5BkL55Av/jOtdkMpVzosQ3GxWIvH8ES32AAw0YeUCoUHY1XZ7+Gn6S
R51h7RWYbdMeHglgJqlvl6Db9QaKpg+xAntXPGlu/XBrC4WikxzKT4crH30u73Dt
fZ0IfsG6pniQISwJs+XVL342Z0LCtDlTagYtmYxJnqIocEs2tcB6
-----END CERTIFICATE-----
Generated at Tue Oct 20 12:13:53 2026 by rpki-client