Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/WoIMHb8WeUssPi-f_0s2QR2eZUo.roa
File: WoIMHb8WeUssPi-f_0s2QR2eZUo.roa (raw, json)
Hash identifier: 8hb6qj6bDv5rS8quAiggfoIN2Jx7OdAHlYixb8/xJFA=
Subject key identifier: 5A:82:0C:1D:BF:16:79:4B:2C:3E:2F:9F:FF:4B:36:41:1D:9E:65:4A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019D4C61BB2AB64A9317D8808E0B651410A3
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/WoIMHb8WeUssPi-f_0s2QR2eZUo.roa
Signing time: Thu 02 Apr 2026 04:09:26 +0000
ROA not before: Thu 02 Apr 2026 04:09:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200912
IP address blocks: 5.83.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4c:61:bb:2a:b6:4a:93:17:d8:80:8e:0b:65:14:10:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 2 04:09:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a820c1dbf16794b2c3e2f9fff4b36411d9e654a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:44:69:19:56:60:74:e3:b5:a8:83:f5:43:25:
6c:52:d5:3e:9e:45:b0:a3:b3:c3:71:03:68:5e:24:
f7:28:d6:33:2c:14:93:ff:ae:8f:36:86:d9:3d:4e:
46:55:1e:12:d3:c0:6f:a1:ed:a1:66:de:43:b4:80:
bd:ff:4a:5b:9f:da:ff:ff:ea:f8:d9:eb:85:a7:fa:
8b:50:0b:d9:c3:30:82:9a:76:4c:73:a1:21:5f:bf:
98:0f:6c:01:5c:c0:66:98:31:18:df:e3:5e:b7:f9:
6b:35:bf:ae:3a:85:7c:ad:9e:29:3b:67:d8:9a:ed:
7b:3a:e0:08:45:18:26:7e:48:34:3d:cc:65:9f:cb:
6c:41:31:a8:17:ee:44:a6:68:48:64:cd:9f:9a:44:
69:8f:a2:42:d0:c3:b5:7c:c0:11:9d:d4:ef:11:74:
c2:a4:de:ae:02:97:55:ac:34:07:df:d3:21:2d:b8:
30:4a:5d:59:5f:98:8e:b2:a9:9e:a6:a2:51:2e:8c:
0a:e0:61:7b:2c:df:8d:4f:dc:b7:35:f8:07:61:ff:
27:4a:0a:8e:8a:0d:8d:d8:8c:72:84:95:d1:aa:ad:
8d:80:85:2f:66:3e:40:80:e4:6f:77:b3:a6:e7:c5:
5d:c3:ef:0e:40:6b:e7:f3:b8:e7:10:a4:9a:3f:ab:
82:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:82:0C:1D:BF:16:79:4B:2C:3E:2F:9F:FF:4B:36:41:1D:9E:65:4A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/WoIMHb8WeUssPi-f_0s2QR2eZUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.143.0/24
Signature Algorithm: sha256WithRSAEncryption
16:c1:6d:76:99:78:fe:81:44:cf:8e:52:43:87:e4:5a:8d:f8:
4c:96:91:c8:1a:82:07:0d:10:ce:60:e6:7a:18:0d:5d:90:f1:
d2:f2:5c:b5:55:8c:55:a8:f4:52:ed:00:81:93:a7:f3:37:c5:
99:3a:67:1c:35:6a:d6:18:ad:bd:bd:46:f0:0e:8f:60:7b:94:
1d:c6:e1:22:2d:6b:a2:92:f3:69:ca:0e:79:2c:6b:73:d3:7d:
f3:cc:5e:c1:a2:a8:7c:ce:ee:23:e0:70:d3:34:b7:a7:09:94:
ae:91:71:67:e8:cf:ba:43:55:6a:f3:87:30:76:2a:0a:88:4a:
12:d9:71:b8:2b:ba:d2:88:56:4e:4b:48:33:77:20:49:5b:c2:
37:d1:e0:3f:00:9c:7a:bd:99:02:32:11:69:b7:94:70:f0:8e:
9f:e4:95:bd:fb:89:a9:d1:e9:16:9e:72:ad:c4:ce:83:dc:89:
d5:4e:5f:3a:b3:da:62:fd:48:e2:74:cb:8c:e8:a6:28:d1:0a:
aa:f0:b6:23:cc:37:42:41:cc:a5:c7:b0:ee:41:87:62:be:ae:
a2:65:9d:7b:aa:0f:75:cf:89:18:6f:fc:a2:63:94:9c:f6:1a:
5e:2f:11:f3:80:b8:e7:11:96:ee:2c:2e:20:1a:37:21:d2:16:
01:81:90:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 11:43:37 2026 by rpki-client