Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wfm5PLHz4myXHD2WOzPgOKMy-tQ.roa
File: wfm5PLHz4myXHD2WOzPgOKMy-tQ.roa (raw, json)
Hash identifier: vp74k4rBoqPjIPZ5JMcAxlHEbZZP9uL/B96AvTkvKxU=
Subject key identifier: C1:F9:B9:3C:B1:F3:E2:6C:97:1C:3D:96:3B:33:E0:38:A3:32:FA:D4
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019E8BEDF2E766AB288D41A21CFA58363B75
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wfm5PLHz4myXHD2WOzPgOKMy-tQ.roa
Signing time: Wed 03 Jun 2026 05:21:27 +0000
ROA not before: Wed 03 Jun 2026 05:21:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215136
IP address blocks: 5.83.134.0/24 maxlen: 24
5.83.136.0/24 maxlen: 24
5.175.140.0/24 maxlen: 24
5.175.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 05:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8b:ed:f2:e7:66:ab:28:8d:41:a2:1c:fa:58:36:3b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 3 05:21:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1f9b93cb1f3e26c971c3d963b33e038a332fad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:67:22:51:ac:56:b4:f4:3f:6b:2f:c8:97:c6:
4c:f3:7d:b2:d2:b7:eb:96:f6:20:ae:29:09:aa:7f:
4c:71:10:d9:75:27:4d:fc:25:34:7f:30:86:90:d7:
64:f2:2c:ec:46:6d:30:f3:ac:a5:61:0c:4e:3c:bf:
8e:e5:9d:c8:c9:82:8c:db:1d:06:5e:14:fb:cc:f2:
5d:55:34:1f:1d:36:4c:e3:f4:5d:5b:6b:b6:12:cc:
19:cc:64:14:f6:8d:c4:b8:df:db:49:a9:88:86:85:
32:19:e7:a3:60:19:27:14:37:28:04:44:2a:c6:35:
93:9b:f0:89:d1:7e:a1:fe:88:9d:14:8a:02:a4:ed:
c4:01:53:2b:c0:2a:e0:53:93:79:11:d4:f7:12:57:
bc:26:d9:23:b7:96:69:73:ef:e4:95:3b:b1:d9:bf:
0c:c8:a8:85:19:b9:e3:f7:e6:57:b3:1f:0e:c1:69:
c2:8f:4d:fe:4d:b6:16:97:6e:f5:5b:71:fa:5b:61:
a0:eb:54:bb:01:95:e4:a6:ce:22:da:fc:b0:bb:27:
ec:28:a8:93:31:ad:53:2a:e8:02:3e:94:d4:87:d1:
65:a8:3f:8e:8e:60:05:67:75:c6:df:67:7c:ed:01:
05:33:27:f2:09:eb:74:eb:d6:ac:72:09:8f:b5:47:
55:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F9:B9:3C:B1:F3:E2:6C:97:1C:3D:96:3B:33:E0:38:A3:32:FA:D4
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wfm5PLHz4myXHD2WOzPgOKMy-tQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.134.0/24
5.83.136.0/24
5.175.140.0/24
5.175.222.0/24
Signature Algorithm: sha256WithRSAEncryption
42:b0:65:90:62:c7:41:33:10:26:24:5f:f9:38:6f:86:c5:6d:
76:a6:7d:00:13:91:ea:1c:06:a2:c7:ba:38:d3:a9:e6:19:12:
4b:c3:e4:5d:cc:a1:ab:ef:85:6b:27:ff:6e:2d:92:f3:76:92:
09:ef:50:1f:64:95:2d:56:49:63:cc:cf:84:f9:02:8c:7a:51:
ab:69:76:ab:bb:2d:bd:b3:93:13:62:75:26:c6:27:8a:7c:c2:
47:34:17:92:ed:c6:e5:bc:6b:b0:0e:50:65:ff:fa:a1:38:dd:
cf:51:bb:c5:6f:95:ab:b7:28:30:13:3c:77:7e:67:43:b0:a4:
14:be:7f:25:a8:48:dd:15:dc:99:b3:5b:db:6e:8f:e5:15:7e:
92:3b:25:69:6c:1b:90:87:10:8a:7f:60:cc:11:e4:1c:c4:26:
38:ef:9d:f1:fd:36:81:e0:c7:49:f8:2f:11:42:5e:1e:10:3e:
58:25:a9:04:05:e0:c4:f0:45:c0:62:b1:65:e3:41:82:dc:90:
84:d2:39:ed:9a:85:f9:2d:3e:02:d5:7d:60:e0:10:28:fc:2d:
42:51:91:87:48:70:7c:99:be:53:1b:d5:22:92:1e:d8:35:aa:
8a:ab:66:91:04:be:07:3f:99:f8:53:a9:d9:92:d8:35:73:3a:
83:f1:ef:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:59:23 2026 by rpki-client