Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wj1mwN-qsZXsaYqhHqD6hgqpk6A.roa
File: wj1mwN-qsZXsaYqhHqD6hgqpk6A.roa (raw, json)
Hash identifier: 0TOAi1NGsxQyK+CcYYy8J8J/UBFGNCnuxgxetnc5ulg=
Subject key identifier: C2:3D:66:C0:DF:AA:B1:95:EC:69:8A:A1:1E:A0:FA:86:0A:A9:93:A0
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F79D64F1D5CB9554B198961E602FA38D2
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wj1mwN-qsZXsaYqhHqD6hgqpk6A.roa
Signing time: Sun 19 Jul 2026 10:05:15 +0000
ROA not before: Sun 19 Jul 2026 10:05:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215136
IP address blocks: 5.83.134.0/24 maxlen: 24
5.83.136.0/24 maxlen: 24
5.175.140.0/24 maxlen: 24
5.175.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:79:d6:4f:1d:5c:b9:55:4b:19:89:61:e6:02:fa:38:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 19 10:05:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c23d66c0dfaab195ec698aa11ea0fa860aa993a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:46:52:54:36:a0:bf:d2:b3:0e:82:50:8e:b9:
f8:28:10:c9:84:f5:b0:1f:95:40:99:94:1c:9f:34:
48:2d:c1:70:60:14:e2:d2:8c:38:7b:00:52:c1:ee:
21:e1:88:b3:a6:10:75:7f:bc:a7:82:fb:97:ff:1f:
5d:fe:d5:a5:e2:71:70:1e:74:b1:ca:e0:bb:7d:5a:
a3:46:39:7c:44:37:af:f1:68:7d:bb:d6:81:ec:94:
a7:22:1f:64:c7:1c:31:1c:1d:38:64:c4:33:2e:d1:
39:51:8b:74:97:17:05:3c:24:cf:75:17:50:b4:84:
b3:57:21:6a:0c:9c:65:6e:a5:0f:39:b4:f3:7b:cd:
c1:30:18:0d:8f:eb:88:d7:dd:66:34:7f:72:d6:33:
13:f8:7b:56:26:cd:8f:9b:37:48:a7:80:f2:78:18:
80:40:83:ed:c0:46:13:17:5f:f4:9e:88:3b:75:55:
73:c3:c1:b1:23:e8:87:4f:1b:77:d7:4f:51:45:5e:
ec:8e:ff:8e:d6:99:57:db:13:d9:ea:55:96:7e:92:
c6:25:27:21:a2:42:c6:1d:45:10:d5:6e:cb:ec:13:
12:67:f4:76:87:02:17:8e:45:bb:e8:e7:7a:bf:b4:
71:6c:6f:b5:e5:7b:06:07:a7:0c:79:55:af:5e:e5:
0e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3D:66:C0:DF:AA:B1:95:EC:69:8A:A1:1E:A0:FA:86:0A:A9:93:A0
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wj1mwN-qsZXsaYqhHqD6hgqpk6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.134.0/24
5.83.136.0/24
5.175.140.0/24
5.175.222.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:00:9f:e7:18:6e:dc:56:03:de:65:40:0e:b5:ad:42:0a:00:
0c:ef:f8:34:6d:0d:81:21:3a:18:1b:42:19:5f:ae:e4:ea:6d:
c3:a7:b6:c1:17:e3:67:2e:e0:55:17:63:bc:4e:00:29:fa:e5:
ce:29:a8:38:5e:53:35:8c:21:74:c1:5e:8f:7f:9d:76:6b:29:
be:41:db:91:72:65:75:be:3b:ab:16:47:1d:7c:2c:d4:87:6e:
b3:0d:e9:33:07:80:29:8f:24:9c:33:d4:9e:79:a3:cf:a9:2d:
64:18:4f:10:83:84:f9:88:de:ad:4a:92:81:f6:23:b9:8b:a1:
00:ad:f7:d3:52:79:ae:74:99:8a:b9:a0:24:cb:f5:cd:61:53:
07:27:48:98:dc:5e:26:f3:6c:4e:74:46:b4:d9:44:60:33:2f:
44:39:27:40:e4:f4:e1:ee:5f:eb:12:ba:87:35:59:57:ca:e5:
4a:66:e2:05:5b:79:ed:4a:2b:b6:71:4e:dc:1a:41:11:0a:d4:
9f:80:63:0c:0f:ce:0a:d6:b4:a4:d9:a7:19:9a:4f:7b:a9:8d:
3f:4c:88:08:90:b4:2b:0f:7b:21:a0:6a:3a:60:48:31:2a:36:
fc:f4:71:f2:e5:2c:a5:50:dd:7e:49:2c:30:98:49:63:38:ec:
31:68:01:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:53:24 2026 by rpki-client