Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wmByi5mh8qZD0B786yFkET9bEt4.roa
File: wmByi5mh8qZD0B786yFkET9bEt4.roa (raw, json)
Hash identifier: nQbcj0H0yR0dI98hpx3FGUQ1GEXIvW6vMNcxen6IQ8M=
Subject key identifier: C2:60:72:8B:99:A1:F2:A6:43:D0:1E:FC:EB:21:64:11:3F:5B:12:DE
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019E8A9C1E2CACE4F2F33DB323CDD872A8DA
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wmByi5mh8qZD0B786yFkET9bEt4.roa
Signing time: Tue 02 Jun 2026 23:12:27 +0000
ROA not before: Tue 02 Jun 2026 23:12:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210705
IP address blocks: 85.93.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 05:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8a:9c:1e:2c:ac:e4:f2:f3:3d:b3:23:cd:d8:72:a8:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 2 23:12:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c260728b99a1f2a643d01efceb2164113f5b12de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0a:54:a7:a8:a1:2c:fa:39:46:de:73:ac:69:
8d:ed:09:2e:f6:f7:ed:56:57:5e:c8:7c:85:6c:0f:
d0:49:76:97:58:67:e0:5b:17:c9:2e:3e:f4:37:08:
02:af:99:04:ff:d3:e4:f7:e7:9c:73:b1:97:8e:01:
fa:f7:30:7f:d9:5a:6b:06:f0:fe:46:d4:2a:86:39:
59:29:c7:b0:a4:97:dc:fc:82:51:1c:dc:df:4d:45:
4f:e4:f6:d7:bf:a6:2f:d4:ef:b7:47:51:3a:63:4e:
70:84:6e:38:ea:3a:81:2e:24:b6:50:46:13:18:02:
64:78:3a:b0:ab:21:cf:10:f4:84:2f:76:1d:4c:3f:
a3:04:7d:2b:e4:79:1e:6c:35:6e:9f:5f:9a:05:f1:
69:c3:e9:d3:31:71:51:14:d8:83:2d:f3:0a:bf:c2:
f5:dc:89:66:cf:8d:69:24:7d:0f:8a:17:41:69:57:
c4:0a:35:a4:30:e8:e2:8c:2a:e6:c3:bb:48:af:0b:
0e:55:a9:f2:11:6b:29:e2:cf:b1:3b:ae:e3:0d:af:
2f:59:7e:c1:d3:dc:8d:02:b8:4f:34:e7:2b:37:ea:
da:ab:c4:22:b2:9d:d7:a5:9c:a9:43:dc:1c:83:af:
1d:40:07:b2:3e:d9:b5:a6:f6:76:47:0e:54:06:3b:
61:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:60:72:8B:99:A1:F2:A6:43:D0:1E:FC:EB:21:64:11:3F:5B:12:DE
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wmByi5mh8qZD0B786yFkET9bEt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.93.5.0/24
Signature Algorithm: sha256WithRSAEncryption
74:2d:08:9c:43:b7:6d:ae:e1:2a:a6:46:0c:16:be:61:1e:4e:
82:ea:34:8c:7a:bf:93:d8:72:e4:5c:5e:47:cc:02:8d:f6:6a:
a0:85:cb:9e:02:23:a8:a9:b8:95:fe:51:7b:c4:1a:1f:9e:c2:
30:6c:09:df:76:68:6a:b4:dd:a9:8b:f1:75:fa:8b:e3:eb:75:
6d:d8:20:23:65:9f:4a:d2:21:eb:e6:5e:35:ca:61:f0:5b:8f:
5e:48:ac:9f:21:65:50:da:04:c1:42:2b:a2:ed:9c:fb:9e:55:
6b:47:01:23:59:29:e9:61:42:d8:f8:e6:03:4b:be:56:9c:63:
31:2b:44:aa:47:2a:18:8f:c4:75:18:a3:32:c3:51:7e:72:e2:
75:54:3a:4f:5f:8a:d7:a6:6c:ee:aa:71:e1:ae:05:43:f3:fe:
5b:bd:f8:10:d8:af:83:ad:53:1d:4d:bd:d0:39:e5:9c:c9:70:
1a:81:f6:fc:10:19:96:bc:b4:f9:54:9f:0b:3d:64:08:b6:b9:
03:be:a9:9d:74:d8:93:36:58:4a:f4:42:b0:fe:c2:d6:4d:71:
5e:fd:ad:56:00:7f:52:af:00:80:5a:fc:5f:3d:dd:6f:ca:d5:
5f:68:16:a4:de:59:19:11:b8:45:63:3d:8c:01:40:dd:45:d1:
19:19:b2:94
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ6KnB4srOTy8z2zI83YcqjaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwNjAyMjMxMjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjYwNzI4Yjk5YTFmMmE2NDNkMDFlZmNlYjIxNjQxMTNmNWIxMmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQpUp6ihLPo5Rt5zrGmN7Qku9vft
VldeyHyFbA/QSXaXWGfgWxfJLj70NwgCr5kE/9Pk9+ecc7GXjgH69zB/2VprBvD+
RtQqhjlZKcewpJfc/IJRHNzfTUVP5PbXv6Yv1O+3R1E6Y05whG446jqBLiS2UEYT
GAJkeDqwqyHPEPSEL3YdTD+jBH0r5HkebDVun1+aBfFpw+nTMXFRFNiDLfMKv8L1
3Ilmz41pJH0PihdBaVfECjWkMOjijCrmw7tIrwsOVanyEWsp4s+xO67jDa8vWX7B
09yNArhPNOcrN+raq8Qisp3XpZypQ9wcg68dQAeyPtm1pvZ2Rw5UBjthDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMJgcouZofKmQ9Ae/OshZBE/WxLeMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvd21CeWk1bWg4cVpEMEI3ODZ5RmtFVDliRXQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVV0FMA0G
CSqGSIb3DQEBCwUAA4IBAQB0LQicQ7dtruEqpkYMFr5hHk6C6jSMer+T2HLkXF5H
zAKN9mqghcueAiOoqbiV/lF7xBofnsIwbAnfdmhqtN2pi/F1+ovj63Vt2CAjZZ9K
0iHr5l41ymHwW49eSKyfIWVQ2gTBQiui7Zz7nlVrRwEjWSnpYULY+OYDS75WnGMx
K0SqRyoYj8R1GKMyw1F+cuJ1VDpPX4rXpmzuqnHhrgVD8/5bvfgQ2K+DrVMdTb3Q
OeWcyXAagfb8EBmWvLT5VJ8LPWQItrkDvqmddNiTNlhK9EKw/sLWTXFe/a1WAH9S
rwCAWvxfPd1vytVfaBak3lkZEbhFYz2MAUDdRdEZGbKU
-----END CERTIFICATE-----
Generated at Thu Jun 4 10:00:12 2026 by rpki-client