Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/W5Wffem0Fu233HX2JmAV6B2upd4.roa
File: W5Wffem0Fu233HX2JmAV6B2upd4.roa (raw, json)
Hash identifier: gZI6GY8eZ8FB7Rphn3wdf3QtEkuCUCjB/O6tWQjjou8=
Subject key identifier: 5B:95:9F:7D:E9:B4:16:ED:B7:DC:75:F6:26:60:15:E8:1D:AE:A5:DE
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019E5F05D04ADEB8DCBD856729EBD72B303C
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/W5Wffem0Fu233HX2JmAV6B2upd4.roa
Signing time: Mon 25 May 2026 12:04:36 +0000
ROA not before: Mon 25 May 2026 12:04:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 109.122.15.0/24 maxlen: 24
109.122.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:5f:05:d0:4a:de:b8:dc:bd:85:67:29:eb:d7:2b:30:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: May 25 12:04:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b959f7de9b416edb7dc75f6266015e81daea5de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:15:a5:bb:01:93:5d:04:ca:3f:9d:e4:cf:2e:
c8:ac:eb:a4:42:67:f4:ab:7c:f0:39:c2:6e:40:f9:
6f:f6:7b:fd:1b:ea:ec:0a:f7:2f:3d:ac:38:4b:37:
ee:37:d6:87:4e:56:13:51:49:69:c1:e2:b2:16:89:
9c:2a:9d:94:e0:4f:5a:06:99:88:2d:91:bb:6d:59:
92:b5:a1:6f:db:79:d1:25:ea:66:df:ca:0d:17:d1:
07:80:38:31:3d:f1:9e:60:3b:d8:fb:ed:79:af:69:
41:3e:6e:42:be:97:00:c4:17:d0:11:7b:a1:93:d0:
07:1e:55:f9:14:90:46:10:47:61:37:a3:20:f7:fd:
23:88:1c:ef:b2:06:95:c4:f4:d5:f4:2f:0f:ea:9f:
08:ba:3c:b2:68:e0:d8:f3:69:fc:16:a1:7e:a7:c3:
41:84:7f:4d:56:8c:b0:83:66:c1:7a:25:19:5f:bf:
42:7f:82:f3:f6:f7:15:ee:a4:09:68:7d:c8:24:e5:
e4:08:14:63:6f:18:59:e5:13:7a:a4:5e:b0:a3:b0:
68:2f:ee:95:55:6b:75:4a:48:07:d7:61:a8:94:06:
ff:2e:ef:d7:3b:4d:f0:53:5a:b0:51:22:9d:8c:3f:
10:e7:31:6a:40:c7:3e:6f:08:7b:ed:2b:df:73:bc:
f6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:95:9F:7D:E9:B4:16:ED:B7:DC:75:F6:26:60:15:E8:1D:AE:A5:DE
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/W5Wffem0Fu233HX2JmAV6B2upd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.15.0/24
109.122.20.0/24
Signature Algorithm: sha256WithRSAEncryption
93:0c:39:8e:56:f6:2d:61:96:b5:59:65:b1:70:ba:40:3d:e1:
e4:95:84:a6:06:fb:43:32:0d:e9:55:04:e0:62:7d:75:24:bc:
f7:db:25:94:64:89:d7:a8:c5:13:2a:53:c0:7a:99:cc:9d:ca:
df:ff:be:f2:06:47:75:bf:ec:ad:0a:8f:c8:4d:63:2b:c2:4d:
d7:79:9d:b2:0b:06:4b:3c:72:81:be:04:56:aa:5e:95:9d:2a:
10:a7:f5:f0:18:c6:21:ef:81:92:e7:43:3b:4d:ab:60:e1:d3:
98:05:41:4d:bb:83:9d:96:f0:2a:0f:c7:7c:15:81:3e:32:f1:
ce:18:33:65:43:ce:c0:3d:03:69:98:ed:42:4e:46:88:58:e2:
c9:5d:23:80:1a:cc:7a:f1:76:aa:82:ea:85:8d:75:cc:9c:2f:
da:71:43:fc:f3:28:c4:b1:02:aa:d5:42:86:5e:02:37:26:c6:
cb:19:ad:fe:8f:1d:53:8a:71:5c:71:76:b3:b0:da:95:d0:0d:
4d:25:16:44:ff:7a:c9:23:f7:3b:63:23:71:de:93:0c:52:b1:
7c:bf:44:99:06:3b:12:55:a1:6f:78:d9:ef:93:ef:eb:54:15:
69:7d:10:91:94:b8:40:86:28:9e:e2:b9:67:9c:bc:92:f6:10:
ba:33:a7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 06:27:31 2026 by rpki-client