Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/WtWX_AKcvGcWMQX9EqLnmLKQeEk.roa
File: WtWX_AKcvGcWMQX9EqLnmLKQeEk.roa (raw, json)
Hash identifier: ZoB6xp2dZxliYKtdyb5XBTNX0yR6OqjtAm3u4SbSsSk=
Subject key identifier: 5A:D5:97:FC:02:9C:BC:67:16:31:05:FD:12:A2:E7:98:B2:90:78:49
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01A1245B23D8B2410A33FA33F9CA7F1EDE9F
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/WtWX_AKcvGcWMQX9EqLnmLKQeEk.roa
Signing time: Sat 10 Oct 2026 05:48:35 +0000
ROA not before: Sat 10 Oct 2026 05:48:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43260
IP address blocks: 213.209.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:5b:23:d8:b2:41:0a:33:fa:33:f9:ca:7f:1e:de:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Oct 10 05:48:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ad597fc029cbc67163105fd12a2e798b2907849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:fe:ac:b8:52:61:aa:5d:c9:86:d7:31:43:c1:
ae:fc:46:e9:5e:71:e0:c7:c1:90:85:5b:57:48:ea:
cf:8e:65:35:a2:46:73:ea:74:14:fb:22:e0:45:a5:
77:ec:05:4a:55:65:be:9c:b5:c7:49:29:1a:19:7a:
29:7d:c0:cf:d2:86:ac:c4:b5:e4:e4:62:9b:ad:c1:
01:22:9c:7a:9a:b0:ca:20:f7:36:0f:59:5f:5e:32:
d2:b0:08:8a:d5:34:d6:7c:a0:36:18:8d:88:14:ea:
2f:b7:d4:fb:35:dc:41:0d:69:43:c5:df:77:d5:d7:
8b:3e:5f:0b:ca:40:e7:f4:2f:d8:23:a4:4d:e0:d4:
2c:e5:28:17:69:38:74:58:d0:28:d9:68:5e:9c:f8:
dc:a2:28:8f:04:f4:b7:e1:6e:d5:0c:3f:ad:49:fd:
48:15:6f:ad:96:9d:51:f0:ec:1c:90:e0:bf:31:bd:
05:ac:fb:07:8c:4f:ed:b2:94:87:3a:59:d9:01:5f:
1c:d4:f5:fb:d2:fa:7c:a3:5a:01:5f:9c:89:85:0c:
b8:aa:8b:10:4f:c5:01:7b:d3:4e:3e:b2:d2:7f:dd:
bf:89:2c:1a:16:8b:02:ba:5c:87:d3:35:f3:32:f4:
89:36:02:de:f8:7b:56:a6:a9:a3:9c:68:b8:4d:5f:
2f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D5:97:FC:02:9C:BC:67:16:31:05:FD:12:A2:E7:98:B2:90:78:49
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/WtWX_AKcvGcWMQX9EqLnmLKQeEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.209.155.0/24
Signature Algorithm: sha256WithRSAEncryption
13:0a:5b:32:d3:d9:fa:73:cf:b7:dd:c4:df:fc:4f:33:18:57:
2c:fb:46:68:1c:2b:2b:8e:da:05:59:dc:83:d9:86:5b:ac:5d:
ed:fb:01:52:2c:12:c1:d3:e7:c5:b7:ea:b8:f0:7a:d8:a5:b9:
f9:28:08:2a:bf:cb:c6:8f:d0:4b:dc:b7:7c:b5:c1:9c:0d:23:
ca:99:7a:3e:7d:aa:52:62:57:44:62:0f:66:12:46:70:f1:1b:
0f:a5:0a:f4:57:59:30:6b:b4:61:85:7e:55:21:35:bc:52:a2:
aa:be:c4:97:de:4e:f8:a9:6a:b8:0c:b5:3f:59:22:1f:27:8a:
04:f8:79:50:47:e8:ea:81:fc:70:d3:d7:c4:e4:17:e4:82:cd:
82:49:b0:ac:62:17:17:44:df:60:1a:a6:f4:e2:62:ca:14:ee:
b6:5f:8c:20:55:79:d8:96:6c:76:e4:56:4a:8c:b2:2a:8c:2d:
5a:a7:3b:5d:03:88:0f:8f:6b:0b:52:4e:73:f7:27:61:e6:3b:
80:ea:4a:83:66:6d:68:eb:f7:81:76:e6:71:a1:19:83:27:65:
45:41:2d:85:80:de:83:b7:90:25:64:9c:7b:52:e8:e4:64:b9:
98:09:e5:6c:4b:33:02:55:20:8b:93:57:ae:1e:64:82:17:e0:
b9:ab:88:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:53:55 2026 by rpki-client