Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/wkfR_PFHY2-Koea7USbX3fW8XrY.roa
File: wkfR_PFHY2-Koea7USbX3fW8XrY.roa (raw, json)
Hash identifier: 3oMLg27nzZvi9O3H6FdMZO/ELbhkETS7+9KaBGDoj0g=
Subject key identifier: C2:47:D1:FC:F1:47:63:6F:8A:A1:E6:BB:51:26:D7:DD:F5:BC:5E:B6
Certificate issuer: /CN=b5189d9ea82d5fbb66d6c11f187633476034e0de
Certificate serial: 019ED5A7EB6AB4183D96D19949BF31EC014C
Authority key identifier: B5:18:9D:9E:A8:2D:5F:BB:66:D6:C1:1F:18:76:33:47:60:34:E0:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/wkfR_PFHY2-Koea7USbX3fW8XrY.roa
Signing time: Wed 17 Jun 2026 12:56:52 +0000
ROA not before: Wed 17 Jun 2026 12:56:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57922
IP address blocks: 5.250.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:a7:eb:6a:b4:18:3d:96:d1:99:49:bf:31:ec:01:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5189d9ea82d5fbb66d6c11f187633476034e0de
Validity
Not Before: Jun 17 12:56:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c247d1fcf147636f8aa1e6bb5126d7ddf5bc5eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:71:03:53:29:3b:93:6f:a2:7d:a7:94:76:18:
95:c2:f3:ba:58:9c:7e:13:a9:bc:12:c7:38:66:8c:
a6:af:bf:1c:22:5b:0a:ca:3c:b8:db:76:aa:be:27:
2e:3e:ee:d1:16:73:21:1e:96:1a:f3:99:b7:8f:38:
c3:94:a8:87:f6:ee:a7:bd:1b:14:ae:60:91:39:ca:
23:b7:fc:e0:5c:86:ae:cd:07:91:0d:2b:5b:6b:db:
16:42:c2:4d:b5:b9:ba:4a:d8:ec:a3:57:5c:c5:b1:
f2:15:7a:79:b5:f2:2a:ee:fd:77:9e:a3:38:b7:b3:
53:21:a9:7a:34:dd:14:7e:c9:1c:a9:62:54:66:b3:
4e:09:07:31:ad:06:52:a2:12:d4:2a:6d:95:8a:0e:
57:a3:34:72:0f:1d:c5:91:7f:5a:56:21:7d:18:40:
7c:e3:5a:9c:f6:89:30:01:ad:9d:15:ec:1b:5a:4e:
7c:f8:65:1e:85:ae:5a:7c:43:5b:3a:29:28:51:60:
dd:b6:ff:0a:8e:7c:e2:8f:c1:62:07:a0:e8:9d:20:
8d:1c:ce:2e:29:b7:f2:86:41:65:30:3c:39:7c:df:
9f:f4:4d:52:2e:5d:42:d6:e1:e2:cd:e5:c6:b2:d8:
e4:94:75:97:d3:b4:9c:49:b4:03:ba:fb:9f:5f:58:
60:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:47:D1:FC:F1:47:63:6F:8A:A1:E6:BB:51:26:D7:DD:F5:BC:5E:B6
X509v3 Authority Key Identifier:
keyid:B5:18:9D:9E:A8:2D:5F:BB:66:D6:C1:1F:18:76:33:47:60:34:E0:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/wkfR_PFHY2-Koea7USbX3fW8XrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.250.253.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:af:03:f9:bf:42:7b:a7:e8:aa:b4:91:0c:c7:c2:02:ff:6d:
b8:80:ee:74:12:22:a0:58:63:53:0d:f7:92:f9:02:4e:e2:a5:
2a:1c:aa:ff:81:21:3a:92:45:0a:30:6b:c0:de:1c:05:1a:e9:
9e:0b:1e:a9:ac:c2:79:21:0a:fb:e2:31:fc:90:90:8e:ab:24:
da:ba:79:e0:52:41:47:2f:51:bf:33:87:81:e6:1d:d5:30:f4:
4f:b4:3c:29:e2:5b:c5:d6:e2:a4:f0:b1:05:b2:7a:64:b8:b3:
7f:ec:63:f3:90:f7:6f:1e:51:4d:39:23:aa:ff:b8:7f:3d:39:
fe:8e:a8:40:56:75:e6:fc:be:24:dc:41:ef:bc:0b:30:6d:2b:
37:5d:7e:27:09:8b:ae:e7:f0:f7:31:1c:1d:38:32:69:65:d6:
a3:3b:17:44:4a:1a:ba:5e:c1:82:13:8f:73:1c:13:2b:bc:cf:
24:46:04:93:32:26:4e:77:18:65:61:0d:24:70:3c:66:f0:fb:
8e:ed:c4:85:00:b3:0c:5f:69:c9:70:81:a9:ba:d0:00:59:f6:
fb:bb:17:67:aa:f4:da:b1:b6:0a:ed:2e:8f:6f:4a:83:e0:ee:
34:8f:8c:8b:06:b5:6e:35:e5:e9:0f:3b:d6:d9:82:c9:12:fd:
2a:77:ee:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 21:32:35 2026 by rpki-client