Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/wxULdZCLlrvd_nLr8F-uFhTbozQ.roa
File: wxULdZCLlrvd_nLr8F-uFhTbozQ.roa (raw, json)
Hash identifier: Zn7128dAk0UgNbxjeslvOE/qsggVq9KiV8UvDfCFieI=
Subject key identifier: C3:15:0B:75:90:8B:96:BB:DD:FE:72:EB:F0:5F:AE:16:14:DB:A3:34
Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Certificate serial: 019FF3D1A9AF8F75EBBC38A34EDE93E441E4
Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/wxULdZCLlrvd_nLr8F-uFhTbozQ.roa
Signing time: Wed 12 Aug 2026 02:33:51 +0000
ROA not before: Wed 12 Aug 2026 02:33:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4593
IP address blocks: 212.180.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f3:d1:a9:af:8f:75:eb:bc:38:a3:4e:de:93:e4:41:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Validity
Not Before: Aug 12 02:33:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3150b75908b96bbddfe72ebf05fae1614dba334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c6:92:7f:92:99:4f:14:f7:2a:66:39:11:a0:
ba:df:21:9c:63:e4:14:18:df:f8:2e:fc:52:a1:aa:
84:9c:3a:4b:93:dd:a0:f9:47:18:79:70:ee:7c:c6:
c0:73:86:a7:1e:2b:a5:cf:58:bf:48:96:31:60:34:
ae:15:6a:4f:49:e5:fd:19:76:78:3f:2e:04:db:73:
42:c5:38:0a:b2:fc:0b:b2:35:c8:8a:7f:5c:b4:5e:
58:3b:bc:a5:7d:4b:e3:cf:4c:59:e9:36:c8:8f:ff:
d7:23:8f:7d:13:93:65:06:e2:9b:1e:f3:1f:d1:62:
b4:74:09:7f:fd:5e:a9:14:a4:71:a0:06:72:de:27:
96:d7:01:81:94:3e:ef:24:e5:72:0d:e1:4b:07:24:
51:06:12:c5:f4:dc:b6:f2:03:76:ba:3a:81:f6:89:
10:1b:dc:3f:5e:bd:2a:9e:85:c9:a4:0a:50:6f:ba:
e2:35:78:b6:41:c1:92:d9:e9:71:8d:6e:1b:6c:eb:
b2:bb:f9:cc:63:62:e4:4a:4f:0c:e4:23:8f:60:93:
64:d1:79:0e:d7:05:01:c6:cb:e1:4c:e5:50:5a:8f:
7f:f1:8d:14:72:5a:d2:15:0d:20:ea:58:72:32:88:
6c:e9:97:48:ac:e7:b8:4a:e9:31:47:b7:dc:4a:2b:
46:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:15:0B:75:90:8B:96:BB:DD:FE:72:EB:F0:5F:AE:16:14:DB:A3:34
X509v3 Authority Key Identifier:
keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/wxULdZCLlrvd_nLr8F-uFhTbozQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.180.121.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:94:0c:dd:e4:ff:ed:75:94:b3:fe:50:93:a9:0d:cd:bd:6d:
c9:20:bb:76:5e:be:83:a5:51:d6:ed:50:63:3f:ff:45:a1:55:
51:0f:a6:8d:24:9d:23:19:9b:dd:c1:6b:c8:83:1e:d6:97:f4:
c1:12:8b:09:76:27:c5:5c:62:e3:c1:1f:70:22:f9:14:97:eb:
10:5c:b7:47:80:ed:25:b2:05:e3:12:ca:d6:bc:15:9b:fd:a2:
7b:04:de:3d:42:d7:13:d2:77:51:15:85:c3:7e:95:c5:1a:4f:
db:4a:8c:87:6a:8c:3c:a3:d4:1d:f0:a0:fb:4c:c8:33:4d:ee:
2f:1c:3b:b8:eb:33:fc:92:d7:28:6f:12:fa:00:77:21:b9:9e:
a2:fb:40:d4:58:25:1e:72:13:ff:61:99:57:a3:a3:05:7f:9c:
71:6c:ed:cf:b5:dd:bb:62:8d:19:80:30:5f:b9:a5:96:ef:4f:
64:65:9f:ce:42:b6:76:ae:90:28:6d:54:c5:0b:d6:65:8b:96:
5e:eb:b1:30:ee:35:ed:96:25:9f:4e:95:c4:12:ca:3b:e8:6e:
63:e9:53:4f:b6:1c:eb:7b:f2:da:6c:54:38:62:07:fb:bf:42:
53:a5:32:50:ad:52:5e:a2:07:a3:d0:d6:ba:27:c6:72:9f:ad:
0a:cb:85:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:47:46 2026 by rpki-client