Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/Fw5-lfDafyO1ACg0Cx1-lNFM0F8.roa
File: Fw5-lfDafyO1ACg0Cx1-lNFM0F8.roa (raw, json)
Hash identifier: tum0UkFUq4ix84D8eV+SeZnCN5TFVor52sLg5+4ATAQ=
Subject key identifier: 17:0E:7E:95:F0:DA:7F:23:B5:00:28:34:0B:1D:7E:94:D1:4C:D0:5F
Certificate issuer: /CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Certificate serial: 019F23690AA5790C1A17F77F9C685FD606D6
Authority key identifier: 5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/Fw5-lfDafyO1ACg0Cx1-lNFM0F8.roa
Signing time: Thu 02 Jul 2026 15:18:34 +0000
ROA not before: Thu 02 Jul 2026 15:18:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61317
IP address blocks: 89.187.6.0/24 maxlen: 24
89.187.8.0/24 maxlen: 24
89.187.10.0/24 maxlen: 24
89.187.12.0/24 maxlen: 24
89.187.14.0/24 maxlen: 24
89.187.15.0/24 maxlen: 24
89.187.17.0/24 maxlen: 24
89.187.18.0/24 maxlen: 24
89.187.19.0/24 maxlen: 24
89.187.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 19:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0a:a5:79:0c:1a:17:f7:7f:9c:68:5f:d6:06:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Validity
Not Before: Jul 2 15:18:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=170e7e95f0da7f23b50028340b1d7e94d14cd05f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9b:58:35:07:50:ce:0d:13:06:79:49:71:90:
7b:7b:fd:d6:94:1a:aa:2c:46:af:2e:7c:99:2d:0e:
2e:0a:cc:89:5c:88:01:70:79:14:72:8b:1a:f5:65:
df:37:39:42:91:ed:75:74:9a:9d:44:cf:b4:39:7d:
a1:44:55:b4:83:f0:e2:f5:a3:74:3a:f6:69:9b:eb:
92:2c:ea:e0:f0:ee:f4:ab:42:e3:28:63:0a:5c:57:
be:20:d1:66:61:6b:93:90:9f:78:b6:1a:e7:47:fc:
4c:09:9b:6b:d9:64:d9:aa:54:a4:b4:d8:6e:2f:1f:
d9:56:fa:8e:59:c3:6f:42:12:da:68:2f:c2:9a:03:
a7:60:a4:49:fa:18:ec:76:11:91:e2:d0:40:ba:c6:
db:85:ed:4e:91:7a:9a:27:6f:4c:bd:21:77:77:4b:
fa:ae:5b:02:95:0f:91:95:cd:4d:0e:7e:55:2d:45:
7a:42:78:e0:eb:0a:45:a1:f5:72:ce:b2:e7:8b:e5:
d8:a9:56:b0:ab:ed:d8:9e:9f:d9:4f:f7:2a:ed:2b:
a4:be:96:e6:c4:d8:4a:79:fc:55:f0:39:c7:eb:0d:
ac:5a:ea:57:1b:e6:aa:8e:53:50:ba:d2:0d:c6:a8:
ae:d9:8e:0b:b2:df:95:72:6c:41:76:f5:b9:ff:11:
ca:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0E:7E:95:F0:DA:7F:23:B5:00:28:34:0B:1D:7E:94:D1:4C:D0:5F
X509v3 Authority Key Identifier:
keyid:5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/Fw5-lfDafyO1ACg0Cx1-lNFM0F8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.6.0/24
89.187.8.0/24
89.187.10.0/24
89.187.12.0/24
89.187.14.0/23
89.187.17.0-89.187.19.255
89.187.22.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:40:c1:68:8e:6c:e7:cb:a7:0e:ed:ea:59:3a:e1:76:71:81:
f6:5c:76:c4:93:21:02:37:1e:42:f7:bd:04:8b:88:65:2a:32:
4c:33:99:67:86:9e:04:5a:60:5c:fa:61:0c:72:f3:c4:4b:7a:
98:fb:16:1a:d6:9b:3c:7f:a5:ec:03:d3:9e:a3:b0:62:d9:66:
ce:88:53:d4:93:5a:05:54:15:00:32:76:dc:18:d1:6a:b0:74:
3b:a6:dd:d1:49:4d:43:7f:6a:f7:9d:77:c5:51:4a:ee:c3:5f:
d6:aa:91:7a:c9:06:d2:dd:66:65:f5:61:b2:7d:d6:29:b4:32:
36:a3:6f:1a:ec:5f:a6:d9:26:3c:98:36:05:47:f0:ae:fe:48:
3b:9e:33:7c:d1:15:01:54:81:d3:42:62:ce:07:22:53:26:af:
88:a2:a9:6c:8a:94:72:76:85:8a:6e:48:50:87:93:0b:4d:e8:
9e:ff:8d:37:d7:5b:d7:e3:96:f3:bd:e8:84:b6:39:4c:48:f6:
5d:d0:a2:b5:8c:b6:d7:d5:09:2c:6a:54:0d:5f:f6:cf:6c:5e:
31:fc:99:e1:75:f4:47:ef:d7:5b:ff:41:1f:86:25:14:33:65:
ea:53:c2:5a:d9:9f:9c:bd:8e:23:11:75:e5:49:de:33:e5:d7:
3a:98:1a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 00:09:17 2026 by rpki-client