Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/w4OVab-b3J6Y9FqhSLwYCOVAjzk.roa
File: w4OVab-b3J6Y9FqhSLwYCOVAjzk.roa (raw, json)
Hash identifier: bumgGRLJQmx0U5Xgt1B5xxcFcgkLJsXhJEJIRY+kZ24=
Subject key identifier: C3:83:95:69:BF:9B:DC:9E:98:F4:5A:A1:48:BC:18:08:E5:40:8F:39
Certificate issuer: /CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Certificate serial: 019F2369083662F4665A7818420BF8200223
Authority key identifier: 5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/w4OVab-b3J6Y9FqhSLwYCOVAjzk.roa
Signing time: Thu 02 Jul 2026 15:18:33 +0000
ROA not before: Thu 02 Jul 2026 15:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34927
IP address blocks: 89.187.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 19:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:08:36:62:f4:66:5a:78:18:42:0b:f8:20:02:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Validity
Not Before: Jul 2 15:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3839569bf9bdc9e98f45aa148bc1808e5408f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cf:08:0d:13:c9:6a:c4:f6:16:ba:c7:68:db:
82:e7:8a:da:51:df:f4:17:6a:de:a9:9a:27:7b:15:
86:eb:18:71:45:54:b7:df:e1:03:77:75:64:6f:59:
27:78:0c:11:8b:6b:51:d7:01:58:1e:2a:79:c0:40:
8d:41:f4:20:01:d4:67:18:9d:9f:8e:c2:4a:de:5f:
06:62:24:93:19:a7:c3:28:6d:38:e2:0a:ce:78:5d:
f0:1d:a0:89:66:70:78:6f:75:54:79:c5:a3:82:8b:
21:3a:99:22:6c:70:2e:46:5f:e4:69:09:39:bc:ac:
ef:11:89:10:be:45:a3:5a:c3:47:80:f0:2f:a0:d8:
31:65:33:0d:9d:b5:90:eb:f7:08:09:fe:a2:bc:6f:
a9:1d:aa:01:c0:8d:ac:48:5f:ac:20:07:35:3f:0a:
99:7b:34:20:0b:52:7c:63:d7:a2:51:43:94:c7:bc:
99:b3:b5:b3:99:9d:96:23:84:38:6b:61:9d:72:1d:
16:c9:45:56:e6:07:3f:0b:f3:66:82:75:30:1c:f5:
c1:7c:f5:eb:07:aa:ed:31:ad:33:ce:51:dd:27:01:
0a:28:23:58:51:37:61:2f:9c:3f:d0:32:74:0d:1b:
0f:6f:87:c8:d1:47:43:eb:8e:36:64:09:05:fc:15:
81:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:83:95:69:BF:9B:DC:9E:98:F4:5A:A1:48:BC:18:08:E5:40:8F:39
X509v3 Authority Key Identifier:
keyid:5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/w4OVab-b3J6Y9FqhSLwYCOVAjzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.21.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:00:da:ea:7e:48:a4:23:2b:66:7a:27:4f:c4:6a:a3:3e:71:
41:94:42:12:2e:20:69:9a:c7:cf:e4:16:3c:20:cd:70:f1:9f:
70:3f:e7:63:f6:ec:5f:96:e4:d0:9c:39:c2:6f:a4:47:d1:f3:
b3:2a:c4:5c:00:ff:dc:75:4d:99:62:07:3a:2e:09:de:b4:b0:
10:45:5b:4e:bc:d9:2a:8e:5b:23:dc:6e:d3:90:5f:36:90:5c:
55:47:f1:8a:09:7c:0d:b0:bb:2e:49:0a:ad:2b:a5:61:34:b2:
43:18:b6:ce:31:aa:1e:46:7d:64:13:82:87:bf:d7:a7:10:69:
5f:41:6e:0b:bd:c0:5c:4f:e7:09:65:fe:5c:2c:f8:74:6e:a3:
29:0f:5e:57:ae:0b:61:e0:32:6b:04:00:c9:29:cc:a7:15:18:
ad:cc:f4:f5:50:b4:d9:22:f5:2c:17:18:21:d6:c8:08:62:99:
19:b7:42:c7:33:72:6c:cf:57:b2:11:0e:c5:e8:fe:cf:0d:70:
c1:ee:61:3c:68:0e:d0:32:18:0e:93:95:68:43:b2:5c:a8:b1:
52:36:e2:59:9b:91:88:e3:02:5c:fb:43:01:69:2a:5d:e9:19:
d3:f6:a1:84:36:83:6e:13:67:62:6f:4d:b1:b1:03:39:76:ea:
38:16:e6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 00:10:35 2026 by rpki-client