Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/wJwIjVR2-fL6trmo4xS7pgKXn78.roa
File: wJwIjVR2-fL6trmo4xS7pgKXn78.roa (raw, json)
Hash identifier: tQVVgujeUW6h85LKtOmsgvIqPIxx0NEuwCcq9hKKPN0=
Subject key identifier: C0:9C:08:8D:54:76:F9:F2:FA:B6:B9:A8:E3:14:BB:A6:02:97:9F:BF
Certificate issuer: /CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Certificate serial: 01A13AC5555442DE76DDD9B78C74F46B4184
Authority key identifier: E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/wJwIjVR2-fL6trmo4xS7pgKXn78.roa
Signing time: Wed 14 Oct 2026 14:16:13 +0000
ROA not before: Wed 14 Oct 2026 14:16:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48538
IP address blocks: 187.52.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 17:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:c5:55:54:42:de:76:dd:d9:b7:8c:74:f4:6b:41:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Validity
Not Before: Oct 14 14:16:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c09c088d5476f9f2fab6b9a8e314bba602979fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bf:ae:e8:5e:c7:53:8f:ec:60:b0:f1:ab:f9:
3e:7c:5e:e1:0f:ce:14:d4:60:6e:9f:8f:1c:6a:9c:
5f:0e:aa:2e:86:93:e4:5d:e0:ca:55:c8:44:6a:44:
4a:d4:4c:22:c6:ef:ba:ab:ca:98:29:5c:b3:c7:2e:
e6:70:05:5a:5f:82:4e:c2:fd:0b:fc:e6:7e:ea:7c:
48:df:0c:fc:03:cc:08:b0:bc:10:2c:72:45:70:58:
e5:1e:3a:85:c4:22:45:36:3e:90:27:b0:f7:3d:44:
c9:b0:3a:94:43:8c:96:07:44:23:f5:b9:c3:c4:a3:
3e:b5:c0:70:6c:fc:d9:4d:08:44:b6:09:cb:88:b2:
44:87:ec:ba:50:69:b5:52:81:f9:c0:7b:b8:62:55:
97:17:1e:7e:7d:c9:77:aa:8e:06:ef:14:f4:ef:11:
3e:f7:e9:e5:5a:f8:2d:e9:85:22:15:be:0e:92:42:
cb:e7:9e:70:a1:71:7d:1a:c6:88:b8:e7:ab:13:97:
ee:05:36:3d:67:8c:6c:e3:16:07:9d:e6:e7:f1:82:
70:3c:ce:fd:84:44:da:5c:ac:c1:d6:2b:fc:46:62:
19:fa:8d:63:5d:cb:f3:2f:73:ef:d0:af:58:06:ba:
45:fc:84:cd:e8:de:a9:f4:91:73:14:90:04:f4:4f:
ec:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:9C:08:8D:54:76:F9:F2:FA:B6:B9:A8:E3:14:BB:A6:02:97:9F:BF
X509v3 Authority Key Identifier:
keyid:E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/wJwIjVR2-fL6trmo4xS7pgKXn78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.52.38.0/24
Signature Algorithm: sha256WithRSAEncryption
06:6e:44:1b:69:41:cb:bb:98:47:78:f2:78:ae:0f:42:c4:10:
8a:e0:49:06:4d:2a:3b:ff:8f:af:c9:3f:a9:3b:7e:51:2c:f4:
45:4c:59:7e:88:2a:b3:c7:64:e9:6b:c2:4a:cf:a3:c9:77:37:
00:cb:09:e0:c4:69:29:d6:fd:4d:2a:a1:4a:fc:0d:b6:9f:6d:
a8:6f:1d:f3:57:fd:93:a5:e3:34:ab:c2:b2:29:bc:c0:05:21:
91:21:9d:db:5a:64:eb:99:8e:d8:aa:54:7f:98:1b:52:06:03:
fc:73:88:74:e3:ab:c8:af:72:62:41:72:bc:08:ec:f5:85:bf:
6d:fa:7a:28:99:15:08:12:f4:29:a8:c2:50:68:7e:48:22:a2:
85:b3:b6:b1:a3:e8:ba:94:32:ce:e5:8b:07:dd:c9:20:c8:3c:
8b:17:18:f8:a3:17:46:6c:31:a1:76:24:3d:4f:3f:63:9f:4e:
0e:43:df:03:2e:cd:f4:d4:f2:0a:d8:d5:4a:33:31:9e:ec:77:
4f:03:5a:3b:43:c8:3f:47:e2:48:e3:c7:b3:86:64:d7:a4:4a:
bb:c2:88:8b:a1:aa:eb:43:29:91:8c:da:f7:5c:34:dc:9a:05:
79:cd:67:99:f5:7d:fd:86:7e:91:47:d8:8e:9e:db:a8:44:06:
8f:95:ee:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:58:58 2026 by rpki-client