Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/W3NYzWzjPa3E5abvT3MHweCBVVM.roa
File: W3NYzWzjPa3E5abvT3MHweCBVVM.roa (raw, json)
Hash identifier: 4HQnVlXppoJxyMEJ+GnZ5wfN5KlLsFwqKOQ1mb3g9Y4=
Subject key identifier: 5B:73:58:CD:6C:E3:3D:AD:C4:E5:A6:EF:4F:73:07:C1:E0:81:55:53
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019E3A356130C0B95248CD0C4A65C5DF535E
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/W3NYzWzjPa3E5abvT3MHweCBVVM.roa
Signing time: Mon 18 May 2026 08:30:37 +0000
ROA not before: Mon 18 May 2026 08:30:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207994
IP address blocks: 5.253.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3a:35:61:30:c0:b9:52:48:cd:0c:4a:65:c5:df:53:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: May 18 08:30:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b7358cd6ce33dadc4e5a6ef4f7307c1e0815553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:05:a0:10:b2:72:73:dc:a3:36:93:77:46:fb:
98:7e:ef:2b:ac:77:34:28:46:78:72:46:53:88:fe:
b1:8e:42:f8:59:8b:31:52:dd:73:b8:16:fb:db:f5:
b1:cc:bd:67:79:93:06:7c:5d:60:3a:7b:49:d8:fe:
9d:e7:7a:89:bb:a4:0a:a8:e8:a1:9f:20:d6:ea:e2:
9e:63:9a:0a:6a:77:13:a1:2c:21:da:76:3c:76:7d:
53:d7:ed:0a:c4:3a:55:36:68:36:29:ff:ba:03:70:
5a:7e:73:39:81:4a:8b:fb:c6:bc:18:ab:77:62:88:
b0:a6:ab:bc:24:15:a8:73:ca:a2:46:f4:87:75:e8:
a2:ce:0c:d4:cb:54:74:16:53:18:42:9d:9d:3d:f8:
3a:63:ad:eb:df:ad:4b:cf:39:39:b3:fc:3a:e4:b4:
3c:ea:94:19:4e:2b:1f:38:a5:24:bd:a5:34:5e:d3:
d0:bc:72:a2:68:ea:b4:35:e5:90:2d:75:8f:8d:52:
34:a8:4f:2b:bf:57:21:6b:88:37:7a:2b:63:f7:e7:
a6:89:0d:94:4c:6d:d1:09:35:7c:01:d4:79:8b:2b:
f3:8a:b8:7e:ef:38:89:fa:67:d1:f5:48:02:98:e7:
47:b6:b2:4a:30:c1:c4:44:62:a9:dc:3b:f0:52:57:
30:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:73:58:CD:6C:E3:3D:AD:C4:E5:A6:EF:4F:73:07:C1:E0:81:55:53
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/W3NYzWzjPa3E5abvT3MHweCBVVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.37.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:00:4c:08:d2:28:e1:6a:0d:8c:c0:6d:37:b0:c2:97:70:58:
5e:2f:d3:89:fe:58:ee:44:f3:50:b1:81:3e:0a:70:80:49:c0:
73:eb:ed:76:2c:5f:87:b4:bb:22:cf:00:5d:c8:35:04:7a:ee:
46:0b:14:ca:91:b9:38:2f:28:f5:4d:9b:3b:8b:4d:d0:fa:36:
13:c6:94:91:63:8a:f8:cf:bd:7d:29:81:c2:15:c6:77:1f:22:
c0:9c:f6:a4:eb:3b:33:03:03:6d:b6:9a:e2:bc:86:3c:11:5a:
45:7f:b9:3b:09:8e:b9:8e:37:69:95:80:75:ce:33:ec:6a:4f:
9d:57:05:d4:98:32:da:3a:ba:f0:12:07:a0:33:2c:11:7b:96:
91:9e:db:c5:e7:43:c4:cb:49:5e:36:17:e1:ae:81:63:1b:eb:
d9:66:35:81:56:eb:ff:d3:96:f8:e9:e7:df:37:14:3a:d4:f9:
5a:f7:2a:1b:72:97:98:cb:3c:6a:dc:7f:5a:69:ae:ef:fe:cc:
0e:42:42:3c:20:eb:ed:5b:d6:e9:5d:5d:e3:50:fe:4c:5e:3b:
cd:33:3c:be:01:ff:05:66:18:fe:bb:d9:ab:20:f7:d7:f0:17:
19:f3:5b:f7:a6:00:a2:81:fe:0b:6a:25:78:d3:de:7b:e7:bc:
b4:ed:5c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 08:13:26 2026 by rpki-client