Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/WTyFQuj-7XSERQ5J7zpNpHyytq4.roa
File: WTyFQuj-7XSERQ5J7zpNpHyytq4.roa (raw, json)
Hash identifier: +iGRzoX/V3LCCYj5uZ3+WpamqOMsOQAp8ibBlgT8hBk=
Subject key identifier: 59:3C:85:42:E8:FE:ED:74:84:45:0E:49:EF:3A:4D:A4:7C:B2:B6:AE
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A08BA5399F14CF7E4D680BC97F5586C1C4
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/WTyFQuj-7XSERQ5J7zpNpHyytq4.roa
Signing time: Thu 10 Sep 2026 14:07:36 +0000
ROA not before: Thu 10 Sep 2026 14:07:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51722
IP address blocks: 2.56.127.0/24 maxlen: 24
5.180.45.0/24 maxlen: 24
45.12.143.0/24 maxlen: 24
185.153.182.0/24 maxlen: 24
194.55.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 16:27:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:a5:39:9f:14:cf:7e:4d:68:0b:c9:7f:55:86:c1:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 10 14:07:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=593c8542e8feed7484450e49ef3a4da47cb2b6ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a6:8d:33:ed:2f:b0:77:f5:02:73:32:d7:d5:
07:ce:1e:e3:c5:e9:93:38:74:a8:5e:7d:cb:e9:0c:
ef:f3:09:ad:78:fa:79:77:77:c6:f9:03:75:ad:a0:
b3:ca:65:9e:94:7f:11:47:1c:d5:bd:89:0c:0f:2e:
4d:b5:89:c8:cc:8a:67:a0:d1:b0:c9:6c:87:c2:40:
7f:a7:b0:94:8f:73:cc:98:67:8f:94:46:f6:cb:2f:
40:ed:9a:bc:77:99:4c:87:f9:09:49:6c:e4:a2:fc:
2b:e0:fe:d0:65:cd:84:d2:68:fc:2b:94:5e:2d:2a:
b4:46:c1:96:ae:b6:25:48:1f:08:d5:af:59:85:73:
53:b4:49:60:0b:b4:39:0d:64:12:fb:32:69:49:ac:
85:3f:d0:55:23:f3:ef:92:22:f5:a2:fc:5d:5e:99:
54:fd:ba:c7:da:37:de:f2:52:db:58:4e:5b:06:fa:
11:45:1d:f0:23:1e:c7:ff:7a:d7:b1:4f:36:5c:c0:
5a:d3:aa:6e:b3:4c:fb:ca:4d:89:b8:39:b2:28:61:
80:3e:cb:f7:6c:d1:bb:34:a2:c7:e1:66:a9:f5:a2:
80:4c:c0:53:ee:ab:16:2f:21:47:92:fd:2c:42:44:
2f:a3:e7:7e:23:f5:26:0e:70:49:de:8b:8f:d4:6b:
1e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:3C:85:42:E8:FE:ED:74:84:45:0E:49:EF:3A:4D:A4:7C:B2:B6:AE
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/WTyFQuj-7XSERQ5J7zpNpHyytq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.127.0/24
5.180.45.0/24
45.12.143.0/24
185.153.182.0/24
194.55.136.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:28:a2:ed:ea:a0:d0:c9:38:41:ac:00:7a:01:98:64:ed:23:
e0:ed:b6:d5:50:f7:d4:ad:91:e8:9e:a8:07:21:a1:70:ac:d4:
94:4c:1e:d6:fb:e9:07:08:cf:6d:43:5f:a7:3e:26:7c:b8:74:
f4:fd:47:5a:c8:f9:40:ce:59:f9:dc:30:fc:58:35:a1:f4:d7:
01:32:64:3b:0e:ff:65:da:30:e1:e7:76:a9:b7:ab:21:86:45:
4d:28:9b:ac:af:26:49:a0:44:af:61:87:08:89:41:b8:ed:c3:
6a:53:a0:8a:bd:67:9d:a3:42:55:9b:2a:38:8b:f6:df:99:a0:
7f:b6:a7:de:26:6e:f2:9e:34:5c:0b:38:66:b0:e9:ac:cc:34:
1b:63:3b:48:ac:8d:34:b2:b4:67:50:95:2d:f4:b9:d6:b1:8c:
cd:01:ad:b4:44:60:4a:d4:04:14:db:d7:5d:49:6e:54:36:af:
89:04:12:60:08:30:e1:5f:80:10:30:a6:2e:4c:05:71:4b:df:
df:44:8f:ad:6c:b9:c6:4e:61:3e:d7:01:4a:0e:90:2e:58:3c:
07:f3:83:c6:59:29:72:ec:4f:2a:e4:e0:4a:23:4c:ff:62:2b:
da:3f:fb:36:03:11:ce:f5:3c:94:6a:6b:3c:51:fe:18:a4:26:
43:0f:14:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 01:21:30 2026 by rpki-client