Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/W5pIBeQsK3hJVY19_5p9Hvoipxc.roa
File: W5pIBeQsK3hJVY19_5p9Hvoipxc.roa (raw, json)
Hash identifier: cJRWenAuPEzk58wDkL4MKFr1t9a/AWbEIHrJtqkbALw=
Subject key identifier: 5B:9A:48:05:E4:2C:2B:78:49:55:8D:7D:FF:9A:7D:1E:FA:22:A7:17
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E224D1610537B416C5DAC737739CE63A9
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/W5pIBeQsK3hJVY19_5p9Hvoipxc.roa
Signing time: Wed 13 May 2026 17:05:37 +0000
ROA not before: Wed 13 May 2026 17:05:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 2.27.242.0/24 maxlen: 24
31.76.176.0/23 maxlen: 24
31.76.180.0/23 maxlen: 24
31.76.184.0/23 maxlen: 24
31.76.188.0/23 maxlen: 24
31.76.196.0/23 maxlen: 24
31.76.198.0/23 maxlen: 24
31.76.204.0/23 maxlen: 24
31.76.206.0/23 maxlen: 24
31.76.212.0/23 maxlen: 24
31.76.214.0/23 maxlen: 24
31.76.220.0/23 maxlen: 24
31.76.222.0/23 maxlen: 24
31.76.234.0/23 maxlen: 24
31.76.247.0/24 maxlen: 24
193.23.196.0/24 maxlen: 24
193.23.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 31 May 2026 05:18:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:22:4d:16:10:53:7b:41:6c:5d:ac:73:77:39:ce:63:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 13 17:05:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b9a4805e42c2b7849558d7dff9a7d1efa22a717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cf:02:79:4f:e0:a4:d5:17:00:f3:a0:32:1b:
29:9f:8f:a9:51:c5:08:6c:cb:59:50:b8:63:66:09:
99:fb:45:6a:f6:52:11:d8:b2:e8:0e:23:25:13:cc:
b1:34:d8:f2:e5:4e:a1:d7:63:f3:07:40:ef:5e:1b:
66:93:57:92:cf:74:bb:f5:2b:08:9b:56:4d:fb:ce:
5d:43:ad:02:d2:70:a4:6d:89:be:99:82:50:45:9e:
d3:fd:ac:6b:33:b4:5a:c9:8e:61:f6:30:f7:b6:6b:
d7:b9:62:b9:2c:e9:0c:0b:b5:7c:d8:e9:7c:d4:c5:
5e:1e:34:26:21:2f:0c:c6:ce:fb:d2:a9:ee:6c:5b:
c5:19:f6:43:49:d6:8a:62:b8:03:7c:12:d8:65:e8:
51:75:0a:11:1a:a1:f2:d8:77:61:5c:50:72:30:23:
e5:a4:ad:22:d1:4d:31:a7:59:77:b4:5c:1a:cf:98:
0f:db:86:78:c4:73:d1:eb:e3:4e:1c:87:d5:90:32:
dd:68:7b:2a:48:8d:ed:5e:5b:dc:fa:c9:d0:cd:61:
6a:4b:d6:29:e4:85:87:46:6a:1c:97:ae:b2:94:b6:
a8:5e:8a:48:76:ca:88:c9:e2:c7:d1:78:d9:7f:ee:
74:28:24:d3:65:15:50:b1:84:78:b1:d0:be:f4:3f:
89:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9A:48:05:E4:2C:2B:78:49:55:8D:7D:FF:9A:7D:1E:FA:22:A7:17
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/W5pIBeQsK3hJVY19_5p9Hvoipxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.242.0/24
31.76.176.0/23
31.76.180.0/23
31.76.184.0/23
31.76.188.0/23
31.76.196.0/22
31.76.204.0/22
31.76.212.0/22
31.76.220.0/22
31.76.234.0/23
31.76.247.0/24
193.23.196.0/24
193.23.223.0/24
Signature Algorithm: sha256WithRSAEncryption
97:c1:7d:cf:62:0c:07:6d:a0:8f:46:de:ff:e6:4e:2e:33:c7:
46:c3:fb:ac:b9:e2:86:c8:c0:16:b5:34:8f:81:eb:0b:66:0d:
fe:91:5d:d7:4d:85:b0:5b:a5:3b:21:7b:1a:b6:9c:9f:c3:1b:
cf:d4:0e:a2:d4:30:81:e9:a4:7c:43:03:ca:7b:81:ae:ca:bd:
69:2a:e1:ba:a8:50:fe:7b:f9:3b:d8:5f:2c:a3:72:31:d3:32:
00:1a:34:4e:95:7b:0c:49:60:15:7c:a3:6c:ed:24:df:41:b7:
ee:41:be:1d:ec:b4:b5:e2:c0:7f:e9:1e:ea:69:96:bd:f1:5a:
23:40:cd:a4:01:5b:1c:d2:b1:3f:69:51:20:fe:18:3c:7d:01:
0e:95:50:46:62:90:0d:99:c7:0c:3e:ac:bf:81:52:0e:7c:ec:
4b:3a:bc:d6:90:63:d7:93:ed:0b:07:f7:3d:db:23:a3:8a:2a:
6a:db:81:65:5a:88:ce:e3:ab:24:e5:d8:ec:cb:2c:2f:1d:b7:
fd:fd:38:e2:57:c0:40:45:3a:7e:f6:c7:03:f6:ba:ac:5d:8a:
e9:19:80:3a:05:e0:a9:b1:0b:82:d4:01:54:0d:ff:6d:ed:47:
17:1b:37:af:9a:6f:69:2e:08:86:f9:71:43:72:18:06:8e:3d:
4b:e9:78:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 11:50:06 2026 by rpki-client