Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/WXAQVkTWgyoj3KPpi2VgFwniHvk.roa
File: WXAQVkTWgyoj3KPpi2VgFwniHvk.roa (raw, json)
Hash identifier: c0ZPszhFyOnuGmI8GLQRJm9JY3LUspp9dFqvFQbx9Dk=
Subject key identifier: 59:70:10:56:44:D6:83:2A:23:DC:A3:E9:8B:65:60:17:09:E2:1E:F9
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 019DE57A6850A0B177C3DD9825578F6C6A77
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/WXAQVkTWgyoj3KPpi2VgFwniHvk.roa
Signing time: Fri 01 May 2026 21:38:17 +0000
ROA not before: Fri 01 May 2026 21:38:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201407
IP address blocks: 152.89.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e5:7a:68:50:a0:b1:77:c3:dd:98:25:57:8f:6c:6a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: May 1 21:38:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5970105644d6832a23dca3e98b65601709e21ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:91:18:4e:4e:13:b2:70:05:37:60:23:05:5d:
d8:2a:cd:30:ac:a5:a5:12:99:aa:cd:34:c7:7b:db:
1e:18:a0:2a:ff:91:3c:13:87:14:41:08:5f:47:26:
06:78:08:d1:60:6d:84:0c:e8:e8:40:f2:1f:34:ff:
00:c7:b9:01:10:ac:d3:2a:5b:b1:e7:d4:0c:ce:9a:
13:07:4f:ac:75:6f:2e:4a:cc:b1:cd:10:6f:bb:6e:
01:c9:d6:c7:5d:d2:75:af:9a:b4:67:87:82:a4:d9:
3e:50:a7:56:0c:4a:91:e0:2f:8b:f9:4e:d7:f5:93:
66:ad:b9:19:8a:99:af:3f:4c:cb:25:a8:57:59:62:
67:04:d2:e4:dd:fc:67:e0:4e:94:e0:0d:a8:0b:3c:
6a:d9:67:f9:b4:76:28:04:cd:17:d9:7d:dd:72:dc:
58:a6:a5:49:1e:0e:6d:4e:6f:46:ec:3e:8c:b9:74:
0e:3d:a8:97:3d:d7:e7:3f:7a:90:67:11:36:ab:00:
83:bb:83:9f:79:50:eb:e5:2b:3f:df:cc:a7:62:6d:
53:b3:14:aa:0b:60:1a:96:bb:b7:e7:cc:e8:c8:3d:
a2:79:f7:80:13:03:f6:3c:8c:ff:db:f0:60:70:74:
36:e7:a3:b7:33:29:2b:21:34:14:ab:62:0b:86:bb:
64:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:70:10:56:44:D6:83:2A:23:DC:A3:E9:8B:65:60:17:09:E2:1E:F9
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/WXAQVkTWgyoj3KPpi2VgFwniHvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.195.0/24
Signature Algorithm: sha256WithRSAEncryption
be:18:9d:26:dd:82:4d:5e:ea:bd:b7:89:da:5c:14:43:22:8a:
2a:c1:d7:87:f2:05:41:2d:cd:e6:4a:d7:43:c4:ad:54:8c:bb:
be:da:0b:3d:f1:94:ce:6b:2c:4c:a2:35:7c:e3:f6:6e:27:c7:
65:46:01:bd:7d:74:1b:20:01:f2:5d:40:c4:70:71:a7:5f:d7:
77:eb:ea:fc:81:ee:ba:b8:77:2c:27:35:a5:95:5d:de:c6:0a:
31:75:18:11:a2:04:fa:5c:aa:b1:c8:cd:27:c9:f1:0a:e8:ad:
25:21:81:db:45:9e:05:fb:7d:30:d6:b5:8c:2d:db:1b:00:4a:
7c:1e:78:b6:9d:4b:a9:76:fa:e3:b8:07:df:f4:c4:67:e1:bf:
70:da:39:a9:87:49:4f:92:f9:e4:e2:f3:aa:70:2f:d9:d5:c8:
da:94:92:93:ce:4d:f8:04:0c:3f:d3:7f:e1:4a:f4:11:c9:82:
12:74:a3:e3:94:ca:a8:c2:e2:8c:4b:04:e1:93:fa:df:3f:ee:
d8:65:ff:55:37:82:dc:ba:fd:65:53:d5:c5:eb:0e:18:bb:31:
39:3d:15:fc:2a:e2:74:db:8e:76:b7:73:d7:bf:ac:bd:18:69:
01:5b:c6:f7:f2:64:a5:d1:1b:15:70:3e:36:7b:e8:f3:82:f3:
9f:a3:0a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:14:41 2026 by rpki-client