Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/W-Mn3mRIPy5eftp-m5W9VYukpx0.roa
File: W-Mn3mRIPy5eftp-m5W9VYukpx0.roa (raw, json)
Hash identifier: TnYfyupkGfLdqqOS14panCT7rpDNGcWUzLwA3shtY70=
Subject key identifier: 5B:E3:27:DE:64:48:3F:2E:5E:7E:DA:7E:9B:95:BD:55:8B:A4:A7:1D
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 01A03776B27516E5EE5369A8E6ABCCD94BBE
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/W-Mn3mRIPy5eftp-m5W9VYukpx0.roa
Signing time: Tue 25 Aug 2026 05:48:40 +0000
ROA not before: Tue 25 Aug 2026 05:48:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56619
IP address blocks: 77.34.72.0/24 maxlen: 24
79.98.249.0/24 maxlen: 24
79.98.252.0/24 maxlen: 24
79.98.253.0/24 maxlen: 24
90.188.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 21:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:37:76:b2:75:16:e5:ee:53:69:a8:e6:ab:cc:d9:4b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Aug 25 05:48:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5be327de64483f2e5e7eda7e9b95bd558ba4a71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:09:62:b7:f6:db:01:f4:e7:65:b0:44:4f:db:
4b:c8:d2:95:dd:b6:c8:61:f4:e2:38:75:5c:96:cd:
09:59:ba:99:83:f2:32:c8:1a:a1:cf:89:10:dc:73:
96:72:24:37:eb:24:7c:4f:2e:ca:fb:9f:07:47:b8:
1d:65:be:76:3b:c4:1f:27:5d:12:cf:99:0e:a2:b0:
81:85:d5:a3:6a:54:ac:62:ab:95:53:b2:e6:a9:1c:
5c:7b:a4:eb:60:d6:68:fc:8d:04:e1:70:95:a3:f9:
1c:4f:7f:f3:ff:67:4e:20:6d:70:5c:3b:a7:3d:da:
96:d4:0f:fe:81:4f:80:c2:74:43:db:49:c7:dd:90:
c0:ec:a9:a6:07:45:d1:ef:4d:3b:2f:a0:d1:e5:da:
cc:7f:e7:6e:99:72:30:09:39:ce:5e:8b:50:96:3e:
93:26:24:7a:ef:ed:e6:00:c3:9b:90:28:79:2a:12:
11:2c:5c:9a:97:fc:f0:32:68:cf:63:72:2b:1d:be:
a6:86:c6:d5:85:aa:92:4e:a7:9d:2c:aa:df:bb:cf:
e8:da:49:ac:1b:aa:8f:d4:7a:12:b6:0d:94:06:23:
52:78:e8:ff:fd:18:13:94:45:ac:e9:da:ce:db:80:
f3:46:48:47:58:1a:1c:ef:d4:5a:a3:5a:ee:3b:4d:
5c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E3:27:DE:64:48:3F:2E:5E:7E:DA:7E:9B:95:BD:55:8B:A4:A7:1D
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/W-Mn3mRIPy5eftp-m5W9VYukpx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.34.72.0/24
79.98.249.0/24
79.98.252.0/23
90.188.199.0/24
Signature Algorithm: sha256WithRSAEncryption
44:cf:18:3b:ea:43:50:56:0a:16:28:e9:d6:b5:77:e7:2e:f6:
fe:f0:22:3a:fd:57:8a:9d:50:24:be:ea:73:df:a5:ae:cb:c4:
ae:3a:37:ec:44:f8:68:6f:ca:04:ce:b2:e9:09:f8:ef:1b:a1:
79:36:d8:83:15:ab:59:9b:7f:c2:be:8d:2b:0e:29:c2:b9:49:
e0:08:37:bc:c5:7d:21:24:59:09:71:4c:ad:82:ae:27:31:71:
0e:41:6b:ea:da:c8:29:a5:8f:c7:94:99:09:70:6b:39:f2:27:
1c:24:fa:7a:b1:d4:5f:3b:cd:39:7e:03:11:33:37:c1:91:9a:
fc:a5:a2:f7:b1:b2:ee:f9:1d:2e:db:d9:d2:9e:02:d2:c3:a7:
32:8d:75:84:6e:b3:f2:ce:17:a1:c9:46:c4:c4:f4:df:3f:fb:
87:cc:77:c4:83:c3:77:be:44:05:c4:2f:3e:cf:db:98:cc:0a:
3b:4f:85:c7:16:ba:cc:71:fc:09:b2:82:a9:d5:b2:a5:ce:67:
84:3e:62:28:c3:96:b6:9c:3a:1a:84:ee:bf:d3:43:f2:a5:76:
8d:85:a0:d7:d5:42:62:26:48:a1:4a:2a:da:a7:cd:cb:67:75:
da:d0:b2:3f:9b:de:5b:27:e9:9c:b9:a4:8e:ad:dc:a5:d6:38:
40:18:fa:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 07:29:42 2026 by rpki-client