Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/W--PYm95WmPyMK8dgSgV_MgjMDs.roa
File: W--PYm95WmPyMK8dgSgV_MgjMDs.roa (raw, json)
Hash identifier: R9ZHpGeHyDL8BzmrmuurqwX+rq5/d11mCwkWHYGA13Y=
Subject key identifier: 5B:EF:8F:62:6F:79:5A:63:F2:30:AF:1D:81:28:15:FC:C8:23:30:3B
Certificate issuer: /CN=a3d95cb980d436700f91aea577f0a1c3d1013851
Certificate serial: 019F23691F6EE5AFE785BAA81333BD77DA7E
Authority key identifier: A3:D9:5C:B9:80:D4:36:70:0F:91:AE:A5:77:F0:A1:C3:D1:01:38:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9lcuYDUNnAPka6ld_Chw9EBOFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/W--PYm95WmPyMK8dgSgV_MgjMDs.roa
Signing time: Thu 02 Jul 2026 15:18:39 +0000
ROA not before: Thu 02 Jul 2026 15:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3301
IP address blocks: 5.179.112.0/21 maxlen: 24
31.216.32.0/21 maxlen: 24
81.91.0.0/20 maxlen: 24
176.57.88.0/22 maxlen: 24
185.21.144.0/22 maxlen: 24
185.27.240.0/22 maxlen: 24
193.108.0.0/21 maxlen: 24
213.180.64.0/19 maxlen: 24
2a00:5860::/32 maxlen: 48
2a03:2f80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9lcuYDUNnAPka6ld_Chw9EBOFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1f:6e:e5:af:e7:85:ba:a8:13:33:bd:77:da:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3d95cb980d436700f91aea577f0a1c3d1013851
Validity
Not Before: Jul 2 15:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5bef8f626f795a63f230af1d812815fcc823303b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f0:1d:04:b9:9f:3c:b5:e1:ca:77:64:4c:9c:
15:13:45:d4:c7:04:2a:ed:a7:93:00:5a:cd:4e:2f:
d7:31:79:5c:50:df:f7:3d:96:a1:ae:54:3b:5d:54:
ab:1a:60:6e:ae:97:4b:1b:52:6e:3a:7f:ba:62:7b:
7a:6f:72:4c:80:cb:5d:31:c2:fd:5f:0e:8d:0f:d9:
d8:fd:f5:60:a5:2f:06:0d:a2:1d:60:4d:e4:a4:7a:
82:2a:9b:bf:79:b2:6a:08:08:bf:a8:c9:bc:fa:ee:
f6:a0:c2:0b:b3:f3:b8:7a:dd:b7:f9:c4:f2:32:1c:
26:85:66:2c:df:05:4e:54:05:a8:a7:f4:ea:f4:81:
a1:85:83:bd:31:17:23:5b:68:fb:0b:e6:ec:3b:bc:
00:49:ed:50:b6:38:1c:12:71:b1:da:9d:1b:37:a4:
82:59:ca:4b:bb:c5:6b:ad:81:df:c4:4c:e3:dd:4c:
a1:6b:86:55:fc:a0:81:4e:a4:f8:a3:f2:31:d7:a2:
59:03:49:c4:ca:41:11:ae:bc:c0:3c:a6:57:41:ff:
5d:5b:92:17:2c:55:f5:07:4b:47:cd:ca:ba:0c:be:
cd:22:5b:75:41:f0:96:86:ac:b8:27:86:5c:03:1a:
dc:fd:d0:f5:2e:43:d8:18:c1:e7:7c:ec:4d:82:f6:
67:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:EF:8F:62:6F:79:5A:63:F2:30:AF:1D:81:28:15:FC:C8:23:30:3B
X509v3 Authority Key Identifier:
keyid:A3:D9:5C:B9:80:D4:36:70:0F:91:AE:A5:77:F0:A1:C3:D1:01:38:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9lcuYDUNnAPka6ld_Chw9EBOFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/W--PYm95WmPyMK8dgSgV_MgjMDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/o9lcuYDUNnAPka6ld_Chw9EBOFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.179.112.0/21
31.216.32.0/21
81.91.0.0/20
176.57.88.0/22
185.21.144.0/22
185.27.240.0/22
193.108.0.0/21
213.180.64.0/19
IPv6:
2a00:5860::/32
2a03:2f80::/32
Signature Algorithm: sha256WithRSAEncryption
40:78:99:55:eb:36:15:fc:a0:0c:b3:14:b5:d0:22:cc:5f:d8:
ef:9a:f0:b8:0c:e5:be:0f:8c:c9:fa:dd:e4:bf:36:81:80:61:
cf:43:86:48:f7:d4:20:a0:b5:b5:64:d9:a2:30:15:51:47:d2:
7e:4c:b8:bf:a0:b9:fc:94:cd:96:c4:ef:a5:19:3c:32:f1:f9:
b0:7c:62:27:25:17:09:51:70:49:17:0b:de:10:16:20:fd:fe:
b5:97:81:83:7e:47:b1:87:5f:d8:65:1f:35:49:f4:0c:80:14:
43:00:1e:4b:3a:ad:32:69:eb:72:34:f7:1c:dc:51:14:18:a3:
77:f3:14:2d:a5:65:55:09:9a:63:23:1b:00:7b:39:13:c3:11:
c4:72:27:26:a2:30:41:4a:b4:82:d3:f1:f3:d1:c2:ea:65:df:
ac:25:64:ad:2d:8a:ba:65:e2:49:18:73:51:a1:a1:b4:72:6c:
68:be:d5:b0:98:d8:e4:86:ed:5f:ef:ef:1d:1c:1f:38:29:28:
1c:11:8a:0c:72:ff:8c:2c:d6:14:6c:83:0e:be:2c:d3:9a:4a:
73:e3:cf:18:e4:be:4c:4f:8d:11:00:95:1e:88:f5:9d:27:34:
db:cf:8a:c3:38:cc:73:e0:5b:98:77:79:ae:c4:91:12:64:db:
14:93:63:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:44:16 2026 by rpki-client