Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/W7OCeVjnDM1-4HVVE1JCGRF07LQ.roa
File: W7OCeVjnDM1-4HVVE1JCGRF07LQ.roa (raw, json)
Hash identifier: jtiSfMp7zgFl2ldsG/nCaw43j4TvOIzaPpe9AIYRNcE=
Subject key identifier: 5B:B3:82:79:58:E7:0C:CD:7E:E0:75:55:13:52:42:19:11:74:EC:B4
Certificate issuer: /CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
Certificate serial: 019F1D8EBE160843F77D6154035436FC677A
Authority key identifier: 31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/W7OCeVjnDM1-4HVVE1JCGRF07LQ.roa
Signing time: Wed 01 Jul 2026 12:02:01 +0000
ROA not before: Wed 01 Jul 2026 12:02:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47217
IP address blocks: 5.100.232.0/24 maxlen: 24
5.100.233.0/24 maxlen: 24
5.100.234.0/24 maxlen: 24
5.100.235.0/24 maxlen: 24
5.100.236.0/24 maxlen: 24
5.100.237.0/24 maxlen: 24
5.100.238.0/24 maxlen: 24
5.100.239.0/24 maxlen: 24
94.142.144.0/24 maxlen: 24
94.142.145.0/24 maxlen: 24
94.142.146.0/24 maxlen: 24
94.142.147.0/24 maxlen: 24
94.142.148.0/24 maxlen: 24
94.142.149.0/24 maxlen: 24
94.142.150.0/24 maxlen: 24
94.142.151.0/24 maxlen: 24
212.103.192.0/24 maxlen: 24
212.103.193.0/24 maxlen: 24
212.103.194.0/24 maxlen: 24
212.103.195.0/24 maxlen: 24
212.103.196.0/24 maxlen: 24
212.103.197.0/24 maxlen: 24
212.103.198.0/24 maxlen: 24
212.103.199.0/24 maxlen: 24
212.103.200.0/24 maxlen: 24
212.103.201.0/24 maxlen: 24
212.103.202.0/24 maxlen: 24
212.103.203.0/24 maxlen: 24
212.103.204.0/24 maxlen: 24
212.103.205.0/24 maxlen: 24
212.103.206.0/24 maxlen: 24
212.103.207.0/24 maxlen: 24
212.103.208.0/24 maxlen: 24
212.103.209.0/24 maxlen: 24
212.103.210.0/24 maxlen: 24
212.103.211.0/24 maxlen: 24
212.103.212.0/24 maxlen: 24
212.103.213.0/24 maxlen: 24
212.103.214.0/24 maxlen: 24
212.103.215.0/24 maxlen: 24
212.103.216.0/24 maxlen: 24
212.103.217.0/24 maxlen: 24
212.103.218.0/24 maxlen: 24
212.103.219.0/24 maxlen: 24
212.103.220.0/24 maxlen: 24
212.103.221.0/24 maxlen: 24
212.103.222.0/24 maxlen: 24
212.103.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:8e:be:16:08:43:f7:7d:61:54:03:54:36:fc:67:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
Validity
Not Before: Jul 1 12:02:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5bb3827958e70ccd7ee07555135242191174ecb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5b:1d:ad:64:b5:48:27:c4:94:05:6e:2f:03:
53:c8:51:76:51:ae:cf:14:e9:4a:e3:9f:57:b0:2f:
18:f9:35:c0:63:a6:ec:94:92:25:42:96:f9:e8:80:
44:22:bf:c1:b4:27:68:4d:c8:5c:cf:01:8d:eb:c7:
45:8a:73:64:b3:33:a9:c6:ca:f5:5e:db:a3:a1:80:
90:25:55:d4:2c:38:49:b8:49:4c:76:2a:76:3b:21:
ba:66:d3:de:8b:6b:07:de:9f:fc:33:38:ac:b3:04:
0b:31:ec:66:96:39:32:0a:b3:76:77:8f:1e:f5:ed:
e2:90:3b:84:b8:e1:01:55:e5:7f:1d:4f:15:69:27:
58:8e:78:ac:a8:47:63:c0:10:18:c0:d2:71:23:e3:
6f:61:ee:ef:39:17:62:48:4f:e6:f5:97:34:a4:bf:
fe:c3:0f:f1:4d:cb:53:9e:b0:6f:31:b9:01:ed:18:
4a:15:52:99:4f:06:a8:c9:69:18:41:50:f8:fd:c6:
99:74:01:f6:88:66:f1:1d:68:a3:11:38:41:22:4e:
48:c7:5c:c3:dd:1b:31:25:29:95:d8:42:de:4a:a3:
b2:0a:fc:62:70:a9:7f:c3:d6:3d:ec:59:4a:58:97:
90:5c:50:ce:c5:d1:e1:97:8a:c2:e3:ac:3e:7c:3c:
2d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B3:82:79:58:E7:0C:CD:7E:E0:75:55:13:52:42:19:11:74:EC:B4
X509v3 Authority Key Identifier:
keyid:31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/W7OCeVjnDM1-4HVVE1JCGRF07LQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.232.0/21
94.142.144.0/21
212.103.192.0/19
Signature Algorithm: sha256WithRSAEncryption
5f:d1:cd:ae:8a:c7:a4:0b:9b:4e:e5:72:f5:bf:85:63:7f:b9:
f0:12:8e:b9:1b:e6:37:f5:ae:a5:be:9f:17:37:dc:aa:d8:d2:
a8:b3:a3:a0:78:94:d8:e6:a2:6f:37:30:b4:d4:f3:08:5c:47:
fd:4c:8e:c1:f5:1e:83:11:a6:52:e0:8f:7b:ef:fb:fe:1b:7f:
54:22:41:c8:8f:c6:92:f7:5a:e6:00:6a:a7:a6:9a:d6:43:08:
c1:c2:a9:b1:81:d2:16:e9:bc:e9:a1:51:75:66:81:44:b8:59:
ed:ef:0e:ad:c7:98:f1:8a:20:17:ad:04:7f:c7:28:b4:54:69:
bc:88:94:ac:ff:20:15:55:72:43:91:49:d6:43:4d:d1:1a:f1:
26:d9:ab:a7:d0:1f:1a:3a:77:b7:d3:1b:f1:f2:60:18:02:e2:
98:5b:dd:95:81:dd:71:a9:b2:ea:b6:a7:4a:06:a0:77:af:4b:
6e:61:47:ee:a8:f1:fc:ff:7a:53:33:70:42:bf:aa:d7:0f:be:
0c:07:af:4f:37:08:b4:a3:3b:c1:b5:04:9f:8f:e5:d1:47:3e:
a2:8a:dd:c8:8b:90:67:5f:35:58:df:4c:d5:e6:ab:ad:c5:b6:
10:39:0d:09:d0:d6:e5:a0:7f:32:d5:bd:0e:55:29:a9:98:a2:
e8:c9:2d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:47:59 2026 by rpki-client