Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wjWj1HRncN__duKRO7S55MSvwjA.roa
File: wjWj1HRncN__duKRO7S55MSvwjA.roa (raw, json)
Hash identifier: R9wrj3fLa0pPTWxFpcieqCHEYPIIs8Kt0Jd1Vpp1jgc=
Subject key identifier: C2:35:A3:D4:74:67:70:DF:FF:76:E2:91:3B:B4:B9:E4:C4:AF:C2:30
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A1D4C579BDCE37FF6B03B4ED4E36C0981D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wjWj1HRncN__duKRO7S55MSvwjA.roa
Signing time: Fri 13 Nov 2026 11:57:53 +0000
ROA not before: Fri 13 Nov 2026 11:57:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64160
IP address blocks: 5.175.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:11:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d4:c5:79:bd:ce:37:ff:6b:03:b4:ed:4e:36:c0:98:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 13 11:57:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c235a3d4746770dfff76e2913bb4b9e4c4afc230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3e:6f:5c:5e:98:2d:ba:b7:8c:cb:79:c8:1c:
e4:19:3c:bf:d6:52:3e:5e:26:25:97:77:a8:ff:f5:
5a:19:65:74:00:a9:45:7b:3b:3f:4e:90:59:5c:9c:
5c:c4:13:56:02:c4:c0:6d:a8:71:89:d2:a7:ce:c8:
c0:c1:2a:f1:c5:8d:5b:78:9f:f4:61:ab:46:6e:01:
d1:93:fb:0f:6c:e5:f4:50:46:0f:dc:bd:53:2c:b1:
04:d4:66:ab:cb:29:f3:7c:b0:98:82:35:98:2f:83:
76:47:fd:2b:05:32:37:e9:58:52:ab:3a:7d:ad:90:
be:ab:32:98:6f:78:99:a0:74:07:de:b4:24:f4:1a:
70:e7:1c:f5:8b:1e:ec:10:92:37:e9:11:b4:73:54:
60:d5:e5:e5:01:65:0d:13:f5:6c:07:55:52:04:5a:
c9:21:2b:8f:b9:d7:96:89:65:bf:50:08:3e:dd:8d:
03:56:8b:dd:35:75:6d:dd:d0:11:12:2f:ef:23:f0:
9b:49:a5:f4:05:92:3b:b0:28:34:28:00:33:9d:07:
6d:03:c5:c9:66:30:dd:ea:f2:97:8d:45:99:e0:a5:
64:e5:16:6d:62:68:8a:6b:17:75:0b:b1:15:ac:1c:
3e:59:48:21:26:97:e1:1b:3a:f9:35:4f:fc:d7:2b:
f9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:35:A3:D4:74:67:70:DF:FF:76:E2:91:3B:B4:B9:E4:C4:AF:C2:30
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wjWj1HRncN__duKRO7S55MSvwjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.238.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:c1:38:ae:e8:2a:aa:3e:68:81:6e:bd:be:d2:e2:2b:71:62:
36:13:8a:4f:d4:98:7d:81:70:73:4b:60:d1:ca:59:7e:a8:f5:
f8:3e:ea:07:75:d9:54:db:0f:75:b6:f5:a9:cd:95:da:95:8e:
2f:47:26:10:c2:ac:e3:ce:88:da:a3:4c:32:74:57:98:8f:e2:
67:47:51:41:5f:41:f8:b7:73:3c:23:d0:0f:55:48:93:33:fc:
b0:8f:34:4b:2d:ec:c2:c8:8c:b1:96:bb:cf:44:dd:24:f1:9e:
f3:ac:76:cc:c3:3c:4f:ae:0f:eb:cf:f9:ea:90:24:65:fb:ad:
ba:3c:c5:49:f5:f8:f0:52:f3:85:5c:44:50:4a:3e:b5:59:71:
81:70:ee:e6:ba:8c:28:00:94:04:a4:39:d1:f6:f1:67:f7:aa:
88:01:29:3f:b3:71:2b:42:ff:c7:d0:41:97:aa:09:89:f2:14:
b1:56:d8:0a:cb:76:03:56:c2:19:6b:27:57:90:1a:66:80:27:
0f:da:5e:ac:42:3f:b6:44:12:0a:b1:e3:a2:7c:c3:36:3c:ce:
54:57:f5:6b:7d:bd:19:df:78:e9:a5:0b:76:f0:c5:72:64:3e:
4f:b0:64:85:5e:0f:ff:b4:3b:e0:41:48:2f:23:27:82:b4:bf:
e6:26:f7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:49:20 2026 by rpki-client