Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/W5GHuBmScEfpIPAhuqgylrz1a6Q.roa
File: W5GHuBmScEfpIPAhuqgylrz1a6Q.roa (raw, json)
Hash identifier: iVf+MqYMn6D3or0TDUJHTOHK/dGQL5UOldNHGxN0jow=
Subject key identifier: 5B:91:87:B8:19:92:70:47:E9:20:F0:21:BA:A8:32:96:BC:F5:6B:A4
Certificate issuer: /CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Certificate serial: 019F0828C026528210D7A91702BC0506F424
Authority key identifier: DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/W5GHuBmScEfpIPAhuqgylrz1a6Q.roa
Signing time: Sat 27 Jun 2026 08:18:36 +0000
ROA not before: Sat 27 Jun 2026 08:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58331
IP address blocks: 185.75.204.0/24 maxlen: 24
185.75.205.0/24 maxlen: 24
185.75.206.0/24 maxlen: 24
185.75.207.0/24 maxlen: 24
193.242.194.0/24 maxlen: 24
193.242.195.0/24 maxlen: 24
2a05:5440::/32 maxlen: 32
2a05:5441::/32 maxlen: 32
2a05:5442::/32 maxlen: 32
2a05:5443::/32 maxlen: 32
2a05:5444::/32 maxlen: 32
2a05:5445::/32 maxlen: 32
2a05:5446::/32 maxlen: 32
2a05:5447::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:08:28:c0:26:52:82:10:d7:a9:17:02:bc:05:06:f4:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Validity
Not Before: Jun 27 08:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b9187b819927047e920f021baa83296bcf56ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:15:1a:19:bd:13:3c:fd:c4:f2:db:03:9c:d2:
ff:48:ed:ad:d6:c8:6a:c9:81:99:86:ab:de:e2:02:
14:ac:e8:32:8b:4f:27:20:c9:53:82:1a:51:ba:98:
1d:66:2b:97:85:fa:b1:46:92:7f:27:eb:e8:34:07:
c4:13:3f:44:79:8d:0c:44:ba:a7:f8:2c:e8:f5:e8:
02:6e:dc:58:da:7c:c5:6b:35:ab:1d:4e:24:dd:c5:
1a:9f:b0:a8:28:3c:ed:7c:d3:86:86:37:73:c2:ee:
98:4a:1c:0d:1c:fc:07:0b:95:94:74:f7:ee:bf:53:
df:19:60:92:2f:2b:22:6e:4c:20:cf:b2:d2:85:05:
1d:cc:39:09:74:8f:39:2d:36:33:15:e2:97:a5:c9:
06:66:4c:99:78:54:bf:7c:a2:21:9f:35:ba:01:bb:
e6:2d:69:c9:00:2d:17:18:23:15:38:ec:4f:d4:a8:
87:43:50:a6:2a:55:a2:46:69:da:46:c3:38:8c:72:
46:9d:27:01:28:a7:bc:1e:85:17:85:06:09:e6:44:
ba:7f:65:6f:d0:85:3d:59:2d:30:ae:87:8c:cd:24:
a7:a2:d2:04:d2:66:81:a0:c4:70:0d:b0:51:1f:b4:
f4:4b:b0:2a:0f:b3:4f:97:13:8e:47:d9:35:1a:bf:
75:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:91:87:B8:19:92:70:47:E9:20:F0:21:BA:A8:32:96:BC:F5:6B:A4
X509v3 Authority Key Identifier:
keyid:DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/W5GHuBmScEfpIPAhuqgylrz1a6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.204.0/22
193.242.194.0/23
IPv6:
2a05:5440::/29
Signature Algorithm: sha256WithRSAEncryption
42:9f:ee:bd:2c:1b:30:39:c2:1a:fb:5f:c2:de:4f:69:ff:d7:
9c:a5:0f:6d:d4:51:12:76:4c:37:bf:c7:71:ff:95:4f:4c:85:
3d:8b:21:65:e6:78:01:0b:f5:d1:e4:99:69:a7:07:8a:91:4d:
c2:67:ef:9f:49:6d:6e:54:81:57:e1:41:78:aa:95:e2:f7:96:
c1:44:3c:c5:b0:43:b9:70:d5:5c:2e:6b:f1:4f:61:1a:14:1a:
e6:47:1a:95:e4:6b:06:07:ab:92:4a:3b:1c:70:a8:84:d2:70:
e3:bb:79:b7:fe:06:15:4c:21:d2:a8:51:49:e0:dc:e1:ae:e8:
7f:24:9c:7a:3e:29:74:28:31:f5:37:05:7c:53:90:d1:1a:ef:
24:ec:4d:4e:d9:1b:60:8d:6f:98:cc:c3:b0:ea:28:f8:4b:bb:
13:22:60:1c:a7:25:41:b9:36:e6:12:7f:37:71:7d:4b:dd:79:
97:32:54:a0:2f:77:68:42:31:81:bf:e5:74:42:72:c3:4e:0c:
a2:a0:f0:71:69:49:38:31:5d:83:a9:09:fb:97:a0:4f:64:1f:
10:85:29:b7:bf:f0:bc:e6:dc:49:25:bc:29:9e:20:71:ab:86:
1f:3a:16:81:38:0d:83:0b:7a:52:7c:1b:9f:99:7d:04:09:7a:
d6:b2:d5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:48:17 2026 by rpki-client