Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/Wqs5JSkx7_0Orjd3NSN3cscazxs.roa
File: Wqs5JSkx7_0Orjd3NSN3cscazxs.roa (raw, json)
Hash identifier: l0alqd0AN6rhg4vGvxDTD+n/+usdmoBFuJFkQbyIonc=
Subject key identifier: 5A:AB:39:25:29:31:EF:FD:0E:AE:37:77:35:23:77:72:C7:1A:CF:1B
Certificate issuer: /CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Certificate serial: 019F1779C64453392951EDF63F4FD130BECF
Authority key identifier: 69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/Wqs5JSkx7_0Orjd3NSN3cscazxs.roa
Signing time: Tue 30 Jun 2026 07:41:24 +0000
ROA not before: Tue 30 Jun 2026 07:41:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 163.119.0.0/17 maxlen: 17
192.65.28.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:79:c6:44:53:39:29:51:ed:f6:3f:4f:d1:30:be:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Validity
Not Before: Jun 30 07:41:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5aab39252931effd0eae377735237772c71acf1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:17:e3:23:cb:36:2c:4e:ee:46:1d:9a:1f:f7:
8f:4f:c0:3b:f8:00:34:6c:b3:f4:c8:cb:4d:e1:27:
52:0c:60:8d:0b:62:f9:eb:21:cd:41:8d:1b:d1:70:
1a:c9:28:c4:f4:99:20:1f:05:e7:cf:9e:e1:5f:30:
bd:76:35:53:cd:c5:2c:84:e4:8e:bd:03:aa:5b:dd:
f5:4e:4d:13:bb:08:8e:1b:97:2d:dd:b0:e3:19:11:
c1:3d:4f:c6:9a:53:97:c3:cf:79:4c:c3:3f:14:61:
44:c8:37:04:c1:37:ee:3a:a2:5d:48:11:d6:c1:58:
79:06:0e:b9:42:fd:3a:45:2c:ff:15:e0:56:ea:54:
30:b0:2a:e5:0d:90:b4:22:e4:fa:78:20:10:4d:33:
46:4e:29:30:43:c1:6f:10:1c:64:f2:6a:34:b5:35:
38:6c:5e:62:53:a7:f1:19:ff:89:6a:de:86:77:95:
a3:63:9e:c8:fa:60:38:a9:4a:55:02:04:5c:2e:6a:
0c:83:64:91:cb:02:cd:e0:69:b9:ed:75:22:c2:ed:
8b:f6:bf:8f:46:53:65:79:b4:8a:59:e1:07:b2:d5:
00:6c:e9:3b:79:f1:7a:1e:3f:64:dd:33:ae:e8:29:
97:1f:e0:65:ad:f5:17:fe:57:dd:df:ab:f9:be:e5:
89:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AB:39:25:29:31:EF:FD:0E:AE:37:77:35:23:77:72:C7:1A:CF:1B
X509v3 Authority Key Identifier:
keyid:69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/Wqs5JSkx7_0Orjd3NSN3cscazxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.119.0.0/17
192.65.28.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:e0:36:d3:a3:01:94:cf:ec:d6:e0:67:fc:f0:6e:79:b3:3d:
d8:4e:65:3f:da:7b:eb:3a:e6:b7:99:eb:05:39:2c:ba:8c:c4:
a8:c6:8c:fa:96:fb:8a:dd:6e:ba:d7:8b:11:25:9c:87:04:c1:
4c:e0:4e:60:f9:b5:58:7c:32:83:95:f8:3b:ec:c4:76:8e:c6:
b6:6d:67:98:55:5e:9c:40:af:54:b5:19:96:dc:e0:2e:2c:85:
d0:75:6e:7e:8c:01:67:a1:b9:f5:c1:51:ec:46:4b:96:5f:07:
49:98:e5:60:97:4f:4d:42:58:ba:8a:d3:b2:44:a7:ae:60:d5:
c9:76:92:a4:27:86:43:86:b6:12:33:c5:eb:09:af:15:b4:51:
c0:c0:71:d8:a2:43:9f:59:07:58:47:17:c9:de:20:16:93:93:
8c:36:da:75:9a:ec:1b:49:56:60:b3:a4:e7:88:75:a9:39:9e:
f4:77:58:40:3b:ea:ee:f7:66:a9:ea:4d:0c:7a:ce:c7:7e:b6:
c6:a8:89:bc:f3:e3:df:60:31:ce:00:0f:75:be:3d:b0:cd:cd:
13:82:f8:7f:99:19:c0:61:d1:d5:ee:e9:23:45:df:0f:8a:aa:
1c:d3:ce:d5:1b:2c:35:41:7c:35:f4:d9:3e:0e:df:24:8a:d6:
3f:5d:87:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:22:16 2026 by rpki-client