Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/WqDYkLVstMonrCj4dC5iBXxan-U.roa
File: WqDYkLVstMonrCj4dC5iBXxan-U.roa (raw, json)
Hash identifier: G8VWWDKI9sp/TM5uduS2yPz7BYIgFFNJMWsqqgCcC2E=
Subject key identifier: 5A:A0:D8:90:B5:6C:B4:CA:27:AC:28:F8:74:2E:62:05:7C:5A:9F:E5
Certificate issuer: /CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Certificate serial: 019F5DD193446B4C009BD9DB3958A867C00B
Authority key identifier: 37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/WqDYkLVstMonrCj4dC5iBXxan-U.roa
Signing time: Mon 13 Jul 2026 23:30:43 +0000
ROA not before: Mon 13 Jul 2026 23:30:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214171
IP address blocks: 5.22.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5d:d1:93:44:6b:4c:00:9b:d9:db:39:58:a8:67:c0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Validity
Not Before: Jul 13 23:30:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5aa0d890b56cb4ca27ac28f8742e62057c5a9fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f1:b5:33:55:52:5f:48:3c:6d:52:05:90:59:
2c:41:32:51:c8:90:1f:ad:f4:b3:3e:97:2b:57:36:
ca:88:fd:86:1b:f9:99:e6:d4:a1:a1:13:69:b2:8f:
7a:6e:f5:e4:1a:cf:24:06:56:83:9e:b2:f2:bb:3d:
1d:ba:49:0b:2b:cd:6a:a7:93:4d:af:e1:2d:c6:ad:
ac:2c:c4:5e:f8:41:37:8a:0a:da:67:29:0a:62:a6:
38:47:e5:72:00:97:d8:a1:01:1e:6c:21:ab:fa:24:
9f:a7:f3:e5:34:06:ea:59:9c:35:c6:b6:3d:14:1a:
16:ad:0c:2d:b3:fc:0f:37:14:48:fc:29:0f:18:55:
a5:2f:4c:84:e3:8d:4f:7a:2a:bc:76:40:32:61:5f:
16:d9:2e:ed:4b:61:75:91:53:b2:05:31:59:53:81:
a3:87:aa:cf:fe:b1:c0:b3:4e:ae:04:d7:7f:07:aa:
d8:7a:6f:2c:52:d9:76:82:76:e5:e2:e5:a2:59:c7:
5c:59:64:d2:77:37:33:54:5e:79:18:5c:0f:22:ed:
b9:2a:8e:df:95:4d:21:6b:43:5e:70:1e:0f:61:3c:
7d:da:fd:24:25:f9:fc:e3:2d:8d:28:c7:f4:1b:76:
20:d7:d1:96:be:38:35:9a:b7:80:6b:70:75:24:e5:
c9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A0:D8:90:B5:6C:B4:CA:27:AC:28:F8:74:2E:62:05:7C:5A:9F:E5
X509v3 Authority Key Identifier:
keyid:37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/WqDYkLVstMonrCj4dC5iBXxan-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.203.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:c8:39:23:f3:73:b8:86:4d:f6:78:52:77:b0:29:f8:31:18:
b2:c6:3c:bc:af:c7:29:8b:2b:5d:99:7f:a0:2f:11:fb:57:34:
89:89:db:67:90:ee:29:76:5a:05:58:ef:e9:60:72:f4:ab:a9:
ea:9e:3a:26:59:ea:96:17:07:d4:7c:b2:31:d7:c3:6f:98:87:
43:0f:42:7a:fd:ab:9a:33:93:3b:3f:8f:af:9c:ab:3c:9f:71:
68:08:f8:50:28:e4:cd:8d:e8:ff:92:e6:62:2f:db:1b:87:9e:
e7:c3:c0:e8:09:00:3e:54:0e:98:21:7d:5a:2b:6d:9e:d1:bc:
2d:90:15:55:ae:e7:2b:04:dd:01:6c:0b:01:b8:c2:a0:98:e8:
4c:d7:26:0e:3b:56:a3:0f:4c:6b:3c:94:4b:f5:06:34:7f:d1:
22:91:aa:45:7f:24:d2:0f:b5:e4:86:60:76:fc:6f:69:37:8c:
a7:61:28:72:43:d6:b4:86:42:a4:2a:56:b6:9e:76:75:5d:46:
0f:df:31:74:ad:50:72:55:2b:88:3b:e3:3c:f8:15:a5:40:4c:
a1:7f:72:54:6a:06:1e:a5:5e:f6:39:57:d3:c2:82:e3:6d:eb:
46:5e:d4:e2:ff:62:59:38:5d:64:db:d0:c9:28:d2:7f:e8:2f:
75:fe:33:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:23:55 2026 by rpki-client