Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/W1-b2_39t40IJEIlY1fU30KPC7Y.roa
File: W1-b2_39t40IJEIlY1fU30KPC7Y.roa (raw, json)
Hash identifier: DG8YwHrN9i6MKPRhk3te8aFn4nTPHySMexyk/ryRI0I=
Subject key identifier: 5B:5F:9B:DB:FD:FD:B7:8D:08:24:42:25:63:57:D4:DF:42:8F:0B:B6
Certificate issuer: /CN=8520b77d035b912ffa406dfddf29e3a2963e6904
Certificate serial: 019DD364B8BCAA7B0ED3E1E8120FCB4E5367
Authority key identifier: 85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/W1-b2_39t40IJEIlY1fU30KPC7Y.roa
Signing time: Tue 28 Apr 2026 09:21:26 +0000
ROA not before: Tue 28 Apr 2026 09:21:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29505
IP address blocks: 85.233.0.0/19 maxlen: 24
149.249.64.0/18 maxlen: 24
2a07:6c40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d3:64:b8:bc:aa:7b:0e:d3:e1:e8:12:0f:cb:4e:53:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8520b77d035b912ffa406dfddf29e3a2963e6904
Validity
Not Before: Apr 28 09:21:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b5f9bdbfdfdb78d082442256357d4df428f0bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:78:65:25:62:d0:05:16:f6:a3:7c:7d:1b:9c:
99:d5:c4:50:c8:8f:59:c5:bb:41:cd:d0:60:14:c6:
d7:f5:60:bc:84:09:9d:a7:9d:3c:d9:a2:7b:54:5a:
b0:d0:96:c4:82:46:da:37:c7:72:97:17:a8:37:96:
22:a8:ee:7f:31:89:57:75:b2:17:35:75:cd:1f:72:
70:6b:2d:5d:3d:3e:b2:3c:fe:7d:0c:09:65:61:02:
58:4c:07:04:1d:c2:16:1d:42:93:51:32:31:4e:c3:
b3:5a:f6:66:98:af:ee:b1:60:60:f9:0b:fc:5e:54:
8b:13:2e:7a:4b:06:e9:19:a3:29:36:34:86:d2:a1:
ca:7d:b7:f6:c5:61:61:f4:e8:8c:f6:6e:4e:62:61:
bb:1f:0a:d7:e7:40:a5:5a:f0:25:f8:57:a6:cb:45:
a0:c4:99:e0:65:28:73:fe:9f:71:e6:44:39:23:2e:
b4:b1:55:cc:65:5b:e9:26:4f:3c:e5:4d:2d:c2:cb:
03:ca:1a:55:69:06:33:fa:a6:fa:79:5c:2c:86:51:
39:8f:74:54:f7:68:15:c1:31:31:a6:04:2c:ca:30:
f1:f9:39:bd:1c:c4:45:af:88:27:76:22:5c:9b:02:
ab:e3:c5:de:78:62:ed:e5:82:7b:f0:c5:56:d2:60:
a7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5F:9B:DB:FD:FD:B7:8D:08:24:42:25:63:57:D4:DF:42:8F:0B:B6
X509v3 Authority Key Identifier:
keyid:85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/W1-b2_39t40IJEIlY1fU30KPC7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.233.0.0/19
149.249.64.0/18
IPv6:
2a07:6c40::/29
Signature Algorithm: sha256WithRSAEncryption
9e:fa:83:21:0a:3d:73:2c:f3:1e:91:e5:25:dd:84:9f:1e:41:
c4:8d:ca:17:ce:57:46:18:92:f4:68:06:38:ca:bd:84:4e:5f:
56:1d:5f:82:d4:9d:17:88:85:bd:0d:8a:01:89:41:34:9c:c4:
8e:6f:7a:d4:92:3e:a5:98:30:45:97:85:2d:03:93:29:83:9a:
e8:47:5d:44:53:58:c3:74:6b:5d:69:69:53:81:ef:b0:fc:90:
51:3f:e1:a2:62:32:33:fb:07:be:64:30:2e:57:d9:7d:91:4a:
83:c3:db:11:1b:36:56:00:26:ae:40:99:f2:2d:e6:3e:0b:3a:
da:4e:3b:ca:16:ae:26:1b:30:b0:a9:05:97:0c:78:69:d7:75:
e1:8a:42:69:4c:95:58:24:1b:3f:8a:7e:02:6d:37:6b:fa:52:
ee:b0:bc:12:61:02:2c:8c:4a:e5:63:9a:9a:60:43:62:96:a4:
ed:ba:c7:ca:1b:60:e4:03:dd:10:1d:be:1f:ba:a3:84:00:4d:
0b:75:d9:1a:0e:45:42:ae:01:a1:b9:ed:fd:eb:1e:93:40:e8:
75:2b:ae:72:8a:75:01:a6:da:f7:07:de:87:16:b4:af:25:81:
24:72:80:d7:d1:97:63:a7:f0:a4:ce:b1:02:32:90:a2:bc:1f:
28:74:c7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:46:50 2026 by rpki-client