Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/WXvsTnxMt47LTjXSgDyfYfbpykk.roa
File: WXvsTnxMt47LTjXSgDyfYfbpykk.roa (raw, json)
Hash identifier: u83fQhVuD38r45zKJ9wB4bVcPJz4aOcg9/qnwLnAsDw=
Subject key identifier: 59:7B:EC:4E:7C:4C:B7:8E:CB:4E:35:D2:80:3C:9F:61:F6:E9:CA:49
Certificate issuer: /CN=55610a59ddffbd24ee4b299e9b24b1bf036f8e43
Certificate serial: 019D25519D79B0DB02B2BA800A583A60E265
Authority key identifier: 55:61:0A:59:DD:FF:BD:24:EE:4B:29:9E:9B:24:B1:BF:03:6F:8E:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/WXvsTnxMt47LTjXSgDyfYfbpykk.roa
Signing time: Wed 25 Mar 2026 14:06:38 +0000
ROA not before: Wed 25 Mar 2026 14:06:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208011
IP address blocks: 195.18.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:51:9d:79:b0:db:02:b2:ba:80:0a:58:3a:60:e2:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55610a59ddffbd24ee4b299e9b24b1bf036f8e43
Validity
Not Before: Mar 25 14:06:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=597bec4e7c4cb78ecb4e35d2803c9f61f6e9ca49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:23:96:b9:43:1e:9c:4e:d7:5a:30:e2:af:4e:
d6:72:88:4c:2b:89:0e:b5:7f:03:4a:2c:43:de:1e:
aa:2a:4c:4e:8e:c1:f5:d8:21:60:83:45:5a:1a:2f:
eb:4f:14:e1:6e:1c:3d:87:86:4a:ad:de:84:a4:6c:
28:61:c6:e1:27:87:8c:51:7b:41:de:37:1b:d1:6f:
94:dd:22:3c:de:2a:69:51:3c:9d:54:b5:72:e4:de:
0d:d8:f6:37:b5:13:c3:fd:32:2d:be:4d:d5:90:af:
98:c6:a1:33:fc:4b:da:e5:55:ce:ef:e4:81:53:48:
52:42:86:75:a6:51:73:ee:a7:f6:54:f2:db:9f:d3:
40:5d:06:97:52:91:2e:fc:69:77:9e:21:9e:e6:6f:
8f:21:57:38:ac:81:12:2e:8c:45:bb:46:ec:5f:87:
19:38:a4:2d:bd:c3:7f:6a:99:1e:f6:f7:3e:92:32:
84:62:aa:3d:ff:26:39:b7:3a:81:9e:b5:fa:70:7e:
ab:bb:aa:dd:99:66:8e:d4:48:ce:6c:6b:54:22:6e:
74:06:5c:b9:0f:97:6c:e3:27:50:05:be:19:63:df:
8e:07:e1:59:8e:9e:42:93:6b:6d:ba:52:08:f8:b9:
16:67:b4:72:17:0d:26:7f:63:ce:5f:f7:56:b5:ab:
45:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7B:EC:4E:7C:4C:B7:8E:CB:4E:35:D2:80:3C:9F:61:F6:E9:CA:49
X509v3 Authority Key Identifier:
keyid:55:61:0A:59:DD:FF:BD:24:EE:4B:29:9E:9B:24:B1:BF:03:6F:8E:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/WXvsTnxMt47LTjXSgDyfYfbpykk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.18.11.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:46:aa:c4:d6:88:f0:97:73:53:74:12:97:20:8d:79:ab:9c:
90:13:33:6e:09:3d:72:78:a3:1d:83:48:d0:b4:fa:02:37:e4:
1a:8e:5a:59:21:ee:7e:82:37:e4:fa:87:18:de:3f:ec:f5:b1:
ab:5a:5b:50:50:c7:ff:f7:c1:da:30:31:72:41:2f:75:d0:a5:
90:89:98:a0:89:6b:f6:4e:f6:29:ff:1b:f7:04:f6:b8:84:e7:
fd:07:37:05:31:93:cd:df:48:bb:76:19:5a:7e:bc:13:57:1e:
8f:e7:f8:b9:99:98:ca:47:30:1f:83:7e:c7:2c:b8:0f:a7:9f:
d0:05:73:13:b6:1a:c3:c5:5c:4d:c8:65:94:7e:40:41:b5:20:
86:83:5b:3f:e4:44:ec:56:7e:cd:e2:c4:73:43:80:72:91:b7:
b6:6c:18:8c:2c:19:5a:f9:47:32:e7:9d:1b:de:83:27:2d:d2:
22:54:8c:b5:97:e5:e9:b3:d4:11:dd:9c:6c:0e:b9:0f:3b:e3:
d1:80:dd:84:53:10:14:82:1b:2d:8c:23:5f:9f:66:10:d2:23:
29:7e:3d:f3:cd:69:b1:82:61:a4:f0:1f:9d:c1:d0:e2:40:52:
f6:1a:ee:d8:e9:fb:88:34:e8:92:b3:03:1d:20:1e:35:6c:67:
89:c6:39:99
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ0lUZ15sNsCsrqAClg6YOJlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1NjEwYTU5ZGRmZmJkMjRlZTRiMjk5ZTliMjRiMWJmMDM2
ZjhlNDMwHhcNMjYwMzI1MTQwNjM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTdiZWM0ZTdjNGNiNzhlY2I0ZTM1ZDI4MDNjOWY2MWY2ZTljYTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCOWuUMenE7XWjDir07WcohMK4kO
tX8DSixD3h6qKkxOjsH12CFgg0VaGi/rTxThbhw9h4ZKrd6EpGwoYcbhJ4eMUXtB
3jcb0W+U3SI83ippUTydVLVy5N4N2PY3tRPD/TItvk3VkK+YxqEz/Eva5VXO7+SB
U0hSQoZ1plFz7qf2VPLbn9NAXQaXUpEu/Gl3niGe5m+PIVc4rIESLoxFu0bsX4cZ
OKQtvcN/apke9vc+kjKEYqo9/yY5tzqBnrX6cH6ru6rdmWaO1EjObGtUIm50Bly5
D5ds4ydQBb4ZY9+OB+FZjp5Ck2ttulII+LkWZ7RyFw0mf2POX/dWtatFoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFl77E58TLeOy0410oA8n2H26cpJMB8GA1UdIwQY
MBaAFFVhClnd/70k7kspnpsksb8Db45DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVldFS1dkM192U1R1U3ltZW15U3h2d052amtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8xN2EzYmQtNzU0YS00NTkzLWI1MWUt
OWZiNDE1YjA5YjVlLzEvV1h2c1RueE10NDdMVGpYU2dEeWZZZmJweWtrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8xN2EzYmQtNzU0YS00NTkzLWI1MWUtOWZiNDE1YjA5YjVl
LzEvVldFS1dkM192U1R1U3ltZW15U3h2d052amtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwxILMA0G
CSqGSIb3DQEBCwUAA4IBAQC6RqrE1ojwl3NTdBKXII15q5yQEzNuCT1yeKMdg0jQ
tPoCN+QajlpZIe5+gjfk+ocY3j/s9bGrWltQUMf/98HaMDFyQS910KWQiZigiWv2
TvYp/xv3BPa4hOf9BzcFMZPN30i7dhlafrwTVx6P5/i5mZjKRzAfg37HLLgPp5/Q
BXMTthrDxVxNyGWUfkBBtSCGg1s/5ETsVn7N4sRzQ4Bykbe2bBiMLBla+Ucy550b
3oMnLdIiVIy1l+Xps9QR3ZxsDrkPO+PRgN2EUxAUghstjCNfn2YQ0iMpfj3zzWmx
gmGk8B+dwdDiQFL2Gu7Y6fuINOiSswMdIB41bGeJxjmZ
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:32:55 2026 by rpki-client