Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/WH_0-YiRC9NzDG7oKNVmVphpaV8.roa
File: WH_0-YiRC9NzDG7oKNVmVphpaV8.roa (raw, json)
Hash identifier: xh+C27DZC9+OIHYF6fvrnBkJepfKZZERCy48KpH+X2I=
Subject key identifier: 58:7F:F4:F9:88:91:0B:D3:73:0C:6E:E8:28:D5:66:56:98:69:69:5F
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 019D06A8A9CC6221CE0E6CE52559CA5FA45D
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/WH_0-YiRC9NzDG7oKNVmVphpaV8.roa
Signing time: Thu 19 Mar 2026 15:13:30 +0000
ROA not before: Thu 19 Mar 2026 15:13:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50113
IP address blocks: 5.180.136.0/24 maxlen: 24
5.180.137.0/24 maxlen: 24
5.252.116.0/24 maxlen: 24
45.89.64.0/24 maxlen: 24
91.217.77.0/24 maxlen: 24
185.104.248.0/24 maxlen: 24
185.174.139.0/24 maxlen: 24
185.180.230.0/24 maxlen: 24
185.188.180.0/24 maxlen: 24
185.189.12.0/22 maxlen: 22
185.189.12.0/24 maxlen: 24
185.189.13.0/24 maxlen: 24
185.189.14.0/24 maxlen: 24
185.189.15.0/24 maxlen: 24
192.162.100.0/24 maxlen: 24
192.162.101.0/24 maxlen: 24
192.162.102.0/24 maxlen: 24
192.162.103.0/24 maxlen: 24
193.0.200.0/24 maxlen: 24
193.0.202.0/24 maxlen: 24
193.0.203.0/24 maxlen: 24
193.168.226.0/24 maxlen: 24
194.63.140.0/24 maxlen: 24
194.63.141.0/24 maxlen: 24
194.63.142.0/24 maxlen: 24
194.63.143.0/24 maxlen: 24
2a04:5200::/32 maxlen: 32
2a04:5200:1::/48 maxlen: 48
2a04:5200:3::/48 maxlen: 48
2a04:5200:4::/48 maxlen: 48
2a04:5200:7::/48 maxlen: 48
2a04:5200:9::/48 maxlen: 48
2a04:5200:a::/48 maxlen: 48
2a04:5200:50::/48 maxlen: 48
2a04:5200:121::/48 maxlen: 48
2a04:5200:20a::/48 maxlen: 48
2a04:5200:d21::/48 maxlen: 48
2a04:5200:fe6::/48 maxlen: 48
2a04:5200:3405::/48 maxlen: 48
2a04:5200:a050::/48 maxlen: 48
2a04:5200:ad09::/48 maxlen: 48
2a04:5200:c068::/48 maxlen: 48
2a04:5200:dc77::/64 maxlen: 64
2a04:5200:fa08::/48 maxlen: 48
2a04:5200:fb01::/48 maxlen: 48
2a04:5200:fb02::/48 maxlen: 48
2a04:5200:ff00::/48 maxlen: 48
2a04:5200:ff10::/48 maxlen: 48
2a04:5200:fff1::/48 maxlen: 48
2a04:5200:fff2::/48 maxlen: 48
2a04:5200:fff3::/48 maxlen: 48
2a04:5200:fff4::/48 maxlen: 48
2a04:5200:fff5::/48 maxlen: 48
2a04:5200:fff6::/48 maxlen: 48
2a04:5200:fff7::/48 maxlen: 48
2a04:5200:fff8::/48 maxlen: 48
2a04:5200:fff9::/48 maxlen: 48
2a04:5200:ffff::/48 maxlen: 48
2a04:5202::/32 maxlen: 32
2a04:5203::/32 maxlen: 32
2a04:5204::/32 maxlen: 32
2a04:5205::/32 maxlen: 32
2a04:5206::/32 maxlen: 32
2a04:5207::/32 maxlen: 32
2a0a:9300::/48 maxlen: 48
2a0a:9300:aaaa::/48 maxlen: 48
2a0c:aa40::/32 maxlen: 32
2a0c:aa41::/32 maxlen: 32
2a0c:aa42::/32 maxlen: 32
2a0c:aa43::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:a8:a9:cc:62:21:ce:0e:6c:e5:25:59:ca:5f:a4:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Mar 19 15:13:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=587ff4f988910bd3730c6ee828d566569869695f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b8:22:19:c9:0e:76:ef:0e:9b:64:1b:52:39:
b3:36:dc:a7:4c:5f:ef:ac:03:4f:ac:5e:a2:09:11:
65:02:35:5f:b4:32:45:0a:d6:86:9b:a4:1f:b2:34:
07:0a:8c:23:f9:c7:a9:72:a3:77:c4:e3:43:fa:3b:
7c:71:c6:73:b6:7a:b3:a2:75:32:04:e3:46:18:28:
82:2d:d4:e6:59:e9:e1:58:9e:30:1d:6d:62:d5:53:
d5:02:8c:ff:08:24:b5:ad:8e:76:cb:6f:76:8e:4b:
25:cd:73:0c:c4:27:00:88:27:4e:12:f9:3c:cc:70:
1c:41:e6:c5:5b:1b:69:a0:90:55:bf:16:58:81:0f:
ed:1c:e8:d0:ab:60:cb:bd:79:b5:b3:22:77:c2:cc:
79:7f:f5:58:eb:2a:dd:11:73:0d:42:be:ba:a9:00:
c7:98:06:ff:39:8a:c3:4a:e6:d1:88:6d:e4:2b:60:
9a:c1:2a:11:6c:57:e7:d1:1a:6c:66:dc:3a:04:35:
14:e3:16:9b:0b:6b:95:7d:f7:9d:3c:cc:29:76:e6:
46:44:53:be:4c:ed:81:3f:26:6a:3e:49:be:de:ba:
37:70:6e:d0:45:b6:c6:69:69:05:09:0c:45:af:a9:
2a:04:63:a6:cd:21:b8:a6:c5:8f:c8:bc:18:7b:64:
c8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7F:F4:F9:88:91:0B:D3:73:0C:6E:E8:28:D5:66:56:98:69:69:5F
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/WH_0-YiRC9NzDG7oKNVmVphpaV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.136.0/23
5.252.116.0/24
45.89.64.0/24
91.217.77.0/24
185.104.248.0/24
185.174.139.0/24
185.180.230.0/24
185.188.180.0/24
185.189.12.0/22
192.162.100.0/22
193.0.200.0/24
193.0.202.0/23
193.168.226.0/24
194.63.140.0/22
IPv6:
2a04:5200::/32
2a04:5202::-2a04:5207:ffff:ffff:ffff:ffff:ffff:ffff
2a0a:9300::/48
2a0a:9300:aaaa::/48
2a0c:aa40::/30
Signature Algorithm: sha256WithRSAEncryption
4d:e3:66:fd:13:14:31:90:25:07:3b:9c:b6:4e:fb:3c:93:25:
d2:f1:85:1f:d9:57:18:20:e5:c3:0e:ea:b6:a0:73:75:52:6e:
09:cd:59:97:0d:ae:2e:96:dc:84:71:61:77:e8:69:83:c4:3a:
3a:c2:4e:6a:7a:13:fb:57:95:2b:48:24:cd:c5:29:d5:d3:75:
cc:e5:a2:47:4f:75:e4:c0:89:8c:ff:2f:41:24:c6:ee:a3:87:
51:23:dc:4d:3c:7a:09:ee:7f:13:15:95:bf:20:ee:9e:4a:5d:
d7:27:07:09:cc:51:9e:6a:db:78:86:5b:1e:c5:64:6c:4c:9c:
67:ed:56:a6:c1:bc:7c:57:46:b5:18:b4:a0:9d:c4:fc:9b:72:
21:0c:d8:67:e8:a6:83:52:0f:3b:c9:cc:67:d5:cf:98:f4:8d:
c4:ae:ac:08:26:bb:b6:c3:84:4b:a5:a2:e3:3a:7d:6b:08:c9:
23:10:72:40:e0:24:bd:6a:e3:0e:9f:d0:db:45:4d:52:98:7b:
17:5a:f1:d1:8e:2b:e9:fc:42:04:48:37:75:87:08:fe:be:0a:
d3:81:9a:1d:4d:9d:46:d7:7f:9d:5a:b0:8b:96:d5:4a:49:a3:
b8:4b:26:5a:36:f7:a6:50:4b:63:0d:36:8f:83:b3:ce:f4:00:
49:35:f6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:33:48 2026 by rpki-client