Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/WwuATA6TSHeY3pyjZdiQ-8jq6Vo.roa
File: WwuATA6TSHeY3pyjZdiQ-8jq6Vo.roa (raw, json)
Hash identifier: uW36/EhLhyw8heI0tUnFU6wiInPtS+CcO/PTS29AqYY=
Subject key identifier: 5B:0B:80:4C:0E:93:48:77:98:DE:9C:A3:65:D8:90:FB:C8:EA:E9:5A
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 019CEDE55F10587BF5C05363186883EBF237
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/WwuATA6TSHeY3pyjZdiQ-8jq6Vo.roa
Signing time: Sat 14 Mar 2026 19:49:18 +0000
ROA not before: Sat 14 Mar 2026 19:49:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 141.226.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ed:e5:5f:10:58:7b:f5:c0:53:63:18:68:83:eb:f2:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Mar 14 19:49:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b0b804c0e93487798de9ca365d890fbc8eae95a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:89:f0:9e:33:2b:b1:a3:fe:13:01:29:cc:ec:
09:32:e7:36:72:56:ab:86:a1:ed:eb:cf:3b:7d:eb:
b8:b3:00:90:5e:60:0c:28:f4:21:7d:73:fe:dc:c4:
96:59:83:ba:08:5a:f8:ca:67:78:d4:34:04:ff:71:
47:b7:af:75:cf:4f:af:04:39:49:53:69:7f:b1:72:
ee:f3:27:e6:d6:70:0c:51:3f:5e:fc:7f:23:9b:f7:
2b:06:82:6d:f5:20:18:2e:59:a6:19:c1:03:a2:5c:
dd:e4:05:6d:0a:a6:57:c3:00:31:b8:8c:85:b7:70:
31:9b:68:c7:d8:ea:3e:fe:8a:7e:f3:02:61:a1:51:
b6:8c:27:a0:ec:7c:ba:4d:27:1f:80:ab:1e:92:34:
52:2b:01:91:d5:9a:91:e4:49:2f:b9:9c:dd:81:74:
2a:b1:7c:ac:3b:9e:c1:08:51:a4:62:42:45:9c:c5:
f9:1f:37:f6:36:32:6c:64:d6:0f:ee:73:85:76:c5:
92:d0:66:31:5e:79:a0:97:8f:05:5d:86:eb:58:00:
d3:55:f8:6b:29:b5:03:af:ba:e2:bf:8f:2d:b8:8f:
53:34:03:47:0e:76:f2:75:09:31:2c:16:62:d1:05:
35:a2:63:66:52:11:e8:21:b3:a4:5c:e4:51:d4:18:
b1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0B:80:4C:0E:93:48:77:98:DE:9C:A3:65:D8:90:FB:C8:EA:E9:5A
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/WwuATA6TSHeY3pyjZdiQ-8jq6Vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.246.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:d5:66:10:0e:91:e2:66:e3:e8:04:ec:d7:7b:da:20:5c:30:
42:d7:af:75:99:82:c2:2f:e4:b2:6e:d5:ac:83:06:5b:96:70:
25:5e:69:3e:f9:1e:dc:3d:df:cd:e0:11:01:c3:40:c6:b3:6b:
b5:3f:ec:4a:bc:16:fe:18:26:08:5f:44:a4:c0:cc:a1:88:c2:
67:e3:7f:b4:4e:c9:da:64:a5:70:1e:15:1d:7a:1e:94:7d:bf:
3d:cc:31:cb:ec:04:b2:15:5c:ec:d1:bb:fa:0f:4c:85:e7:a9:
0b:4f:01:2b:3e:b6:23:e7:df:b1:02:86:3c:b8:6d:fb:58:40:
e2:40:6c:5e:63:5c:02:c1:15:33:9d:a2:6b:7e:54:94:7b:e5:
0d:e6:b2:29:71:22:26:6b:12:c0:5f:8f:a3:43:94:a1:68:7c:
37:ed:63:cf:0e:76:9c:63:24:ad:fb:7d:cd:21:fb:be:f2:cf:
f0:4e:46:ba:20:e8:8c:c5:77:09:26:66:9d:d4:4b:82:a6:9f:
83:98:54:17:76:88:8f:c6:39:8f:73:d6:cb:53:25:8a:7a:bf:
a8:d5:8f:c6:1a:9b:82:b1:13:c7:77:88:ab:52:50:9f:ae:0e:
56:9c:16:7c:07:97:ee:58:08:94:8f:93:b1:be:1a:b1:2b:49:
9d:56:1a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:36:11 2026 by rpki-client