Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/WWe_e4aPfmGEmOaJwPZaxe6Damw.roa
File: WWe_e4aPfmGEmOaJwPZaxe6Damw.roa (raw, json)
Hash identifier: f0RHu7oWovHEmN/E1lDRkmYEUjU+D9r0sFdl/iTqrXI=
Subject key identifier: 59:67:BF:7B:86:8F:7E:61:84:98:E6:89:C0:F6:5A:C5:EE:83:6A:6C
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019F394C3807DCD09CF3973F280D0F0B7054
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/WWe_e4aPfmGEmOaJwPZaxe6Damw.roa
Signing time: Mon 06 Jul 2026 21:18:44 +0000
ROA not before: Mon 06 Jul 2026 21:18:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214238
IP address blocks: 138.249.19.0/24 maxlen: 24
138.249.116.0/24 maxlen: 24
138.249.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:39:4c:38:07:dc:d0:9c:f3:97:3f:28:0d:0f:0b:70:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Jul 6 21:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5967bf7b868f7e618498e689c0f65ac5ee836a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f3:67:8a:75:6f:3e:44:8e:42:bf:42:71:45:
75:64:c0:04:df:31:ca:1f:43:b8:88:4f:95:66:df:
c9:0c:12:30:a5:62:bd:01:4a:4a:f9:f9:38:d5:15:
f1:dd:03:1f:6b:1e:58:4a:8d:9c:ed:13:d8:13:73:
25:72:8d:a1:78:ed:f6:78:5a:61:4f:63:93:69:24:
11:cb:50:93:9e:86:a5:6a:1a:0e:5d:18:9c:bc:b2:
de:6a:1e:4c:7f:ad:e0:e3:4b:47:81:33:2b:be:a9:
75:3c:af:8c:ec:08:7a:85:c8:74:61:40:7a:68:47:
56:fa:2f:dd:1f:c2:4f:aa:c6:77:f2:92:0c:67:4d:
39:81:17:bc:5d:23:b7:47:a0:ad:9f:77:a7:e1:a2:
4e:19:47:ec:24:3d:78:75:7a:eb:04:e2:7e:e6:f0:
ab:5d:03:21:9e:3e:00:03:1b:23:0d:1c:03:c9:f1:
6f:fb:fd:04:ee:36:9a:97:f7:c4:fb:5a:a0:b1:a0:
9d:22:51:3f:45:89:9e:c0:e8:10:f4:24:87:6d:0a:
41:11:0d:15:58:0b:6f:e9:eb:cc:56:d6:de:78:ac:
2a:17:ad:9b:a6:19:68:26:63:48:93:9d:d8:a2:96:
6c:21:cd:27:af:d7:34:ac:96:99:52:6a:85:0f:26:
b0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:67:BF:7B:86:8F:7E:61:84:98:E6:89:C0:F6:5A:C5:EE:83:6A:6C
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/WWe_e4aPfmGEmOaJwPZaxe6Damw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.249.19.0/24
138.249.116.0/24
138.249.140.0/24
Signature Algorithm: sha256WithRSAEncryption
99:5c:d0:5c:cc:1e:7a:7c:a4:2d:74:36:d8:77:55:7c:35:b9:
cb:57:08:cd:ee:7e:82:ca:15:f0:cc:3f:2e:e0:12:1a:9f:ca:
c0:8f:f9:b6:eb:bb:45:d4:87:30:c6:a6:fa:51:5f:db:47:a3:
34:71:45:1d:bb:33:7e:19:76:5f:3c:c5:c7:b5:42:73:ef:00:
7c:2d:e1:79:4c:f1:60:a4:83:77:ed:4f:7e:8c:f9:02:4c:fc:
d0:fb:04:7f:8e:9a:08:6e:df:3d:bc:37:71:2f:2a:f1:20:39:
94:03:39:61:00:67:30:cb:95:e6:46:63:2c:01:7d:ce:f5:76:
53:fd:4f:2a:0a:0e:d6:93:88:de:42:5f:d5:8b:f3:31:3f:d1:
e6:c1:80:65:95:50:fb:2b:09:db:1d:0a:13:a6:49:66:55:44:
a8:b6:88:d5:2b:63:2e:e5:3a:28:8d:3c:28:28:9c:ca:3b:51:
1c:9e:7e:75:fe:a6:c9:76:73:4d:ed:2c:0d:04:79:42:5c:9d:
7e:b5:0e:0f:fa:45:11:e0:53:ab:de:05:0c:b2:37:ed:78:01:
75:ba:62:d3:62:cf:c2:06:06:fc:7f:2d:6f:d6:20:4e:4a:a0:
0b:9f:af:95:d3:90:75:41:e1:06:12:a1:73:30:9c:eb:dc:1f:
39:ff:80:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:34:13 2026 by rpki-client