Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/_5WF2PQCdHfSB17pJupjN-FIiNc.roa
File: _5WF2PQCdHfSB17pJupjN-FIiNc.roa (raw, json)
Hash identifier: Ya29FAa0OUkvMPvOrcq7snCU9GLA5RS5i5UVH+eGNFE=
Subject key identifier: FF:95:85:D8:F4:02:74:77:D2:07:5E:E9:26:EA:63:37:E1:48:88:D7
Certificate issuer: /CN=5afb2a995914931cc4a5b5385f6cb094777c6975
Certificate serial: 019F2368B85A14C66F3C3A9D56A89808DAA3
Authority key identifier: 5A:FB:2A:99:59:14:93:1C:C4:A5:B5:38:5F:6C:B0:94:77:7C:69:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WvsqmVkUkxzEpbU4X2ywlHd8aXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/_5WF2PQCdHfSB17pJupjN-FIiNc.roa
Signing time: Thu 02 Jul 2026 15:18:13 +0000
ROA not before: Thu 02 Jul 2026 15:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35260
IP address blocks: 217.26.112.0/20 maxlen: 20
2a00:1ac0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/WvsqmVkUkxzEpbU4X2ywlHd8aXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/WvsqmVkUkxzEpbU4X2ywlHd8aXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WvsqmVkUkxzEpbU4X2ywlHd8aXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b8:5a:14:c6:6f:3c:3a:9d:56:a8:98:08:da:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5afb2a995914931cc4a5b5385f6cb094777c6975
Validity
Not Before: Jul 2 15:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff9585d8f4027477d2075ee926ea6337e14888d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:25:df:5b:a4:c1:42:b1:36:a8:03:a4:16:2f:
6c:4a:4f:59:d5:cc:81:fb:8d:ad:f6:b1:a6:05:0c:
45:2a:07:57:fe:ee:5b:b4:60:56:18:6e:16:2f:92:
5d:28:12:9f:f2:d4:c0:65:47:84:62:da:7f:d3:ce:
23:f4:42:aa:b2:76:5d:cb:72:b1:b1:64:36:b7:a5:
8c:1b:76:37:a2:79:e5:be:b3:28:58:1c:de:b5:24:
bf:90:0a:9d:e5:8c:3b:34:2b:2c:c2:88:be:d0:96:
a5:9e:e3:25:53:c2:e0:65:b3:ef:35:c1:e5:ef:11:
8c:de:91:94:62:b3:5b:0b:11:d0:b2:cb:87:65:25:
62:00:b3:18:1a:98:7c:8f:dd:e9:94:10:b7:3f:5a:
af:c8:ff:c2:7b:47:aa:67:eb:b1:09:32:41:54:e0:
64:a8:04:73:90:b4:fe:3d:2b:44:5a:8f:7a:16:5d:
86:a6:f7:20:7f:78:bd:8c:d3:4b:e0:cd:5b:ac:20:
5e:81:0c:37:3f:f8:44:6a:5f:a8:79:17:c0:af:c3:
93:e4:82:47:bb:d8:e3:9b:13:8f:42:33:07:cb:4d:
62:c6:b2:57:37:c8:87:3d:bd:65:42:de:32:24:e0:
6c:67:fc:e4:d0:75:bb:b1:6a:dc:86:aa:39:57:8a:
f4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:95:85:D8:F4:02:74:77:D2:07:5E:E9:26:EA:63:37:E1:48:88:D7
X509v3 Authority Key Identifier:
keyid:5A:FB:2A:99:59:14:93:1C:C4:A5:B5:38:5F:6C:B0:94:77:7C:69:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvsqmVkUkxzEpbU4X2ywlHd8aXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/_5WF2PQCdHfSB17pJupjN-FIiNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/WvsqmVkUkxzEpbU4X2ywlHd8aXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.26.112.0/20
IPv6:
2a00:1ac0::/32
Signature Algorithm: sha256WithRSAEncryption
08:c3:c6:53:69:b3:b1:19:32:6a:f1:af:18:25:8f:10:04:52:
9d:2a:06:d4:54:4e:69:40:d7:43:c5:17:4c:2b:a5:87:6b:fb:
a4:ec:6d:a2:63:f6:74:9d:f4:45:7b:d7:7b:d6:d1:d0:25:3a:
b3:03:de:c1:32:a7:6c:17:8b:fe:83:2c:2d:a2:e5:29:28:74:
04:b6:41:c7:c3:1f:1b:0c:8b:a5:93:f9:bf:06:7b:9f:7a:8e:
3c:d1:11:b8:a3:7a:4f:a5:40:9b:34:80:43:33:38:18:ce:9c:
af:2f:88:16:c9:8b:77:ec:11:d5:a1:dd:38:35:a5:d4:79:c5:
4f:72:0a:96:e4:75:78:cb:7d:71:67:74:b6:81:1f:11:11:51:
e8:47:ab:f8:b4:97:ed:cc:fd:2a:6f:5b:db:3a:63:dd:3e:83:
ea:a8:84:8c:01:07:1b:91:d8:c5:b5:18:a9:62:da:bf:c6:fb:
c0:a2:f7:67:4f:4c:8f:3c:49:91:cf:47:66:66:35:9c:77:49:
b8:c0:05:69:47:71:3b:bb:7d:d9:8f:bb:97:15:6a:45:6f:e8:
dc:26:d4:73:c2:2b:13:77:b3:f0:12:83:1e:0d:ed:62:c8:07:
f4:30:41:8e:36:6a:99:e0:6e:87:21:95:2e:95:59:b0:a9:44:
05:01:6f:54
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ8jaLhaFMZvPDqdVqiYCNqjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZmIyYTk5NTkxNDkzMWNjNGE1YjUzODVmNmNiMDk0Nzc3
YzY5NzUwHhcNMjYwNzAyMTUxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjk1ODVkOGY0MDI3NDc3ZDIwNzVlZTkyNmVhNjMzN2UxNDg4OGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSXfW6TBQrE2qAOkFi9sSk9Z1cyB
+42t9rGmBQxFKgdX/u5btGBWGG4WL5JdKBKf8tTAZUeEYtp/084j9EKqsnZdy3Kx
sWQ2t6WMG3Y3onnlvrMoWBzetSS/kAqd5Yw7NCsswoi+0JalnuMlU8LgZbPvNcHl
7xGM3pGUYrNbCxHQssuHZSViALMYGph8j93plBC3P1qvyP/Ce0eqZ+uxCTJBVOBk
qARzkLT+PStEWo96Fl2Gpvcgf3i9jNNL4M1brCBegQw3P/hEal+oeRfAr8OT5IJH
u9jjmxOPQjMHy01ixrJXN8iHPb1lQt4yJOBsZ/zk0HW7sWrchqo5V4r0swIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFP+Vhdj0AnR30gde6SbqYzfhSIjXMB8GA1UdIwQY
MBaAFFr7KplZFJMcxKW1OF9ssJR3fGl1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3ZzcW1Wa1VreHpFcGJVNFgyeXdsSGQ4YVhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8yY2Y4OGYtMmM2YS00YjQ4LWEyNWUt
NGE4YjZiNDA4MmIxLzEvXzVXRjJQUUNkSGZTQjE3cEp1cGpOLUZJaU5jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS8yY2Y4OGYtMmM2YS00YjQ4LWEyNWUtNGE4YjZiNDA4MmIx
LzEvV3ZzcW1Wa1VreHpFcGJVNFgyeXdsSGQ4YVhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQE2RpwMA0E
AgACMAcDBQAqABrAMA0GCSqGSIb3DQEBCwUAA4IBAQAIw8ZTabOxGTJq8a8YJY8Q
BFKdKgbUVE5pQNdDxRdMK6WHa/uk7G2iY/Z0nfRFe9d71tHQJTqzA97BMqdsF4v+
gywtouUpKHQEtkHHwx8bDIulk/m/Bnufeo480RG4o3pPpUCbNIBDMzgYzpyvL4gW
yYt37BHVod04NaXUecVPcgqW5HV4y31xZ3S2gR8REVHoR6v4tJftzP0qb1vbOmPd
PoPqqISMAQcbkdjFtRipYtq/xvvAovdnT0yPPEmRz0dmZjWcd0m4wAVpR3E7u33Z
j7uXFWpFb+jcJtRzwisTd7PwEoMeDe1iyAf0MEGONmqZ4G6HIZUulVmwqUQFAW9U
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:50:35 2026 by rpki-client