Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/WhU2FG_YfuoZ_VZTcnjmU40srVQ.roa
File: WhU2FG_YfuoZ_VZTcnjmU40srVQ.roa (raw, json)
Hash identifier: BAnkjbBy2V49PU0APqtNgpwG/H/bwZfoszvGgpJtLbI=
Subject key identifier: 5A:15:36:14:6F:D8:7E:EA:19:FD:56:53:72:78:E6:53:8D:2C:AD:54
Certificate issuer: /CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3
Certificate serial: 01A0F1BC3BCA7BCD9FC9E7CACD8E9FABA319
Authority key identifier: C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/WhU2FG_YfuoZ_VZTcnjmU40srVQ.roa
Signing time: Wed 30 Sep 2026 09:53:59 +0000
ROA not before: Wed 30 Sep 2026 09:53:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31042
IP address blocks: 5.22.160.0/19 maxlen: 19
5.22.161.0/24 maxlen: 24
5.22.184.0/24 maxlen: 24
5.22.185.0/24 maxlen: 24
5.22.188.0/24 maxlen: 24
5.22.189.0/24 maxlen: 24
5.22.190.0/24 maxlen: 24
5.22.191.0/24 maxlen: 24
94.127.0.0/21 maxlen: 21
94.127.0.0/24 maxlen: 24
185.20.36.0/22 maxlen: 24
217.26.208.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:bc:3b:ca:7b:cd:9f:c9:e7:ca:cd:8e:9f:ab:a3:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3
Validity
Not Before: Sep 30 09:53:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a1536146fd87eea19fd56537278e6538d2cad54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fd:56:73:d7:97:81:29:54:0f:c7:08:fe:a8:
84:24:5b:23:06:0c:ae:d9:65:69:91:2a:89:8f:1b:
11:51:41:1e:1b:06:5c:8c:53:9a:ec:47:47:db:7a:
ab:ba:c6:97:09:a9:18:e6:94:5a:3c:4c:b5:80:15:
82:f0:f2:36:77:93:13:0c:d0:d0:3a:13:e1:14:a7:
4f:f7:74:6f:ae:6b:e1:b0:00:e4:63:be:f6:fe:d5:
1d:94:85:84:3e:cd:a2:69:bb:5f:4c:13:76:e0:f5:
73:2c:42:2c:28:79:26:85:27:4c:8f:8b:0d:8e:4a:
1b:31:5b:20:cf:cb:ca:05:39:86:50:26:5c:56:85:
3d:a2:3c:e9:1e:1b:8c:b5:30:74:9d:5e:3f:05:ae:
5a:5b:81:c7:4c:21:dc:17:5b:fa:d0:ba:98:a6:ba:
f4:60:2e:b8:7c:1f:1d:0d:86:0d:bf:1c:5d:5e:fb:
6c:84:7c:13:29:5f:87:cb:5b:f4:17:4f:97:a2:7f:
7e:85:fb:c3:9d:4b:34:fa:b5:1a:7b:d4:d7:47:5f:
14:e9:15:a8:5f:f6:b2:6c:8e:80:1c:90:aa:92:9b:
f6:16:53:02:8f:9a:84:33:d4:e4:1c:18:58:b3:1d:
fc:fd:1d:68:36:6f:da:a1:37:12:ee:f0:e8:95:bd:
d9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:15:36:14:6F:D8:7E:EA:19:FD:56:53:72:78:E6:53:8D:2C:AD:54
X509v3 Authority Key Identifier:
keyid:C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/WhU2FG_YfuoZ_VZTcnjmU40srVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.160.0/19
94.127.0.0/21
185.20.36.0/22
217.26.208.0/21
Signature Algorithm: sha256WithRSAEncryption
6f:1d:c3:97:4d:84:ec:6e:d9:42:08:9d:d8:db:35:8e:26:b4:
64:fd:5a:0b:47:7a:54:a7:33:74:2f:2e:88:0d:8b:d5:1d:c7:
0c:bf:7a:6b:f5:c6:48:5b:d3:50:a0:28:8c:08:6e:a1:72:d5:
3e:28:3b:8f:f8:49:58:b6:63:17:52:4a:3c:cd:b1:7b:9c:f2:
7a:b3:29:4c:aa:7d:06:05:f9:95:b4:5d:6f:f5:11:26:ae:4f:
42:df:d0:9c:97:48:a9:ba:79:48:ee:d0:d5:e4:2e:5d:6a:44:
bd:c6:73:6c:ba:94:00:0c:91:f7:a9:f5:94:d3:18:b6:77:38:
fb:6e:93:43:97:37:fa:be:e3:bf:7a:91:b8:08:5d:2f:0c:1c:
ac:aa:61:28:8d:e2:83:0b:b7:a6:9c:34:97:4e:6b:37:40:a0:
db:cb:5d:eb:69:6b:9a:3b:46:1c:fa:50:13:85:73:4f:10:19:
00:c6:6c:20:15:32:2e:1f:93:ed:fb:f1:1a:ac:f7:c2:a3:55:
72:d9:7d:e0:3c:4e:5a:75:22:3a:8c:9a:29:ee:3a:ec:d2:6a:
14:b8:56:51:4e:0b:a9:90:6a:01:b4:4b:3f:dc:e1:7f:1b:37:
c2:c3:14:d5:58:99:9a:b9:de:7e:9e:c2:8e:8a:66:2c:c0:52:
93:13:3f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:25:22 2026 by rpki-client