Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/W-VoV17I_X3lPw0iDUZQHRelxBg.roa
File: W-VoV17I_X3lPw0iDUZQHRelxBg.roa (raw, json)
Hash identifier: KAR3woHBe4DQ7VMg1DKXsXjsr/10HOtfObZUxwxzNb0=
Subject key identifier: 5B:E5:68:57:5E:C8:FD:7D:E5:3F:0D:22:0D:46:50:1D:17:A5:C4:18
Certificate issuer: /CN=08953a5f11a8279cdf8798960de1e22eb1227d95
Certificate serial: 019F6E985BAE5720F5A75034F77C72DBE13E
Authority key identifier: 08:95:3A:5F:11:A8:27:9C:DF:87:98:96:0D:E1:E2:2E:B1:22:7D:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/W-VoV17I_X3lPw0iDUZQHRelxBg.roa
Signing time: Fri 17 Jul 2026 05:41:46 +0000
ROA not before: Fri 17 Jul 2026 05:41:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21472
IP address blocks: 5.2.16.0/21 maxlen: 24
5.2.16.0/23 maxlen: 23
5.2.18.0/23 maxlen: 23
5.2.20.0/23 maxlen: 23
5.2.23.0/24 maxlen: 24
91.224.190.0/23 maxlen: 24
162.33.228.0/23 maxlen: 24
185.79.56.0/22 maxlen: 24
185.79.56.0/24 maxlen: 24
185.149.176.0/22 maxlen: 24
185.182.147.0/24 maxlen: 24
185.229.40.0/22 maxlen: 24
185.229.40.0/23 maxlen: 24
195.49.144.0/22 maxlen: 24
2a00:e740::/32 maxlen: 48
2a07:69c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6e:98:5b:ae:57:20:f5:a7:50:34:f7:7c:72:db:e1:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08953a5f11a8279cdf8798960de1e22eb1227d95
Validity
Not Before: Jul 17 05:41:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5be568575ec8fd7de53f0d220d46501d17a5c418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4d:a7:47:db:72:d6:17:e5:3b:39:50:4e:8a:
23:cd:69:17:7a:af:28:93:8f:f8:d2:94:07:36:d3:
47:a9:67:0c:a5:f5:4a:27:d9:2e:2e:ef:5c:b5:f3:
18:03:01:4b:61:76:16:75:41:cc:5e:f7:97:1c:a7:
24:8c:5d:0b:00:01:25:ab:e9:06:ab:ed:df:3b:78:
52:ad:cb:b5:96:d7:74:c5:f6:0e:07:c1:5f:9d:f4:
b4:4f:86:f5:ac:36:d1:55:5b:7a:e0:23:55:a8:76:
51:58:4f:2a:9c:d6:0f:af:aa:42:0d:7d:ff:cc:df:
ba:a6:1a:21:2e:ea:4a:3c:61:02:d2:dc:bb:83:43:
d9:26:e1:a6:db:75:72:b8:d5:d4:23:4c:2e:55:34:
25:14:c2:86:3c:02:79:54:eb:fb:32:99:1b:73:99:
e9:11:82:b5:97:3a:0b:39:28:7f:8b:9f:b8:28:9f:
2a:59:48:dd:fe:ae:91:9a:2f:ed:c8:af:b0:72:f4:
d2:0f:04:40:4d:0c:5c:94:a5:9c:20:07:c7:89:39:
2b:a2:8c:59:8e:91:63:64:ab:f4:85:82:6b:d0:fc:
ef:35:7c:a2:fd:da:64:73:a9:08:5a:f5:f0:43:f1:
d0:25:be:b1:2d:6e:77:c8:0a:e5:e5:d4:2d:10:d3:
57:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E5:68:57:5E:C8:FD:7D:E5:3F:0D:22:0D:46:50:1D:17:A5:C4:18
X509v3 Authority Key Identifier:
keyid:08:95:3A:5F:11:A8:27:9C:DF:87:98:96:0D:E1:E2:2E:B1:22:7D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/W-VoV17I_X3lPw0iDUZQHRelxBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.2.16.0/21
91.224.190.0/23
162.33.228.0/23
185.79.56.0/22
185.149.176.0/22
185.182.147.0/24
185.229.40.0/22
195.49.144.0/22
IPv6:
2a00:e740::/32
2a07:69c0::/29
Signature Algorithm: sha256WithRSAEncryption
53:65:2c:ca:d4:42:c8:93:e2:24:95:76:87:1b:c6:c3:de:cf:
0f:fc:ac:52:c2:51:25:39:af:03:98:f7:1c:3b:9d:eb:eb:52:
c5:3e:a3:44:2e:65:a9:01:13:b2:62:6d:45:01:19:32:a9:43:
d9:a4:1b:4c:89:8d:96:d1:29:45:75:de:cb:91:56:9d:78:7a:
0e:09:5f:88:eb:79:02:72:c3:0d:cc:6c:32:ef:93:ee:7b:9a:
9e:27:ab:99:8d:f7:be:bb:76:b7:1a:a0:b9:3d:81:a4:1d:45:
e6:9a:ad:76:e4:00:a0:d1:fb:c6:e7:d5:91:f5:e5:6e:8e:db:
2c:7d:d9:85:1d:7a:37:59:8f:3d:67:06:b6:35:1e:cc:41:f1:
a3:4c:46:e9:30:90:24:7b:d1:1b:be:08:4d:de:7e:76:4c:1e:
99:83:41:b6:c6:31:01:b7:f1:ef:ef:aa:bd:c3:96:4d:1b:6b:
c1:d6:50:f0:f5:de:f7:ec:8b:a9:07:03:bb:b2:c2:f4:d8:86:
7c:ca:a9:bb:e6:e9:e7:cf:ce:ea:b1:b5:82:1e:2c:86:91:7b:
71:bd:5f:14:9b:b7:a9:ab:d4:fa:32:e1:5c:f4:03:06:b8:ec:
3d:c8:93:ba:0a:ac:cd:20:54:f6:cf:51:a7:f6:a5:1a:78:6d:
dd:40:42:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:56:43 2026 by rpki-client