Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/W2LQg6-KbZwplQNYht4GfUeX9DY.roa
File: W2LQg6-KbZwplQNYht4GfUeX9DY.roa (raw, json)
Hash identifier: oHn90pVQF8lP0cmJLoeww27Hhkb8U2BBEb0V3tv842A=
Subject key identifier: 5B:62:D0:83:AF:8A:6D:9C:29:95:03:58:86:DE:06:7D:47:97:F4:36
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 019DCE754D177D2FFE67E08A944756F5F771
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/W2LQg6-KbZwplQNYht4GfUeX9DY.roa
Signing time: Mon 27 Apr 2026 10:21:27 +0000
ROA not before: Mon 27 Apr 2026 10:21:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 213.182.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:38:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:75:4d:17:7d:2f:fe:67:e0:8a:94:47:56:f5:f7:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Apr 27 10:21:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b62d083af8a6d9c2995035886de067d4797f436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:89:2b:8f:9f:a4:58:fb:7c:59:4b:bc:e9:85:
ee:2d:75:ae:b2:5d:bf:2f:55:cd:0d:b2:4f:9b:c7:
7f:d5:4b:26:0a:a1:cb:e0:f7:6a:4c:f5:30:77:e9:
e2:70:09:91:a6:e0:95:ee:2b:09:b7:ff:eb:19:bb:
f5:82:83:c8:b7:d7:9d:70:eb:8f:54:57:7f:45:79:
e6:e2:82:b6:ec:bb:24:d2:55:3b:08:6c:63:66:4b:
07:a1:65:ff:55:9b:fa:f0:24:f2:aa:50:d4:75:eb:
44:6b:28:b0:67:e5:43:8f:de:e4:5a:53:8f:e8:9f:
54:20:7d:31:6d:0b:67:e5:d6:89:75:5f:08:bb:4e:
b7:88:d8:b9:1f:0c:e2:9c:db:86:1b:47:7c:22:b5:
61:e6:59:d5:6d:02:22:2e:79:7e:c0:4b:1b:35:3f:
f8:a9:4b:27:29:7e:61:58:59:61:94:3f:a9:d0:8a:
ad:09:08:38:63:20:c0:1c:df:b6:f6:67:81:ff:d0:
bc:af:6e:78:df:ea:cd:ae:1a:c7:95:26:c6:ff:2b:
40:cb:ba:63:17:0d:25:8b:43:56:e1:43:df:0a:0d:
11:8f:3c:9a:23:bd:e1:4f:15:89:d6:e0:00:09:5e:
af:b4:35:fa:06:ff:53:ba:e6:55:19:45:77:5e:26:
37:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:62:D0:83:AF:8A:6D:9C:29:95:03:58:86:DE:06:7D:47:97:F4:36
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/W2LQg6-KbZwplQNYht4GfUeX9DY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.182.217.0/24
Signature Algorithm: sha256WithRSAEncryption
12:d7:cf:0e:e3:ee:cc:c1:f8:7b:46:8a:50:91:d8:72:5f:7b:
cd:62:6f:60:6b:23:37:46:27:a1:44:0b:0f:06:88:f3:e5:0f:
20:78:43:7a:49:80:fb:93:95:c7:b2:f8:0d:71:30:49:9a:06:
ff:9a:99:32:6a:e3:45:9f:77:2a:7d:ff:9b:b1:d6:d3:d6:89:
9c:a8:e7:09:68:1f:2e:fe:9c:2c:a5:d5:32:82:26:4f:7e:60:
19:67:51:25:dc:c6:7e:87:19:e5:4b:bf:f2:b7:96:a2:f9:40:
44:2d:2d:55:0c:b6:7d:ba:bd:01:91:8a:97:22:75:90:3e:bb:
50:8b:d7:de:80:dc:26:8f:69:63:f7:80:18:4a:ea:f5:11:bf:
c4:9c:ec:de:27:6a:fe:09:e5:75:f6:bd:9f:12:6c:57:48:39:
b8:72:81:23:40:bb:dc:43:01:69:67:0e:f7:d2:70:5f:5c:c0:
0e:f5:0d:6e:2a:44:ed:7f:24:42:63:f6:39:c4:1f:90:f2:20:
e2:39:ce:59:e7:34:a2:4b:8c:1b:cb:b7:0c:5d:de:49:ad:25:
95:bf:d8:15:bd:68:17:65:c4:a1:cf:da:88:aa:c4:1f:8d:70:
63:da:0c:0d:aa:82:ed:ee:bc:38:2a:12:5c:c2:c6:b0:23:a6:
cf:98:2c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:32:09 2026 by rpki-client