Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/WrLNxAyyuRsHIs6t3d8ID4TXQxk.roa
File: WrLNxAyyuRsHIs6t3d8ID4TXQxk.roa (raw, json)
Hash identifier: PhJyPBri0VSG1gtomnKeMBfQbUvbGb+z4erxQ/DDa9A=
Subject key identifier: 5A:B2:CD:C4:0C:B2:B9:1B:07:22:CE:AD:DD:DF:08:0F:84:D7:43:19
Certificate issuer: /CN=d0735650526d2bbf5250d9797e49db1d9f1cc27f
Certificate serial: 019B7CED8408CC59A214CAFA9A7E9559E41F
Authority key identifier: D0:73:56:50:52:6D:2B:BF:52:50:D9:79:7E:49:DB:1D:9F:1C:C2:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0HNWUFJtK79SUNl5fknbHZ8cwn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/WrLNxAyyuRsHIs6t3d8ID4TXQxk.roa
Signing time: Fri 02 Jan 2026 04:18:19 +0000
ROA not before: Fri 02 Jan 2026 04:18:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203014
IP address blocks: 62.220.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/0HNWUFJtK79SUNl5fknbHZ8cwn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/0HNWUFJtK79SUNl5fknbHZ8cwn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0HNWUFJtK79SUNl5fknbHZ8cwn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ed:84:08:cc:59:a2:14:ca:fa:9a:7e:95:59:e4:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0735650526d2bbf5250d9797e49db1d9f1cc27f
Validity
Not Before: Jan 2 04:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ab2cdc40cb2b91b0722ceaddddf080f84d74319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:af:c3:a2:98:62:57:fe:47:83:ab:25:c8:2d:
fc:80:75:93:81:64:04:5a:35:5b:40:ad:a9:a4:dd:
aa:40:89:a4:39:77:f7:29:cc:b2:50:8c:6d:28:ed:
9d:fd:66:18:20:ab:56:3f:10:6a:b6:d9:63:03:33:
1d:9c:4f:b5:6e:34:28:8f:9e:8d:9d:45:bc:f6:6c:
73:b2:f0:15:5e:da:7b:f2:e5:bf:60:b3:aa:17:f3:
f1:ab:81:3e:7c:f2:c0:4d:36:a5:99:e8:9b:82:35:
5a:ba:4c:3d:b4:17:ee:14:bd:cc:69:40:97:a3:0c:
ad:68:33:6c:5a:aa:f2:f8:71:04:c9:cb:07:6d:0d:
eb:59:90:1d:90:5d:61:f0:21:17:4c:15:fa:b7:c2:
6f:2a:56:41:eb:17:31:75:e0:2b:eb:f2:5e:dd:ef:
14:55:f7:92:62:a2:2c:3f:7e:15:cd:37:3f:44:2e:
76:9e:a9:7a:24:8d:05:60:f2:90:4f:f2:22:3a:14:
64:fc:f5:10:23:3e:b8:3b:93:69:5e:de:4f:c8:5f:
2e:83:97:e4:6d:3f:65:7a:57:e8:44:2a:b9:7f:1f:
7d:71:b2:43:4e:b1:2c:33:5d:ac:bf:4f:9c:f0:27:
ba:ab:c2:42:03:01:c1:f8:e5:85:cc:26:a9:85:bd:
e5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B2:CD:C4:0C:B2:B9:1B:07:22:CE:AD:DD:DF:08:0F:84:D7:43:19
X509v3 Authority Key Identifier:
keyid:D0:73:56:50:52:6D:2B:BF:52:50:D9:79:7E:49:DB:1D:9F:1C:C2:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0HNWUFJtK79SUNl5fknbHZ8cwn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/WrLNxAyyuRsHIs6t3d8ID4TXQxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/0HNWUFJtK79SUNl5fknbHZ8cwn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.108.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:46:a0:43:0b:d3:a6:74:dd:fd:b2:df:75:43:50:60:5b:0c:
f7:8d:49:f0:48:bd:9d:5f:de:ca:ba:8a:ff:86:1d:1f:0d:a5:
e5:1d:67:1c:4b:d8:0f:bb:1f:b1:dc:c4:63:e4:e4:74:53:89:
f1:f7:e7:45:b1:33:e4:63:24:23:28:c1:3e:ed:ca:c0:46:7c:
ef:6f:0a:da:e9:98:95:f4:60:f1:0b:96:9b:a6:81:a2:9b:1e:
b9:b6:e0:4b:1e:e6:08:50:27:54:3b:84:cb:b6:a2:8a:03:cb:
ef:7f:d2:f8:c8:4c:aa:1a:1c:cd:f1:57:ed:e4:3c:28:6e:aa:
aa:86:57:a9:b8:97:32:4d:42:4e:43:d2:51:0f:18:d9:ae:4e:
c3:93:01:8b:a1:57:59:b2:6c:ff:87:d8:d9:70:74:dd:f3:41:
a5:b3:01:c6:d4:6e:57:fb:96:ce:3e:87:30:eb:10:18:d5:70:
61:d0:2e:6d:95:8d:0a:67:78:03:04:1f:12:57:83:be:3b:22:
4d:f0:27:0b:a3:a2:b3:32:64:e7:38:e1:4a:b3:09:9a:b5:9e:
2b:28:f8:26:54:70:0d:c0:e6:d7:2c:8c:8f:fe:1d:fe:06:30:
f7:ae:d3:a7:26:55:54:e0:69:19:fb:63:87:b3:35:5a:0e:89:
05:ea:9b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:09:25 2026 by rpki-client