Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/WMBLi809xVfbL9YQ-h4zFXr2k34.roa
File: WMBLi809xVfbL9YQ-h4zFXr2k34.roa (raw, json)
Hash identifier: oDAficysVd+O+UrSq40v3FNQ4xTKVCMHE3CRxrYlHvA=
Subject key identifier: 58:C0:4B:8B:CD:3D:C5:57:DB:2F:D6:10:FA:1E:33:15:7A:F6:93:7E
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 019E113EEBC96701D3812E8CC1B1192CBEFA
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/WMBLi809xVfbL9YQ-h4zFXr2k34.roa
Signing time: Sun 10 May 2026 09:36:36 +0000
ROA not before: Sun 10 May 2026 09:36:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 996
IP address blocks: 89.28.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:11:3e:eb:c9:67:01:d3:81:2e:8c:c1:b1:19:2c:be:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: May 10 09:36:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58c04b8bcd3dc557db2fd610fa1e33157af6937e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:be:59:b4:00:a0:3a:d1:69:2e:77:fc:03:79:
d7:f4:31:55:3e:9a:a5:9c:6f:8a:af:b5:fc:f0:40:
71:8e:3a:c2:91:e6:08:2e:09:22:4e:17:6e:7f:18:
64:30:80:f3:8f:56:95:67:72:bf:99:fe:73:4d:53:
fc:a5:f3:99:b7:10:10:ae:75:c5:1c:95:f6:95:47:
20:13:6a:d8:60:8b:9c:11:5f:65:76:41:87:57:24:
0f:bd:a4:67:d0:ac:81:2d:46:e0:ce:27:04:c5:87:
71:7f:97:ce:a5:d3:5b:70:50:a4:0c:c6:6c:9c:8f:
46:74:c3:fa:a3:89:3e:86:dc:b9:1d:20:0f:35:2d:
ba:38:39:88:c5:c0:1c:1a:2e:c6:6d:78:d8:13:74:
60:10:55:22:71:a2:f3:35:17:d3:5a:a1:92:da:13:
49:b8:0d:37:be:71:37:dd:fb:de:4f:64:bb:ef:95:
be:22:0b:90:bb:ea:16:da:f9:ec:3b:27:da:28:b0:
f7:ba:92:84:b3:f1:4e:79:69:86:93:57:3f:b5:84:
d8:91:34:08:4f:b1:4c:88:28:42:e9:92:38:d0:95:
b5:5e:4d:b7:03:f0:95:2a:6f:b3:23:4a:83:4d:43:
55:8e:5c:df:47:3a:24:aa:52:69:10:b9:3a:fd:22:
39:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C0:4B:8B:CD:3D:C5:57:DB:2F:D6:10:FA:1E:33:15:7A:F6:93:7E
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/WMBLi809xVfbL9YQ-h4zFXr2k34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.28.204.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:d1:f9:f8:0a:0c:65:20:c9:ea:8b:97:43:5d:cf:e4:23:45:
a3:25:df:1b:9f:de:e6:9d:09:c0:7c:db:ab:f1:d1:85:47:f3:
51:57:f5:79:11:d3:6b:78:cf:f2:0a:c8:44:67:9f:64:32:e3:
b8:d7:ea:21:77:9e:0b:5b:7a:1e:af:35:48:0b:6f:72:d4:c4:
62:d3:de:81:a9:f6:64:b1:b4:53:54:8d:7b:b5:f2:d0:fe:c7:
4f:12:b2:23:7c:51:c3:51:ae:89:73:6b:c1:6a:37:47:34:9c:
a2:3e:a5:be:8e:b2:32:6b:9e:97:97:24:d8:c9:b3:7a:de:d5:
34:6d:88:c7:de:3c:37:15:f9:9c:2d:63:02:67:c7:3c:f4:e0:
26:ea:39:d1:58:ba:bc:25:82:dd:c8:73:6d:5d:dd:e3:81:ab:
31:f2:9f:91:97:3b:a9:29:c5:d7:b5:19:84:aa:85:d1:f3:2c:
d8:d6:b6:3c:7b:95:43:41:93:f4:93:da:a3:f3:14:8c:92:55:
ed:67:85:ed:51:84:08:31:c8:dd:16:e1:7d:c8:d9:5f:de:77:
9a:d9:0d:01:45:9b:c0:f3:f2:62:42:13:c0:e7:05:f4:3b:40:
51:44:58:29:ae:06:13:b6:5a:e0:f1:96:3e:9c:20:27:9e:fc:
3f:7c:c8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:36:47 2026 by rpki-client