Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/702302-3d53-4e43-9d5c-28bb2de58ac4/1/_wv4WcmWgVHA85GrTiCwQd9kjsY.roa
File: _wv4WcmWgVHA85GrTiCwQd9kjsY.roa (raw, json)
Hash identifier: QrsBNFm9Wb7GSozQLO+kzAlys48x4bhRE2UEafSBm9c=
Subject key identifier: FF:0B:F8:59:C9:96:81:51:C0:F3:91:AB:4E:20:B0:41:DF:64:8E:C6
Certificate issuer: /CN=5b611a3cfae951764cf9669a068d4ce74fa619a8
Certificate serial: 01A0B126D4C7F53200DA1105241E1289DB06
Authority key identifier: 5B:61:1A:3C:FA:E9:51:76:4C:F9:66:9A:06:8D:4C:E7:4F:A6:19:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2EaPPrpUXZM-WaaBo1M50-mGag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/702302-3d53-4e43-9d5c-28bb2de58ac4/1/_wv4WcmWgVHA85GrTiCwQd9kjsY.roa
Signing time: Thu 17 Sep 2026 20:55:07 +0000
ROA not before: Thu 17 Sep 2026 20:55:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 176.123.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/702302-3d53-4e43-9d5c-28bb2de58ac4/1/W2EaPPrpUXZM-WaaBo1M50-mGag.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/702302-3d53-4e43-9d5c-28bb2de58ac4/1/W2EaPPrpUXZM-WaaBo1M50-mGag.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2EaPPrpUXZM-WaaBo1M50-mGag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b1:26:d4:c7:f5:32:00:da:11:05:24:1e:12:89:db:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b611a3cfae951764cf9669a068d4ce74fa619a8
Validity
Not Before: Sep 17 20:55:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff0bf859c9968151c0f391ab4e20b041df648ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:39:41:b1:38:95:18:37:fc:0e:79:7f:92:96:
a6:fe:f1:50:26:a1:6c:a2:74:f9:5e:92:64:f2:4d:
28:56:6a:b4:bd:4a:aa:dd:5f:43:a6:c8:62:13:54:
85:ce:ea:d0:de:d8:fe:b4:7d:31:d2:09:25:25:d1:
5f:05:bc:d4:1e:6f:8c:ae:ea:11:c6:1d:cf:37:5b:
d8:66:da:4a:fe:45:98:ad:a6:fb:56:dc:24:f1:d4:
1c:cb:65:55:e2:5b:fc:33:34:be:16:c1:9b:fe:7f:
2b:e1:17:ee:81:ab:01:8b:ee:98:17:33:c8:e7:84:
8d:1e:a7:a6:88:94:5f:f8:42:10:dc:46:7d:db:ef:
e5:78:b2:ae:a5:28:07:c6:cc:99:fe:30:e8:02:71:
0e:f4:0d:be:5f:21:a2:2a:0d:a3:9f:d5:4d:94:e0:
32:0d:c6:44:9f:0a:82:f5:35:26:ad:69:c7:8e:09:
2c:0a:ef:d8:27:32:0a:c9:90:aa:e7:c3:60:67:fe:
0c:72:5d:25:63:7b:c9:fd:d1:91:ad:fb:00:be:52:
ac:9b:8b:fc:3f:7e:0a:e5:c5:e6:c7:b3:1f:22:84:
ba:05:e7:ea:aa:76:12:9d:da:b7:e6:04:06:46:86:
3b:a9:ea:b2:5d:99:3c:b4:49:83:02:1d:c5:d1:5f:
77:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0B:F8:59:C9:96:81:51:C0:F3:91:AB:4E:20:B0:41:DF:64:8E:C6
X509v3 Authority Key Identifier:
keyid:5B:61:1A:3C:FA:E9:51:76:4C:F9:66:9A:06:8D:4C:E7:4F:A6:19:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2EaPPrpUXZM-WaaBo1M50-mGag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/702302-3d53-4e43-9d5c-28bb2de58ac4/1/_wv4WcmWgVHA85GrTiCwQd9kjsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/702302-3d53-4e43-9d5c-28bb2de58ac4/1/W2EaPPrpUXZM-WaaBo1M50-mGag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.123.53.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:26:6f:6b:6b:c0:65:d4:cb:96:f1:fd:7e:e0:71:a7:bd:9a:
23:50:45:45:9f:6c:a8:2d:f8:c3:91:e4:1f:db:39:3f:e8:a4:
78:eb:9f:35:45:9f:8c:f8:15:2b:8b:8e:fe:d8:20:3d:9b:a6:
9a:7d:d9:f3:7f:9e:3f:6f:8c:76:c9:c8:31:13:9d:d8:66:94:
9f:25:7d:a1:f2:e5:cc:4a:eb:6f:44:d1:e8:f9:bb:5f:2f:8e:
ea:0a:08:84:56:26:7e:f2:5a:02:7c:24:db:2f:b9:bb:b1:99:
c0:86:f8:0c:ae:07:1b:48:d0:d7:e4:39:79:9d:57:09:b9:7d:
c5:b5:d5:4d:e7:00:92:d0:59:be:89:cb:e5:42:dc:29:bb:36:
ff:81:61:7b:62:71:c3:53:65:0d:01:32:d6:9c:67:a2:11:f1:
ca:0d:ba:80:1c:06:e6:07:26:85:7a:1b:be:64:8a:ce:41:12:
3f:41:51:ed:0e:fb:0e:6a:15:09:13:af:35:2b:4a:ba:c2:34:
e1:bd:01:b3:ec:b7:f8:06:04:c7:65:bd:2d:b0:08:bb:01:7d:
25:86:20:86:a7:d5:c6:97:88:0a:37:37:77:6c:84:ac:63:db:
cf:eb:a1:6b:b2:60:6a:85:ba:65:9f:c7:39:7c:c4:65:37:5e:
14:e9:e1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:26:36 2026 by rpki-client