Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/yNcuwQMwGJ6axwcWzceZMyJ4ITU.roa
File: yNcuwQMwGJ6axwcWzceZMyJ4ITU.roa (raw, json)
Hash identifier: vCWJwNhbxC8ZKVGHu6qZi6Ju01m6EvumKTaKvWZp38c=
Subject key identifier: C8:D7:2E:C1:03:30:18:9E:9A:C7:07:16:CD:C7:99:33:22:78:21:35
Certificate issuer: /CN=597b44c4a7931c66a6ff9e92dbb32ca723d4ccf7
Certificate serial: 019C2CA35FEE51710CB9820872FDEFFEC5CF
Authority key identifier: 59:7B:44:C4:A7:93:1C:66:A6:FF:9E:92:DB:B3:2C:A7:23:D4:CC:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXtExKeTHGam_56S27MspyPUzPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/yNcuwQMwGJ6axwcWzceZMyJ4ITU.roa
Signing time: Thu 05 Feb 2026 07:10:30 +0000
ROA not before: Thu 05 Feb 2026 07:10:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39743
IP address blocks: 5.254.4.0/24 maxlen: 24
5.254.21.0/24 maxlen: 24
5.254.28.0/24 maxlen: 24
5.254.49.0/24 maxlen: 24
93.114.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXtExKeTHGam_56S27MspyPUzPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2c:a3:5f:ee:51:71:0c:b9:82:08:72:fd:ef:fe:c5:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597b44c4a7931c66a6ff9e92dbb32ca723d4ccf7
Validity
Not Before: Feb 5 07:10:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c8d72ec10330189e9ac70716cdc7993322782135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:53:f4:93:14:57:4f:cf:06:c2:26:3b:e5:cf:
fe:31:a9:4a:6c:09:b8:fd:76:d6:6f:84:83:35:dc:
91:72:bf:08:53:68:07:13:d6:35:2d:40:9d:5a:a4:
d7:14:9a:1a:b3:30:93:53:58:6e:6f:94:47:4c:20:
49:0d:3e:47:d6:ea:60:78:9a:4c:01:44:d3:ba:0b:
3e:ef:81:80:9b:99:e1:fd:f1:29:b9:fd:16:7f:59:
ae:9d:80:b4:8e:c9:6d:a5:5d:e4:be:10:3b:4e:d3:
ad:7a:d7:33:19:ec:0f:1b:5e:05:0d:e9:20:c2:b7:
8a:e8:a7:92:e0:fe:95:f3:d1:fb:bc:1f:84:a1:48:
06:48:13:38:55:f0:d6:d8:c2:03:da:9c:64:ae:27:
00:60:3b:8e:70:5d:ce:6c:1a:fd:5d:91:ea:1e:7c:
c7:3c:59:da:a6:d8:4d:c7:dd:3e:28:91:5f:ef:6a:
cb:26:4a:ef:86:36:f9:29:c6:c7:d7:0c:6a:c0:ea:
71:11:e1:1a:39:29:d7:24:25:04:cc:1c:ff:4a:25:
6b:1d:87:f8:1f:eb:bb:41:fe:52:b0:aa:71:e6:9c:
3a:ff:38:1c:a5:97:e3:9b:67:8d:b5:e7:fe:9b:a0:
31:b2:5b:ea:e5:57:7c:cf:c8:9e:4e:c5:08:69:8f:
e9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D7:2E:C1:03:30:18:9E:9A:C7:07:16:CD:C7:99:33:22:78:21:35
X509v3 Authority Key Identifier:
keyid:59:7B:44:C4:A7:93:1C:66:A6:FF:9E:92:DB:B3:2C:A7:23:D4:CC:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXtExKeTHGam_56S27MspyPUzPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/yNcuwQMwGJ6axwcWzceZMyJ4ITU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.254.4.0/24
5.254.21.0/24
5.254.28.0/24
5.254.49.0/24
93.114.47.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:e0:55:53:55:83:b6:ab:92:d6:48:17:94:72:c5:02:62:24:
87:fc:a2:25:de:0c:7e:e1:5e:38:84:b5:e7:c7:ac:64:87:e4:
40:80:78:37:c3:08:48:db:bf:80:00:57:b5:f7:d3:6a:6e:ee:
ff:55:b1:22:a9:89:d9:14:98:7a:04:be:ca:e1:00:59:76:a6:
3a:55:64:2e:a2:04:30:1a:9c:01:63:d3:56:63:e7:67:2f:bb:
fa:70:ea:28:b1:ac:08:cc:5e:4a:b5:59:58:1a:58:fd:40:7d:
86:1c:7c:cd:fd:53:d3:df:74:5e:f5:95:d4:e8:e8:c0:32:33:
0a:ed:ba:cd:28:32:ff:ea:7c:84:9d:ee:f9:f7:1d:1f:79:b2:
7b:b6:03:4c:67:60:d4:57:69:84:a7:4e:c4:bf:35:81:28:af:
1e:4e:a6:fb:af:09:19:f6:9f:64:f6:91:f2:57:04:13:8e:30:
f2:7c:c6:dc:ef:33:40:13:bf:81:6a:1f:b3:b3:03:6a:12:ce:
c4:e0:49:cb:aa:d3:a2:98:1e:0e:54:61:a2:f8:e7:79:c8:d0:
3e:0e:78:63:8f:68:ab:f7:2f:a5:a9:f1:cd:4a:32:cc:80:10:
92:d2:b7:b1:e0:53:ff:f7:23:5e:35:65:c1:ff:25:e5:0b:c2:
6b:c5:45:8e
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZwso1/uUXEMuYIIcv3v/sXPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5N2I0NGM0YTc5MzFjNjZhNmZmOWU5MmRiYjMyY2E3MjNk
NGNjZjcwHhcNMjYwMjA1MDcxMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOGQ3MmVjMTAzMzAxODllOWFjNzA3MTZjZGM3OTkzMzIyNzgyMTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VP0kxRXT88GwiY75c/+MalKbAm4
/XbWb4SDNdyRcr8IU2gHE9Y1LUCdWqTXFJoaszCTU1hub5RHTCBJDT5H1upgeJpM
AUTTugs+74GAm5nh/fEpuf0Wf1munYC0jsltpV3kvhA7TtOtetczGewPG14FDekg
wreK6KeS4P6V89H7vB+EoUgGSBM4VfDW2MID2pxkricAYDuOcF3ObBr9XZHqHnzH
PFnapthNx90+KJFf72rLJkrvhjb5KcbH1wxqwOpxEeEaOSnXJCUEzBz/SiVrHYf4
H+u7Qf5SsKpx5pw6/zgcpZfjm2eNtef+m6Axslvq5Vd8z8ieTsUIaY/pDwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFMjXLsEDMBiemscHFs3HmTMieCE1MB8GA1UdIwQY
MBaAFFl7RMSnkxxmpv+ektuzLKcj1Mz3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1h0RXhLZVRIR2FtXzU2UzI3TXNweVBVelBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85NWZmOGYtNjZiYy00YjExLTk4ZjAt
MGFiMjFiMmYyNzU0LzEveU5jdXdRTXdHSjZheHdjV3pjZVpNeUo0SVRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS85NWZmOGYtNjZiYy00YjExLTk4ZjAtMGFiMjFiMmYyNzU0
LzEvV1h0RXhLZVRIR2FtXzU2UzI3TXNweVBVelBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQABf4EAwQA
Bf4VAwQABf4cAwQABf4xAwQAXXIvMA0GCSqGSIb3DQEBCwUAA4IBAQBN4FVTVYO2
q5LWSBeUcsUCYiSH/KIl3gx+4V44hLXnx6xkh+RAgHg3wwhI27+AAFe199Nqbu7/
VbEiqYnZFJh6BL7K4QBZdqY6VWQuogQwGpwBY9NWY+dnL7v6cOoosawIzF5KtVlY
Glj9QH2GHHzN/VPT33Re9ZXU6OjAMjMK7brNKDL/6nyEne759x0febJ7tgNMZ2DU
V2mEp07EvzWBKK8eTqb7rwkZ9p9k9pHyVwQTjjDyfMbc7zNAE7+Bah+zswNqEs7E
4EnLqtOimB4OVGGi+Od5yNA+Dnhjj2ir9y+lqfHNSjLMgBCS0rex4FP/9yNeNWXB
/yXlC8JrxUWO
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:46:12 2026 by rpki-client