Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WoLOmGG_hcX5Yquv00hu031H87A.roa
File:                     WoLOmGG_hcX5Yquv00hu031H87A.roa (raw, json)
Hash identifier:          FDLyPHYeOshMHcKsQwu2HKVHqcn7ceTMJmjq8Av0ZRc=
Subject key identifier:   5A:82:CE:98:61:BF:85:C5:F9:62:AB:AF:D3:48:6E:D3:7D:47:F3:B0
Certificate issuer:       /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial:       019C17B78F854B5965213FEF9793B47F1356
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WoLOmGG_hcX5Yquv00hu031H87A.roa
Signing time:             Sun 01 Feb 2026 05:40:31 +0000
ROA not before:           Sun 01 Feb 2026 05:40:31 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     32167
IP address blocks:        151.247.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 13:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:17:b7:8f:85:4b:59:65:21:3f:ef:97:93:b4:7f:13:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
        Validity
            Not Before: Feb  1 05:40:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5a82ce9861bf85c5f962abafd3486ed37d47f3b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:89:f3:38:be:83:8e:93:c1:dc:82:2f:72:e5:
                    0b:43:51:c4:4d:d1:18:8b:e5:20:1f:10:75:5f:d5:
                    f6:90:34:4b:21:97:c6:28:da:d7:b9:f9:af:48:22:
                    4a:ee:89:78:aa:d2:c9:18:c5:bc:38:88:d5:33:d0:
                    c6:29:26:57:ad:c0:39:dd:c9:14:48:da:2e:75:30:
                    98:65:50:06:84:14:a4:f0:98:87:c1:1a:67:a8:0a:
                    b0:b6:0c:75:96:8d:5b:1f:cd:57:8a:23:6a:4f:59:
                    e4:e7:d4:ed:fc:de:b9:64:ef:9f:19:0a:01:80:d0:
                    c0:0a:1d:a0:fb:9a:14:dc:f9:6a:15:9f:7b:5d:b4:
                    fb:e8:2b:53:1c:a3:c2:a2:68:b2:b9:08:77:19:e7:
                    20:f4:2b:b9:a9:02:91:45:20:02:1a:fa:c9:07:d0:
                    e5:02:e5:96:e6:01:aa:90:18:a7:79:c6:fa:0e:b0:
                    8c:35:35:a6:b1:40:57:f7:11:80:3b:d1:0a:4e:56:
                    29:b8:67:40:7a:fc:2d:73:c7:9f:3c:83:81:ec:e5:
                    66:e9:f3:f5:0d:17:13:4c:5d:86:a9:b4:3a:62:c4:
                    c2:cb:16:06:bd:c0:1f:a6:f6:b3:2a:d7:bc:8d:f1:
                    e7:f0:a6:d8:7c:1e:71:16:d1:89:f4:37:83:41:ae:
                    02:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:82:CE:98:61:BF:85:C5:F9:62:AB:AF:D3:48:6E:D3:7D:47:F3:B0
            X509v3 Authority Key Identifier:
                keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WoLOmGG_hcX5Yquv00hu031H87A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.247.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:4e:06:f7:c4:51:26:65:99:8d:e1:2c:a4:8f:5c:cb:65:02:
         c3:5c:df:11:8c:ee:14:8b:a0:e8:d4:98:27:ca:03:d6:44:bd:
         7b:b5:0e:06:a2:6c:5e:90:61:23:f4:f2:00:33:a4:46:ab:0c:
         71:9f:94:db:97:38:4f:e3:cd:84:ed:5a:db:55:91:10:6c:e5:
         c5:58:d7:ce:7d:a6:31:43:5f:e7:3d:8e:04:af:96:08:31:7f:
         df:e1:18:22:5c:a3:05:42:2d:62:48:a0:b8:5b:6a:9f:12:af:
         ce:37:5c:6e:28:d7:de:8a:e6:89:7b:8b:cc:36:40:87:e5:fb:
         60:58:59:32:eb:ce:ce:5f:b7:a0:a9:80:b4:c1:31:64:4f:6b:
         17:ac:70:26:99:92:fc:66:b7:89:70:50:f7:d1:1e:6f:a2:84:
         46:88:e6:be:16:d7:97:46:bb:68:68:6c:4c:d1:21:7c:13:35:
         02:0f:5b:d9:62:c2:a8:55:75:d2:12:b0:98:93:65:ab:1c:1a:
         1d:26:b5:01:29:67:9e:c0:84:da:b5:da:e8:37:d6:b4:cf:27:
         fc:32:5f:1f:b2:f7:12:2a:20:70:81:16:9a:03:16:de:00:e3:
         3f:ad:29:03:82:e6:89:84:4c:71:5d:7a:42:bd:1b:be:05:0b:
         05:19:6a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:19:01 2026 by rpki-client