Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/WP5VLGI4ulmSbNxBPukglNbdBRA.roa
File: WP5VLGI4ulmSbNxBPukglNbdBRA.roa (raw, json)
Hash identifier: RpQ3sBuNfVrqecm0+dZDQsCQlQ/PR1NRrFc8o4XUGjw=
Subject key identifier: 58:FE:55:2C:62:38:BA:59:92:6C:DC:41:3E:E9:20:94:D6:DD:05:10
Certificate issuer: /CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51
Certificate serial: 019C9C1B65B7B155294F520F0E8D73999FA0
Authority key identifier: F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/WP5VLGI4ulmSbNxBPukglNbdBRA.roa
Signing time: Thu 26 Feb 2026 22:39:26 +0000
ROA not before: Thu 26 Feb 2026 22:39:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205775
IP address blocks: 77.91.96.0/23 maxlen: 23
77.91.96.0/24 maxlen: 24
77.91.97.0/24 maxlen: 24
91.214.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9c:1b:65:b7:b1:55:29:4f:52:0f:0e:8d:73:99:9f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51
Validity
Not Before: Feb 26 22:39:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58fe552c6238ba59926cdc413ee92094d6dd0510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6a:44:0e:6e:a7:6f:2d:a5:bf:a7:c9:34:01:
7e:41:d6:ee:ae:c9:c6:ce:7d:d9:4d:8a:63:91:f6:
dc:78:8c:d9:78:31:be:0b:af:7c:82:8d:bf:2d:b4:
db:c6:bf:d1:7a:c7:f8:d0:e8:85:a5:ed:83:40:a8:
ea:19:ea:79:2c:72:8f:9e:99:41:6b:ba:a9:7d:f8:
66:13:da:b8:57:81:8e:f3:5c:27:74:0e:7b:1a:3a:
ac:80:91:65:3e:80:df:63:9a:03:22:58:00:53:94:
ef:6a:9d:91:32:92:5a:44:c8:33:b9:65:a7:12:27:
c5:f0:7d:60:dc:62:62:97:f1:a9:aa:c3:76:64:c5:
01:40:7e:26:1e:ae:a9:c1:32:67:6d:75:2b:4e:4a:
d7:4a:3f:ea:e9:94:a0:53:40:53:78:7f:de:d7:bf:
9b:07:cf:3e:a0:dd:75:d8:69:58:97:c1:c4:63:91:
6b:01:c6:12:0f:5d:0d:5b:d8:58:f7:e1:38:76:10:
e0:b8:96:c3:a6:5a:3f:10:be:08:e1:d7:00:b5:b6:
5a:83:21:b2:c5:65:9d:79:34:4a:9a:f6:66:9b:4f:
32:b0:a1:c7:02:9d:c5:67:e2:1c:64:68:a2:87:83:
bb:60:4c:86:3a:fe:34:45:05:05:48:80:57:98:2b:
56:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FE:55:2C:62:38:BA:59:92:6C:DC:41:3E:E9:20:94:D6:DD:05:10
X509v3 Authority Key Identifier:
keyid:F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/WP5VLGI4ulmSbNxBPukglNbdBRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.96.0/23
91.214.78.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:30:48:a3:d3:c4:6c:8e:34:48:be:23:b9:d3:b1:42:35:37:
7a:44:21:cf:6b:ef:69:54:06:ac:45:00:8d:9d:67:60:f4:c8:
54:77:20:2c:60:18:33:1c:43:a0:0f:42:75:90:cf:c4:d9:a1:
76:1b:af:f5:b1:0d:b7:f7:31:7a:88:72:55:95:49:43:17:dd:
9c:9c:f2:23:f8:e3:fc:7e:28:1a:4d:c2:3b:6b:f5:b1:e1:fa:
e8:06:47:3f:15:d6:d6:91:4e:9f:33:86:44:92:f0:8e:1c:90:
c5:de:2c:60:23:20:d8:9c:b0:cf:70:bc:ae:f2:17:da:f3:20:
b4:ef:d0:24:e2:79:3c:e7:09:0b:bd:17:bb:44:71:c2:49:ff:
6b:01:f2:05:f5:cd:26:8b:dd:e1:9a:1d:c8:c8:29:b0:54:f4:
9d:04:6f:5f:a3:a7:10:45:d5:df:be:ef:eb:66:90:f4:75:1a:
34:b8:2e:99:7d:97:a6:59:8a:c8:8d:e0:26:5c:a9:fa:15:fc:
a0:06:3f:9c:42:6b:f8:be:be:de:9e:ef:6d:0c:b2:e7:79:76:
71:c7:46:2b:4c:fd:0b:0e:57:45:35:c2:c7:d3:00:4a:b2:67:
a4:40:cc:16:9b:68:be:2e:44:cd:a5:59:9d:78:c0:f8:be:37:
62:e7:90:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:06:07 2026 by rpki-client