Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/WM9dDCzCe6gGu2ODAykACZrFrbA.roa
File: WM9dDCzCe6gGu2ODAykACZrFrbA.roa (raw, json)
Hash identifier: 4IvyYiGqHBx7zs5uBUW79nDrwRTJcNSRaHg9JrlQ3jo=
Subject key identifier: 58:CF:5D:0C:2C:C2:7B:A8:06:BB:63:83:03:29:00:09:9A:C5:AD:B0
Certificate issuer: /CN=c6a707934a762bbdf34fc0148f265ce124577213
Certificate serial: 019CA01E9DF02F5CC237B2E9E50B5B95B030
Authority key identifier: C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/WM9dDCzCe6gGu2ODAykACZrFrbA.roa
Signing time: Fri 27 Feb 2026 17:21:26 +0000
ROA not before: Fri 27 Feb 2026 17:21:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200823
IP address blocks: 5.252.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a0:1e:9d:f0:2f:5c:c2:37:b2:e9:e5:0b:5b:95:b0:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a707934a762bbdf34fc0148f265ce124577213
Validity
Not Before: Feb 27 17:21:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58cf5d0c2cc27ba806bb6383032900099ac5adb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:da:0a:20:2a:3b:d0:7d:e6:e6:89:a1:31:be:
17:86:3d:a3:60:2e:c7:17:05:c4:42:6c:b9:c7:80:
e1:20:1b:13:41:7e:a1:0f:e9:ca:c2:bf:bb:7b:f3:
24:6d:c3:ac:87:1d:57:31:de:e1:1f:75:03:2a:90:
98:47:6f:e4:86:36:f7:7a:1a:87:75:2b:8f:fb:0c:
87:85:ae:4a:5d:d1:8f:0a:ce:b9:d4:1f:97:f9:2b:
a5:c9:10:55:98:18:dd:61:74:f6:50:aa:ca:8c:ae:
83:bc:c8:1d:a0:3e:e8:bc:a7:f7:22:49:2c:4c:f1:
de:09:b3:33:dc:d4:e1:2b:af:88:d8:dd:5f:52:11:
71:03:78:83:6f:87:49:5e:f7:30:c1:59:9e:6b:ce:
a3:10:cb:6b:82:51:44:22:ac:d2:21:cf:56:81:2d:
ed:1e:44:f4:b9:4e:42:94:3f:fa:a9:10:c4:9e:a4:
7f:6f:62:54:c2:f6:7d:36:d8:de:de:6b:ff:af:7a:
97:28:d8:f1:38:18:a1:cc:fc:9a:4b:b6:c8:3e:f1:
80:2b:53:63:59:b2:05:43:1a:e8:55:5a:29:70:6c:
62:fc:71:50:d8:cf:3f:0f:0e:8a:62:bd:e6:bc:94:
d3:06:c3:86:5d:60:ab:10:6c:3a:01:99:b5:22:1f:
53:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CF:5D:0C:2C:C2:7B:A8:06:BB:63:83:03:29:00:09:9A:C5:AD:B0
X509v3 Authority Key Identifier:
keyid:C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/WM9dDCzCe6gGu2ODAykACZrFrbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.155.0/24
Signature Algorithm: sha256WithRSAEncryption
25:19:67:2a:b9:cf:96:7d:d4:b1:48:c1:8b:a6:4a:a7:d4:6d:
42:9c:d4:c7:11:87:71:95:58:3c:40:fb:98:66:57:ee:a3:86:
57:95:8e:c6:83:cc:a3:f6:40:6d:eb:58:0b:9a:b7:95:d4:cb:
7c:cd:67:4a:d5:87:35:35:4e:c7:87:9d:08:d6:79:81:d9:96:
ca:ec:cb:98:bd:2a:65:ee:7f:76:a4:49:2d:94:67:76:0e:01:
02:6d:3e:7d:01:db:e5:80:a2:b7:b0:8c:70:2e:c2:39:65:06:
9e:c6:db:5a:ea:30:03:69:9c:44:df:0e:49:94:f4:bd:e6:c9:
d2:5b:8b:2c:44:4c:17:ab:d4:85:61:1b:47:cb:e1:bd:c6:88:
19:0e:c7:ea:e1:5e:be:5b:79:cf:4d:ad:94:04:68:45:18:0d:
e9:c3:a0:9a:46:a9:15:5d:4c:05:19:b7:d3:78:a0:c2:9e:66:
ba:cf:5f:56:24:cc:a9:9d:3a:95:06:3d:c6:ae:c1:2d:9c:c0:
f5:63:26:85:2c:5d:55:11:10:e3:ae:1b:8d:f9:86:04:f7:ba:
c1:b7:d2:cc:0c:53:e8:6d:d6:6b:74:06:be:10:1b:fe:ec:00:
ad:82:81:b3:f0:ad:cb:cb:4e:a9:91:88:4b:bf:d6:0e:a7:09:
56:e2:92:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:03:24 2026 by rpki-client