Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/WwDrSgFH_itRPsscp_lrJynXHGs.roa
File: WwDrSgFH_itRPsscp_lrJynXHGs.roa (raw, json)
Hash identifier: /q9SkZMvhtkP6+aVM2cdgq3Gm3EVPrHXuk2BJ363StI=
Subject key identifier: 5B:00:EB:4A:01:47:FE:2B:51:3E:CB:1C:A7:F9:6B:27:29:D7:1C:6B
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019EBCB92B737C375779228890005790140E
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/WwDrSgFH_itRPsscp_lrJynXHGs.roa
Signing time: Fri 12 Jun 2026 16:45:12 +0000
ROA not before: Fri 12 Jun 2026 16:45:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202226
IP address blocks: 2.26.74.0/24 maxlen: 24
2.26.75.0/24 maxlen: 24
2.27.5.0/24 maxlen: 24
31.76.32.0/24 maxlen: 24
31.76.87.0/24 maxlen: 24
31.76.93.0/24 maxlen: 24
31.76.118.0/24 maxlen: 24
31.77.189.0/24 maxlen: 24
31.77.228.0/24 maxlen: 24
144.31.40.0/24 maxlen: 24
144.31.236.0/24 maxlen: 24
150.241.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bc:b9:2b:73:7c:37:57:79:22:88:90:00:57:90:14:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 12 16:45:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b00eb4a0147fe2b513ecb1ca7f96b2729d71c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f2:2f:1c:be:95:8f:80:d9:c0:5c:84:52:f3:
ee:35:8e:8a:59:c3:2c:9b:f8:f6:c9:72:1d:db:6b:
52:d5:de:8c:58:9c:7f:17:f9:00:bc:d8:2f:d0:d0:
4b:c1:ef:ce:2d:36:67:a2:b4:6c:53:80:ef:77:79:
48:54:0f:64:5b:67:37:f1:b0:e9:18:00:1b:a1:2f:
c8:c0:12:92:41:f6:fb:3f:2e:df:dd:7e:06:e3:4d:
2d:61:12:90:b6:81:35:61:6f:7f:33:e3:a2:6d:e7:
0f:9c:21:8d:b7:85:9c:1f:58:c9:17:d3:49:38:f5:
e2:d7:79:f8:76:66:a6:6f:cb:3d:36:35:3e:5f:41:
15:07:20:ba:e4:8f:e0:bf:f1:6a:a9:d3:1e:9f:bd:
d6:9f:86:96:b2:83:17:f1:9c:ab:02:cf:b1:5d:b9:
c1:6a:d3:d5:87:76:9c:1b:88:b0:de:23:75:dc:68:
42:22:de:08:73:5b:72:4a:aa:d5:8d:2d:11:d0:38:
2a:fa:b9:80:84:bf:96:5e:66:da:4e:9e:9c:a5:fa:
86:d5:36:92:b2:e2:4f:b9:7f:68:a5:12:05:b6:ea:
6a:16:c2:1f:94:c3:e2:8a:8c:f2:5d:b4:c4:5a:c5:
71:36:a3:b0:60:8b:1b:b8:7d:00:84:4f:15:9b:bb:
95:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:00:EB:4A:01:47:FE:2B:51:3E:CB:1C:A7:F9:6B:27:29:D7:1C:6B
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/WwDrSgFH_itRPsscp_lrJynXHGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.74.0/23
2.27.5.0/24
31.76.32.0/24
31.76.87.0/24
31.76.93.0/24
31.76.118.0/24
31.77.189.0/24
31.77.228.0/24
144.31.40.0/24
144.31.236.0/24
150.241.81.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:15:0a:20:20:78:4e:02:81:e0:86:8d:3b:1f:42:d2:62:72:
2e:d8:e8:e9:8e:b3:f0:d4:a7:eb:c8:38:9e:2f:32:e5:d5:30:
a0:bc:d6:e3:b0:f6:d8:06:8c:cb:99:5f:38:c2:34:49:b2:3d:
11:93:0a:42:c8:9c:81:6c:bb:f8:7a:2c:ef:b0:d2:ab:76:4f:
2f:e9:4a:96:5f:ff:0c:f8:44:f5:d6:5a:5f:3e:71:d9:94:63:
88:e6:17:1d:5f:ba:6a:d9:f3:ba:96:19:ff:d7:9b:7c:4e:4a:
15:71:46:6b:a5:81:f7:dd:c8:d5:a7:36:1b:e1:5c:f6:14:56:
23:aa:8f:95:9a:a9:a2:5b:ee:6a:a1:bd:50:1b:27:8b:4f:a2:
43:2e:e0:47:65:5c:c0:68:9f:7c:f5:9f:92:49:e1:6b:3c:be:
ce:a5:21:03:96:87:b5:ee:7f:63:0b:18:b2:cf:d0:a7:a4:de:
36:48:b6:d9:99:b3:f2:a0:f4:ca:0c:8f:5a:47:9e:d3:b9:47:
d5:98:be:02:9a:1f:64:61:c2:dd:eb:1f:3f:cb:8f:bb:9a:f1:
f4:3f:cc:e8:22:4c:5f:31:5b:c3:a1:2a:4a:d5:1e:b5:96:ac:
f3:4c:a0:35:8c:f4:bd:fa:8e:9c:0a:25:17:65:34:47:8d:12:
40:bf:95:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:52:06 2026 by rpki-client