Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/WGwfm8cbVhTnz3acW_v7UxYOAWU.roa
File: WGwfm8cbVhTnz3acW_v7UxYOAWU.roa (raw, json)
Hash identifier: qj1x4HXcfbSo+Vlg5x+bKgQnTydN1BLn3gU6Y3DWQx8=
Subject key identifier: 58:6C:1F:9B:C7:1B:56:14:E7:CF:76:9C:5B:FB:FB:53:16:0E:01:65
Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial: 019C5730F818BD1808DE94D9F87601D6876B
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/WGwfm8cbVhTnz3acW_v7UxYOAWU.roa
Signing time: Fri 13 Feb 2026 13:29:12 +0000
ROA not before: Fri 13 Feb 2026 13:29:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 110.172.188.0/24 maxlen: 24
114.69.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:57:30:f8:18:bd:18:08:de:94:d9:f8:76:01:d6:87:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Validity
Not Before: Feb 13 13:29:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=586c1f9bc71b5614e7cf769c5bfbfb53160e0165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:85:5e:80:d5:cb:af:81:5b:ba:fe:6a:6a:0e:
b5:e6:d6:14:4e:d2:63:8f:7b:1f:81:44:ba:f2:26:
19:41:a8:e7:37:c8:c2:69:46:54:ed:38:b9:27:1f:
31:84:68:c0:5b:28:14:49:e7:f4:1d:31:76:5f:99:
34:5e:c4:d4:45:f4:20:6f:27:a6:8e:de:83:c7:10:
b0:57:8b:c3:34:ed:ab:f9:2c:8d:bd:91:88:d1:77:
30:d5:5f:bd:67:54:c5:5e:0f:65:c4:47:75:7e:7b:
7f:bf:d1:fd:b6:4e:ec:ee:ab:cd:55:56:91:8c:b7:
ab:98:0f:af:99:9c:c1:0a:9c:e2:cd:1a:11:3b:da:
f7:9e:f7:69:6f:1c:73:cb:89:45:ae:0b:7b:92:8b:
f1:e9:60:7f:66:3b:9e:fa:9c:53:2a:0d:52:d9:ed:
1c:29:6e:a1:3e:46:86:08:e1:6b:93:57:2a:0f:a1:
a8:f1:4a:c9:62:06:d9:ac:8f:31:7a:cf:a1:b7:90:
35:c5:02:6f:e9:05:97:ac:6e:70:9c:c7:cc:17:ce:
0f:4a:f3:28:15:b3:a0:1f:53:77:fd:c2:d7:e6:49:
47:90:d9:3a:46:f3:f9:4f:45:d2:93:69:4f:04:b0:
37:59:b7:26:b7:34:2a:bf:6c:df:f0:e2:15:7e:f4:
7f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6C:1F:9B:C7:1B:56:14:E7:CF:76:9C:5B:FB:FB:53:16:0E:01:65
X509v3 Authority Key Identifier:
keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/WGwfm8cbVhTnz3acW_v7UxYOAWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.172.188.0/24
114.69.246.0/24
Signature Algorithm: sha256WithRSAEncryption
40:6a:4d:85:09:a4:14:8c:c6:5e:24:7f:7c:30:5c:67:a3:a8:
80:4f:23:e6:f6:c7:31:6a:73:6c:e2:fc:af:ca:d3:a2:33:3d:
84:90:c9:57:14:a1:78:70:fb:7e:24:22:c8:d1:44:e0:a4:30:
67:2f:f6:21:e2:2b:76:39:5b:b9:4a:f1:f5:75:85:0e:c9:4a:
08:61:cf:f2:8d:cb:ed:11:df:0e:c8:35:94:be:68:5d:d0:a1:
9a:a0:40:6b:98:83:e1:ea:7b:5f:9f:9b:a8:ca:21:53:67:30:
e4:4b:2d:43:4d:10:84:b0:db:50:5d:a4:49:fd:b6:4b:db:67:
87:6a:1c:7d:4a:e5:06:2c:c8:51:65:7a:2d:b3:81:25:9d:fe:
ff:4d:d7:03:71:c3:a1:af:4e:85:e4:72:96:f9:91:f1:0e:aa:
95:5f:20:a0:32:e1:37:ec:8d:47:7a:97:3c:fe:28:0a:ec:84:
17:6d:6e:3d:dc:58:21:b9:09:22:fd:3b:f7:b5:cd:b2:d0:31:
2d:da:e0:76:ea:eb:7d:f4:48:84:6d:6b:ae:83:07:22:a3:d0:
a8:f3:d8:dc:52:1a:5e:68:f8:4f:2e:d6:5b:2e:da:ed:7c:94:
bb:ed:7f:c1:a2:65:e7:d5:05:d3:83:7b:2b:f4:fb:cd:89:78:
96:de:cf:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:44:16 2026 by rpki-client