Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/Wwhgun2_ysp8yCC5F09mZrclvZA.roa
File: Wwhgun2_ysp8yCC5F09mZrclvZA.roa (raw, json)
Hash identifier: pIQ60AN0oth+GgoKfrfPjq9eTtcRAjq4rNp2Li+Crdc=
Subject key identifier: 5B:08:60:BA:7D:BF:CA:CA:7C:C8:20:B9:17:4F:66:66:B7:25:BD:90
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 019C0DC7482A7D58E0B9020393948375191B
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/Wwhgun2_ysp8yCC5F09mZrclvZA.roa
Signing time: Fri 30 Jan 2026 07:21:29 +0000
ROA not before: Fri 30 Jan 2026 07:21:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 213.220.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:0d:c7:48:2a:7d:58:e0:b9:02:03:93:94:83:75:19:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jan 30 07:21:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b0860ba7dbfcaca7cc820b9174f6666b725bd90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a0:82:ad:e5:27:b6:7f:51:b3:fc:bf:91:ed:
92:7d:c9:70:08:58:48:d2:d8:eb:8f:0d:0b:3e:ca:
12:52:ff:3a:90:98:4c:6b:71:f5:14:46:0d:b0:8d:
b7:bc:f3:88:18:c8:2f:d0:3d:30:69:4d:44:ca:b9:
bb:f1:16:1f:84:b0:a6:43:ba:a1:4f:b4:a3:48:7e:
a8:ef:0b:bf:4c:41:b3:4c:1a:8c:18:8f:71:c2:6d:
5c:50:13:28:4e:69:1c:d4:c0:1e:10:72:47:70:0a:
e6:cd:8d:32:36:0f:36:ea:52:1c:84:ae:1c:38:6f:
24:6f:44:ec:09:55:5a:44:26:6e:e9:e4:44:2e:95:
6d:2c:9e:a5:af:73:86:9d:fe:04:fe:99:b7:22:1a:
75:8f:0d:9b:ca:41:04:73:13:0f:b3:95:8c:60:f1:
43:bc:f4:63:8c:ce:20:4f:4f:0b:06:1d:74:06:e3:
a3:f5:28:4d:80:2d:7f:f8:f7:5a:c8:93:30:25:63:
ca:27:61:66:93:34:5b:20:f4:25:5c:0f:cc:87:7c:
72:de:28:e6:8f:1f:4b:02:8e:9d:d1:7b:e6:db:33:
08:75:37:e4:53:f9:e7:96:04:cc:6a:3a:5b:b5:a3:
06:b3:d8:81:de:6d:86:07:c7:86:9d:0f:3e:27:54:
3d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:08:60:BA:7D:BF:CA:CA:7C:C8:20:B9:17:4F:66:66:B7:25:BD:90
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/Wwhgun2_ysp8yCC5F09mZrclvZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.220.39.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:a2:1b:a1:a3:8b:09:a0:90:6c:29:71:e2:54:09:2e:a3:72:
c6:8e:bd:9f:37:4c:b9:3a:c2:a3:ef:e2:83:cb:6a:c5:b0:69:
1e:9a:a2:29:9a:5a:9c:eb:03:90:ca:03:9b:46:a8:66:37:67:
61:34:73:49:38:0a:74:1f:b8:7d:25:36:f3:db:d6:f0:93:e2:
71:3f:9a:ec:05:b2:67:5d:b9:38:79:4a:8d:7f:9c:b0:5e:0e:
36:15:00:1c:a9:1a:0c:69:75:8b:97:ec:cc:f9:21:36:fc:22:
a3:22:bb:c5:a4:09:73:73:70:91:73:d4:2c:c1:07:92:42:55:
ac:b3:1e:eb:bd:da:9d:af:32:82:f1:57:96:6c:29:3f:83:4d:
b8:f1:e9:e1:cd:e9:57:f2:41:bc:10:3c:5f:32:00:30:d8:1c:
64:58:91:e6:de:16:a9:ed:37:ce:e7:af:43:45:b7:1a:33:51:
e6:05:fb:7c:3c:93:88:c8:06:71:09:0b:0f:af:b9:3d:24:00:
f6:39:8a:75:37:7e:3e:01:b2:49:d2:41:c7:5e:9a:cb:fb:09:
28:57:5a:de:43:68:f8:c2:1c:9f:bf:30:f3:71:49:d8:b1:a0:
6a:6c:36:58:96:13:83:0d:34:16:2c:35:dd:53:4b:ad:bf:41:
30:21:de:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:05:23 2026 by rpki-client