Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/kWlk3w0dN2KpYIrrv87aaZ0vPSQ.roa
File: kWlk3w0dN2KpYIrrv87aaZ0vPSQ.roa (raw, json)
Hash identifier: 20/xm08kASZgABKR47mCBPYmafSiuXBV+p4gqeriUSw=
Subject key identifier: 91:69:64:DF:0D:1D:37:62:A9:60:8A:EB:BF:CE:DA:69:9D:2F:3D:24
Certificate issuer: /CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921
Certificate serial: 01A0852DD1A273E7B1BA7444F737A8D4B020
Authority key identifier: 87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/kWlk3w0dN2KpYIrrv87aaZ0vPSQ.roa
Signing time: Wed 09 Sep 2026 07:59:27 +0000
ROA not before: Wed 09 Sep 2026 07:59:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60781
IP address blocks: 45.159.204.0/22 maxlen: 24
45.159.204.0/24 maxlen: 24
45.159.205.0/24 maxlen: 24
45.159.206.0/24 maxlen: 24
45.159.207.0/24 maxlen: 24
2a09:db40::/29 maxlen: 48
2a09:db40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:85:2d:d1:a2:73:e7:b1:ba:74:44:f7:37:a8:d4:b0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921
Validity
Not Before: Sep 9 07:59:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=916964df0d1d3762a9608aebbfceda699d2f3d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2f:71:fe:d0:2c:36:1f:56:fd:21:be:30:bd:
d7:13:3a:b0:f1:42:04:08:7b:9c:65:94:9c:82:bf:
e7:af:2f:c6:a6:95:d2:e8:bd:3a:7e:09:82:f8:39:
4a:71:31:7b:6d:1c:54:39:4c:f9:78:e6:ab:32:13:
5a:5f:98:2b:d7:e4:e8:e0:d4:ba:c7:d8:f7:5d:02:
62:52:07:d5:2c:2e:91:b1:b2:dc:21:0c:ea:92:60:
cb:62:4f:d3:80:7e:d4:b6:bd:c5:79:64:a2:41:50:
a2:d1:72:cb:83:c5:c7:1c:54:27:c1:47:d2:d9:22:
8d:f0:bb:95:3c:1d:a6:22:a8:19:da:11:31:e6:ff:
7e:df:ad:db:cf:8e:3d:64:de:c0:03:74:d9:df:8d:
b2:a4:c9:b3:47:27:8b:b0:c2:28:21:54:4c:be:c2:
93:30:57:9b:13:10:53:af:b0:c4:5f:da:05:b8:b1:
b2:46:44:4e:9a:cb:87:ee:59:53:98:a1:9a:48:b2:
5d:0b:76:c5:1e:98:29:3b:da:57:ea:23:f0:9e:31:
0b:a4:ed:f1:65:fe:21:c1:07:c4:c9:3a:47:20:8c:
c2:77:56:54:fc:f7:7b:85:c2:19:9a:11:b7:69:bb:
ef:86:82:24:36:d5:f4:1f:31:d8:cc:aa:42:78:f5:
d8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:69:64:DF:0D:1D:37:62:A9:60:8A:EB:BF:CE:DA:69:9D:2F:3D:24
X509v3 Authority Key Identifier:
keyid:87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/kWlk3w0dN2KpYIrrv87aaZ0vPSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.204.0/22
IPv6:
2a09:db40::/29
Signature Algorithm: sha256WithRSAEncryption
81:4f:91:17:66:23:a4:5b:7a:d9:1d:2a:c7:49:d8:f3:e6:3e:
01:06:5b:18:c7:ff:8d:82:cb:e6:e2:7a:9e:ca:c3:8d:b5:01:
8f:34:95:28:37:33:02:b4:6a:cd:63:2f:98:7a:44:5b:4c:d6:
f3:ef:9c:19:77:6b:f9:f0:1b:b9:46:a9:d5:d1:f0:d5:67:31:
3f:b2:5f:7e:8d:a8:b6:36:ac:7e:89:b1:d1:b2:fb:1e:4b:83:
fb:b8:45:0c:52:6c:79:80:cd:39:d5:fb:90:bc:42:c6:27:f3:
6a:ab:7d:35:8a:24:64:67:88:af:15:e7:10:ae:08:31:51:ea:
48:05:b0:a5:77:a6:22:56:e7:08:95:3d:f8:3a:40:27:0d:9f:
47:14:da:16:43:d3:e5:e9:be:c9:a0:a8:7b:03:0c:a2:52:be:
e3:be:ea:5d:f4:09:2a:a4:cb:a2:86:35:2d:3d:f4:77:1f:d7:
ca:49:e1:92:dd:c6:67:61:8e:19:e7:5a:e0:05:65:b7:2a:11:
a8:74:94:4a:68:d7:94:fa:7a:ac:fb:07:36:59:12:12:4e:09:
8c:c9:09:39:44:d6:f7:49:a8:d9:da:36:e5:4b:65:78:78:db:
c4:c1:6c:1a:ff:7d:c4:a4:40:3d:65:3f:46:8e:2c:08:ce:c7:
88:89:c8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:53:01 2026 by rpki-client