Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/173981-ff7e-4c8f-b1f2-e244f6fe0bec/1/wkLJSDmDMDKpteAy-W3O93S8Mtc.roa
File: wkLJSDmDMDKpteAy-W3O93S8Mtc.roa (raw, json)
Hash identifier: StgbaApByBdbIDSMfFn3q8jDBXsu36tf1MF2LBNIMPc=
Subject key identifier: C2:42:C9:48:39:83:30:32:A9:B5:E0:32:F9:6D:CE:F7:74:BC:32:D7
Certificate issuer: /CN=45589f3aa0f6c2154440076b4651e0940b24d3b3
Certificate serial: 01A18CB80F94EBA76A14A52A7D86EA88DE2F
Authority key identifier: 45:58:9F:3A:A0:F6:C2:15:44:40:07:6B:46:51:E0:94:0B:24:D3:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RVifOqD2whVEQAdrRlHglAsk07M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/173981-ff7e-4c8f-b1f2-e244f6fe0bec/1/wkLJSDmDMDKpteAy-W3O93S8Mtc.roa
Signing time: Fri 30 Oct 2026 12:10:35 +0000
ROA not before: Fri 30 Oct 2026 12:10:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41665
IP address blocks: 66.111.96.0/20 maxlen: 24
66.111.110.0/23 maxlen: 24
2a01:9c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/173981-ff7e-4c8f-b1f2-e244f6fe0bec/1/RVifOqD2whVEQAdrRlHglAsk07M.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/173981-ff7e-4c8f-b1f2-e244f6fe0bec/1/RVifOqD2whVEQAdrRlHglAsk07M.mft
rsync://rpki.ripe.net/repository/DEFAULT/RVifOqD2whVEQAdrRlHglAsk07M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:b8:0f:94:eb:a7:6a:14:a5:2a:7d:86:ea:88:de:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45589f3aa0f6c2154440076b4651e0940b24d3b3
Validity
Not Before: Oct 30 12:10:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c242c94839833032a9b5e032f96dcef774bc32d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:08:2c:72:44:63:b7:7e:11:06:c7:83:37:7d:
30:bd:8f:3a:93:a2:3b:f0:bb:e2:77:fa:06:53:96:
0e:c0:68:73:58:cc:e4:6d:f3:63:6b:88:d4:3e:36:
ac:c0:13:f7:43:e2:b0:ba:72:64:d3:07:44:22:18:
f8:ca:18:85:74:6b:0e:4d:39:68:a3:11:d6:0d:4a:
7b:89:32:99:0f:1a:5e:a4:9a:45:5a:f4:14:d2:c4:
a0:f0:5f:15:80:19:d4:29:83:75:25:9a:9d:98:02:
37:99:a7:b5:b0:04:51:fc:bf:c9:7c:28:d9:f6:96:
99:d7:47:d4:a5:ad:61:fc:66:f7:03:f7:81:f0:a8:
26:ce:54:2d:c3:10:71:16:06:1b:67:f7:c6:d8:20:
a3:ba:a3:af:fc:9d:85:10:47:ee:93:7e:38:d5:c4:
71:d2:65:43:ea:50:c0:93:83:75:0a:65:df:14:57:
89:c9:0e:bf:eb:94:92:f4:91:41:e0:ec:de:fd:3d:
a8:f5:0a:b6:80:07:e2:45:48:47:df:ca:25:5a:42:
98:8b:19:8f:27:e0:0d:50:00:45:c4:59:29:ac:e5:
6c:7d:30:ef:36:c1:3f:a5:f9:c5:3c:01:24:fe:c1:
bd:8d:69:0f:ee:5c:0a:d8:a8:56:c2:94:1a:76:79:
63:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:42:C9:48:39:83:30:32:A9:B5:E0:32:F9:6D:CE:F7:74:BC:32:D7
X509v3 Authority Key Identifier:
keyid:45:58:9F:3A:A0:F6:C2:15:44:40:07:6B:46:51:E0:94:0B:24:D3:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RVifOqD2whVEQAdrRlHglAsk07M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/173981-ff7e-4c8f-b1f2-e244f6fe0bec/1/wkLJSDmDMDKpteAy-W3O93S8Mtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/173981-ff7e-4c8f-b1f2-e244f6fe0bec/1/RVifOqD2whVEQAdrRlHglAsk07M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.111.96.0/20
IPv6:
2a01:9c0::/29
Signature Algorithm: sha256WithRSAEncryption
7e:8a:79:83:71:31:e6:ac:e7:e1:a6:2d:ad:b7:ac:4f:36:66:
49:65:69:fe:3a:3e:5b:3d:27:93:b6:b7:5b:12:dc:f4:29:6c:
88:0b:60:d9:18:c9:a8:ce:7c:19:2e:f3:cb:35:79:14:11:97:
99:0f:9f:80:02:bf:f8:66:37:e5:20:82:8a:43:46:c8:ca:2c:
4c:9f:9e:54:35:3a:57:85:8e:54:18:4d:52:f2:bf:df:cc:c1:
9c:2e:8b:99:a5:49:91:14:e4:79:ca:6f:ae:b8:b9:a3:13:9f:
10:7a:e7:f2:39:75:67:b8:49:52:cd:90:5b:09:81:da:a0:6d:
77:ec:18:fb:b6:da:da:b5:ce:d0:26:27:62:0f:35:d4:4d:ec:
fb:5b:57:8a:1f:4e:73:e1:68:65:c8:29:4e:f4:15:b6:2b:19:
ba:5c:f0:dc:a5:6a:d5:d3:d7:a1:40:c4:fa:f5:17:7d:7e:0f:
02:9c:1b:2d:fc:9a:74:66:b0:bf:6e:5a:6e:cc:c0:1f:1d:8f:
45:23:31:99:77:09:c9:c8:4a:65:d4:96:39:63:85:2f:14:a5:
b1:e9:47:6f:f6:68:a8:82:b2:76:da:79:92:4b:a8:81:2d:c6:
37:03:12:4d:dc:71:6c:d4:56:86:33:f3:a3:e7:ae:41:fb:22:
c7:8e:6f:ca
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAaGMuA+U66dqFKUqfYbqiN4vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1NTg5ZjNhYTBmNmMyMTU0NDQwMDc2YjQ2NTFlMDk0MGIy
NGQzYjMwHhcNMjYxMDMwMTIxMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjQyYzk0ODM5ODMzMDMyYTliNWUwMzJmOTZkY2VmNzc0YmMzMmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QgsckRjt34RBseDN30wvY86k6I7
8Lvid/oGU5YOwGhzWMzkbfNja4jUPjaswBP3Q+KwunJk0wdEIhj4yhiFdGsOTTlo
oxHWDUp7iTKZDxpepJpFWvQU0sSg8F8VgBnUKYN1JZqdmAI3mae1sARR/L/JfCjZ
9paZ10fUpa1h/Gb3A/eB8KgmzlQtwxBxFgYbZ/fG2CCjuqOv/J2FEEfuk3441cRx
0mVD6lDAk4N1CmXfFFeJyQ6/65SS9JFB4Oze/T2o9Qq2gAfiRUhH38olWkKYixmP
J+ANUABFxFkprOVsfTDvNsE/pfnFPAEk/sG9jWkP7lwK2KhWwpQadnljZwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFMJCyUg5gzAyqbXgMvltzvd0vDLXMB8GA1UdIwQY
MBaAFEVYnzqg9sIVREAHa0ZR4JQLJNOzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlZpZk9xRDJ3aFZFUUFkclJsSGdsQXNrMDdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xNzM5ODEtZmY3ZS00YzhmLWIxZjIt
ZTI0NGY2ZmUwYmVjLzEvd2tMSlNEbURNREtwdGVBeS1XM085M1M4TXRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xNzM5ODEtZmY3ZS00YzhmLWIxZjItZTI0NGY2ZmUwYmVj
LzEvUlZpZk9xRDJ3aFZFUUFkclJsSGdsQXNrMDdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEQm9gMA0E
AgACMAcDBQMqAQnAMA0GCSqGSIb3DQEBCwUAA4IBAQB+inmDcTHmrOfhpi2tt6xP
NmZJZWn+Oj5bPSeTtrdbEtz0KWyIC2DZGMmoznwZLvPLNXkUEZeZD5+AAr/4Zjfl
IIKKQ0bIyixMn55UNTpXhY5UGE1S8r/fzMGcLouZpUmRFOR5ym+uuLmjE58Qeufy
OXVnuElSzZBbCYHaoG137Bj7ttratc7QJidiDzXUTez7W1eKH05z4WhlyClO9BW2
Kxm6XPDcpWrV09ehQMT69Rd9fg8CnBst/Jp0ZrC/blpuzMAfHY9FIzGZdwnJyEpl
1JY5Y4UvFKWx6Udv9miogrJ22nmSS6iBLcY3AxJN3HFs1FaGM/Oj565B+yLHjm/K
-----END CERTIFICATE-----
Generated at Thu Nov 5 15:29:56 2026 by rpki-client