Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/wChspLti7-H96hAD_O_aR2xGlUk.roa
File: wChspLti7-H96hAD_O_aR2xGlUk.roa (raw, json)
Hash identifier: NJPOZCHiP1U9lJxw4IbfYsBGNK3w63ZZutoiHCbcNQA=
Subject key identifier: C0:28:6C:A4:BB:62:EF:E1:FD:EA:10:03:FC:EF:DA:47:6C:46:95:49
Certificate issuer: /CN=08d51cae877df40a5d39412605070841bd102c54
Certificate serial: 019D877BA4ABA150E14CF72595B48FA9827D
Authority key identifier: 08:D5:1C:AE:87:7D:F4:0A:5D:39:41:26:05:07:08:41:BD:10:2C:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/wChspLti7-H96hAD_O_aR2xGlUk.roa
Signing time: Mon 13 Apr 2026 15:35:20 +0000
ROA not before: Mon 13 Apr 2026 15:35:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204104
IP address blocks: 185.27.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:87:7b:a4:ab:a1:50:e1:4c:f7:25:95:b4:8f:a9:82:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d51cae877df40a5d39412605070841bd102c54
Validity
Not Before: Apr 13 15:35:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c0286ca4bb62efe1fdea1003fcefda476c469549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a6:6e:43:de:08:27:45:a5:a8:5a:3b:2d:b9:
dc:f8:29:df:3b:99:65:9d:f9:47:8f:cb:0d:68:af:
bd:9e:94:e3:29:4e:a3:81:0c:6c:78:cd:d8:dc:be:
01:7d:a5:e5:89:bf:39:36:ba:18:d1:ae:bf:75:b8:
ba:4f:52:8d:66:6a:81:7b:65:5e:f4:1a:7e:fc:3d:
9a:a0:d5:3a:2f:b4:e9:a8:ac:ac:9f:38:18:0a:e7:
ff:bf:92:d2:80:5b:98:37:a5:f1:72:d0:b3:9f:48:
2f:f3:97:28:ba:62:21:c1:dd:0d:f4:15:7e:c2:9d:
21:7a:33:7e:a6:2a:0c:a9:d7:d4:97:68:0b:1f:4a:
6b:bf:e9:89:cb:d2:e9:a2:23:83:ca:65:5d:94:2f:
fe:eb:b8:7f:6a:fd:e7:f6:5f:29:26:a7:92:54:c9:
67:40:b2:77:8e:f0:69:21:5d:12:0c:0c:1a:c0:4c:
8b:cc:06:c9:25:33:89:9a:65:f2:ce:6f:58:97:13:
a5:b1:dd:96:87:06:72:0d:bb:06:d5:bd:b9:eb:c3:
c0:ac:bb:fe:ca:43:b4:4d:ae:50:97:6e:62:84:06:
21:50:0a:bd:fc:ed:bf:88:1c:55:de:01:4c:65:6d:
4b:37:5e:1f:14:e1:cc:b7:69:7b:d2:b2:bf:7d:36:
ed:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:28:6C:A4:BB:62:EF:E1:FD:EA:10:03:FC:EF:DA:47:6C:46:95:49
X509v3 Authority Key Identifier:
keyid:08:D5:1C:AE:87:7D:F4:0A:5D:39:41:26:05:07:08:41:BD:10:2C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNUcrod99ApdOUEmBQcIQb0QLFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/wChspLti7-H96hAD_O_aR2xGlUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a6b009-2d0b-48dd-825e-4b4d1ad96c0e/1/CNUcrod99ApdOUEmBQcIQb0QLFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.27.45.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:e8:be:e3:45:0d:d6:5e:20:20:6a:d3:95:1f:9c:36:d3:22:
54:9e:07:d8:ea:ca:5f:ef:38:21:20:4c:c2:1e:2a:3b:6b:24:
d6:26:e3:61:54:a4:fe:96:ef:1e:44:41:a2:f5:ae:bd:1e:c8:
33:92:f8:85:fe:60:fd:7b:51:c1:db:28:e4:be:e9:06:d4:c3:
bc:48:34:e1:8b:da:78:b7:68:54:72:8d:6b:75:41:12:d8:6f:
ce:a7:2b:8f:da:38:39:a7:ff:01:c3:c7:b0:a9:f4:b3:53:1a:
39:17:c4:b4:10:da:c4:ae:ac:83:20:e0:16:c2:7a:04:cd:42:
b2:3f:a4:18:f7:c8:78:57:2a:8f:57:a4:6b:14:46:2e:38:ae:
0a:b7:52:91:17:dd:5e:3f:c1:37:ac:8a:1c:0c:19:e5:49:75:
1a:57:8e:03:af:26:14:c0:fd:72:96:4a:29:09:1c:90:da:b2:
6f:e2:98:60:ae:a7:36:ec:0a:cc:59:8e:94:2f:46:a1:75:69:
29:17:59:b0:f9:7b:2c:3e:5b:5d:07:4e:fe:b3:8e:97:4f:9c:
76:ec:9f:3d:05:5a:fe:ba:76:3e:ef:46:29:4d:24:03:43:22:
83:e2:b0:df:53:54:ba:fe:24:7a:f7:7e:cc:f7:25:40:df:90:
c0:f0:28:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:15:44 2026 by rpki-client