Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/wz5sgrsnPew4Yrk1IGqaHIHmEJ8.roa
File: wz5sgrsnPew4Yrk1IGqaHIHmEJ8.roa (raw, json)
Hash identifier: AT5QO6DjDMSuGJ0ZKzp70XWkFWgmwRaqQGoc1jU0dyk=
Subject key identifier: C3:3E:6C:82:BB:27:3D:EC:38:62:B9:35:20:6A:9A:1C:81:E6:10:9F
Certificate issuer: /CN=c56d2154ed53b629d872b2a38d9cd041bdb4b128
Certificate serial: 019D9A67B4188871AE1C34C895F56975742E
Authority key identifier: C5:6D:21:54:ED:53:B6:29:D8:72:B2:A3:8D:9C:D0:41:BD:B4:B1:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/wz5sgrsnPew4Yrk1IGqaHIHmEJ8.roa
Signing time: Fri 17 Apr 2026 07:46:20 +0000
ROA not before: Fri 17 Apr 2026 07:46:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48326
IP address blocks: 46.228.208.0/20 maxlen: 20
46.228.208.0/21 maxlen: 21
46.228.216.0/21 maxlen: 21
46.228.221.0/24 maxlen: 27
46.228.223.0/24 maxlen: 27
94.229.32.0/20 maxlen: 20
94.229.32.0/21 maxlen: 21
94.229.40.0/21 maxlen: 21
193.8.84.0/23 maxlen: 23
193.8.84.0/24 maxlen: 24
193.8.85.0/24 maxlen: 24
193.8.92.0/23 maxlen: 23
193.8.92.0/24 maxlen: 24
193.8.93.0/24 maxlen: 24
2a00:b000::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 12:11:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:67:b4:18:88:71:ae:1c:34:c8:95:f5:69:75:74:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c56d2154ed53b629d872b2a38d9cd041bdb4b128
Validity
Not Before: Apr 17 07:46:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c33e6c82bb273dec3862b935206a9a1c81e6109f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:47:d7:ed:84:61:47:99:c8:97:61:ab:98:9a:
15:52:ea:ee:a3:87:23:b9:56:0d:04:75:c3:c4:43:
0f:46:a6:52:63:1c:20:7e:b4:10:a2:d3:b1:86:6a:
a8:71:ea:a8:94:64:54:7a:fb:90:d2:27:6d:f6:28:
7e:1c:73:ef:4f:60:3f:88:cb:27:f8:05:74:cb:66:
df:c5:09:10:88:14:5e:cc:3a:c5:47:9f:c8:21:93:
41:ec:6c:71:5c:a7:69:33:a8:3e:60:56:ed:01:7c:
80:f2:41:e6:fb:8c:1c:02:f8:7a:f7:84:64:be:da:
07:fc:02:37:e6:5a:c5:14:38:70:0a:b0:f7:e4:ac:
eb:2e:2f:6d:19:39:a5:41:41:22:ba:10:f1:86:0c:
23:8c:8f:e9:f5:2a:97:b4:12:9a:dd:d2:db:ed:f5:
ae:9f:de:e6:83:b1:f4:77:bb:6e:db:52:65:52:25:
ac:f9:24:19:88:08:b2:74:b6:81:fb:50:a5:27:05:
9a:39:9f:6c:78:0d:69:a1:38:7f:25:4b:03:63:ca:
4c:ad:0f:8a:2b:56:c5:ee:bf:5f:36:af:dd:53:86:
ad:35:ce:f3:1f:ff:57:7f:eb:2f:7d:e1:ae:9a:62:
42:e1:a8:14:57:b9:d0:79:5b:36:bd:b2:eb:c1:f9:
28:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3E:6C:82:BB:27:3D:EC:38:62:B9:35:20:6A:9A:1C:81:E6:10:9F
X509v3 Authority Key Identifier:
keyid:C5:6D:21:54:ED:53:B6:29:D8:72:B2:A3:8D:9C:D0:41:BD:B4:B1:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/wz5sgrsnPew4Yrk1IGqaHIHmEJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.228.208.0/20
94.229.32.0/20
193.8.84.0/23
193.8.92.0/23
IPv6:
2a00:b000::/32
Signature Algorithm: sha256WithRSAEncryption
5a:35:5a:38:68:9a:34:c7:00:e1:17:af:d0:21:e1:e4:04:d1:
f1:d7:31:a6:9e:86:3d:5c:d1:8a:56:29:cc:e0:15:f5:6a:8a:
19:7c:53:c8:ca:84:6e:1b:4b:f0:61:4d:02:53:91:e7:e2:b3:
c6:be:fd:20:03:a6:91:77:00:a9:51:f3:40:cf:b1:d1:33:cd:
90:76:c5:a0:df:2e:53:b1:76:4f:f7:c0:f5:3e:36:94:69:04:
60:b0:4f:77:49:00:31:15:f0:82:5e:c6:0e:93:13:70:a8:af:
ec:3f:7f:7e:61:d4:07:72:2d:48:5e:c0:92:63:7a:95:85:04:
c9:b5:8a:06:e0:a4:0d:ed:dc:b7:8b:33:5e:0c:11:00:72:ed:
6e:30:e7:8a:f0:fc:d4:e1:42:4f:77:45:af:63:ab:e1:45:20:
29:e7:1e:f4:86:29:51:61:28:23:b6:ea:1d:a6:1d:dd:93:89:
64:d5:c8:d4:8b:7b:02:17:b2:1f:d8:48:68:4a:e3:81:a6:b8:
f0:75:29:f8:6b:af:1f:8a:db:1d:6a:68:7c:c0:86:3e:9b:35:
8a:87:91:53:29:ce:2a:30:71:0f:4c:9f:0d:57:50:a4:b1:5c:
12:fb:67:92:59:be:5f:34:fa:9d:f8:b8:74:d8:c6:52:22:8e:
8f:8e:c5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 15:34:32 2026 by rpki-client