Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/Wtkj5FjzmplhYu0dBPlnsQIK2eo.roa
File: Wtkj5FjzmplhYu0dBPlnsQIK2eo.roa (raw, json)
Hash identifier: dN3m9hHqQp0SgwK7FQLNhJuAgtouRuSgIV93Z0NvIJs=
Subject key identifier: 5A:D9:23:E4:58:F3:9A:99:61:62:ED:1D:04:F9:67:B1:02:0A:D9:EA
Certificate issuer: /CN=123ad9e6ce2651d95ad18656ecbb93536189faaf
Certificate serial: 01A09F46E0011DB97C320CBBE4882C3F5BBA
Authority key identifier: 12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/Wtkj5FjzmplhYu0dBPlnsQIK2eo.roa
Signing time: Mon 14 Sep 2026 09:36:57 +0000
ROA not before: Mon 14 Sep 2026 09:36:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64441
IP address blocks: 86.106.124.0/22 maxlen: 22
86.106.128.0/24 maxlen: 24
89.32.206.0/24 maxlen: 24
89.39.66.0/24 maxlen: 24
89.44.136.0/24 maxlen: 24
93.113.134.0/23 maxlen: 23
93.113.172.0/23 maxlen: 23
93.113.248.0/23 maxlen: 23
93.115.54.0/23 maxlen: 23
93.115.208.0/23 maxlen: 23
94.176.162.0/24 maxlen: 24
188.208.134.0/24 maxlen: 24
188.241.18.0/24 maxlen: 24
188.241.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:46:e0:01:1d:b9:7c:32:0c:bb:e4:88:2c:3f:5b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123ad9e6ce2651d95ad18656ecbb93536189faaf
Validity
Not Before: Sep 14 09:36:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ad923e458f39a996162ed1d04f967b1020ad9ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7a:45:1c:6d:d9:e0:5f:be:ec:5f:20:46:e8:
7c:ab:ce:ca:dc:98:bb:dd:8b:23:4f:8c:4d:8a:45:
17:72:6a:0f:02:73:12:98:17:13:8c:71:f3:ee:87:
81:f4:ca:15:93:56:2b:e9:bd:79:eb:7b:76:e6:eb:
1f:c7:a1:47:69:1c:1f:12:c4:5d:8a:29:14:06:1e:
8b:6a:41:5a:c1:4b:1e:10:1d:7e:2c:00:68:8d:50:
e3:86:55:8e:32:84:26:d5:6c:95:02:8f:fb:12:45:
d3:cd:fb:7f:2f:e7:fd:15:91:d0:95:c6:b1:04:e2:
25:6b:32:b5:d9:55:99:21:cc:e2:c2:66:c4:f6:22:
a6:1a:3f:c9:8c:b4:54:2b:71:8d:1c:ef:92:a7:b0:
fd:c9:71:98:db:ba:b0:c7:cf:44:1f:7d:e3:3e:a1:
eb:d7:d1:27:9a:50:1b:b7:d5:55:c5:8d:a1:eb:2f:
bb:4d:6e:ac:90:d4:ee:0f:b2:aa:76:d2:8d:88:83:
36:ff:43:4a:d3:c6:1a:48:49:38:3d:02:27:df:99:
ab:3a:09:73:63:13:e7:8c:ab:2a:ab:7e:68:a9:4c:
af:c8:92:b1:13:a4:b3:fc:40:45:39:ad:26:59:23:
31:26:72:0c:68:55:1b:51:a6:ff:bc:a9:1a:62:cc:
c4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D9:23:E4:58:F3:9A:99:61:62:ED:1D:04:F9:67:B1:02:0A:D9:EA
X509v3 Authority Key Identifier:
keyid:12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/Wtkj5FjzmplhYu0dBPlnsQIK2eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.124.0-86.106.128.255
89.32.206.0/24
89.39.66.0/24
89.44.136.0/24
93.113.134.0/23
93.113.172.0/23
93.113.248.0/23
93.115.54.0/23
93.115.208.0/23
94.176.162.0/24
188.208.134.0/24
188.241.18.0/24
188.241.85.0/24
Signature Algorithm: sha256WithRSAEncryption
93:17:5a:b9:2f:5d:81:91:27:23:32:86:63:12:f7:b7:4e:16:
d4:0a:94:7a:6f:ee:2f:65:e4:6a:ac:96:f6:e0:1e:9d:38:eb:
24:7f:9f:32:37:58:c8:4e:dd:da:c5:95:c6:37:42:e0:64:a5:
65:e7:83:06:47:b2:90:c8:54:3f:23:54:c5:21:ed:31:01:30:
3c:15:81:53:c6:55:9b:05:04:c8:08:19:28:11:6a:ac:47:60:
6b:b5:97:27:e0:9f:a1:3d:5f:94:2c:71:2d:4e:ad:89:56:37:
10:2c:b4:1b:0c:33:5a:90:90:25:c7:76:26:8a:8b:c6:71:d7:
f4:f5:f0:dd:87:b8:03:c9:78:a9:cc:61:50:ae:79:c1:9f:b6:
e5:a5:94:7e:ef:21:9a:84:6f:63:b2:44:2d:1c:d7:ad:85:e4:
77:f9:9e:0c:b0:2c:a9:eb:9a:6c:9d:26:b8:73:62:cc:9c:81:
be:70:cd:e1:4f:01:65:67:a8:96:cf:eb:59:0b:7a:00:23:99:
5e:6c:c0:30:7c:c8:56:11:46:55:b0:0a:8a:bf:43:19:44:87:
ff:20:14:75:bf:a6:ac:1e:65:6d:06:e0:4b:0d:fe:7f:43:9a:
1a:a5:96:e3:2f:7f:71:d7:0c:96:c0:99:c9:7a:e9:48:39:f4:
80:6f:b8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:36:31 2026 by rpki-client