Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/WPeo4iZP3f_M1UTkghzJJKTJw4g.roa
File: WPeo4iZP3f_M1UTkghzJJKTJw4g.roa (raw, json)
Hash identifier: 10/E5k72hvbLqq6ex+2Ta5Jl5LtGRBsTBJH00y0LR5c=
Subject key identifier: 58:F7:A8:E2:26:4F:DD:FF:CC:D5:44:E4:82:1C:C9:24:A4:C9:C3:88
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019D722FADC59A83F930F11B7157E1885B09
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/WPeo4iZP3f_M1UTkghzJJKTJw4g.roa
Signing time: Thu 09 Apr 2026 12:20:20 +0000
ROA not before: Thu 09 Apr 2026 12:20:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9123
IP address blocks: 5.42.220.0/24 maxlen: 24
45.91.238.0/24 maxlen: 24
80.68.156.0/24 maxlen: 24
185.211.170.0/24 maxlen: 24
186.246.0.0/24 maxlen: 24
186.246.1.0/24 maxlen: 24
186.246.2.0/24 maxlen: 24
186.246.3.0/24 maxlen: 24
186.246.4.0/24 maxlen: 24
186.246.5.0/24 maxlen: 24
186.246.6.0/24 maxlen: 24
186.246.7.0/24 maxlen: 24
186.246.8.0/24 maxlen: 24
186.246.9.0/24 maxlen: 24
186.246.10.0/24 maxlen: 24
186.246.11.0/24 maxlen: 24
186.246.12.0/24 maxlen: 24
186.246.13.0/24 maxlen: 24
186.246.14.0/24 maxlen: 24
186.246.15.0/24 maxlen: 24
195.206.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:2f:ad:c5:9a:83:f9:30:f1:1b:71:57:e1:88:5b:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 9 12:20:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58f7a8e2264fddffccd544e4821cc924a4c9c388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:44:c3:ff:8d:6a:ea:20:75:3c:a9:c2:7f:c8:
c7:81:1f:cd:eb:70:77:e6:3b:a5:35:f3:d3:ca:34:
bb:9d:f8:24:82:c3:38:ac:7a:35:0f:c5:1c:8e:f2:
34:bd:f0:25:cf:9c:a8:88:40:40:24:6a:4f:54:77:
6f:d9:df:c6:03:1a:4b:3d:e0:7b:79:d5:da:0c:98:
ed:50:4c:f4:6a:16:40:5a:c1:ae:29:4e:17:29:5c:
2c:4e:5a:28:96:8f:7a:04:e4:44:ad:a0:33:84:6d:
41:c1:5f:a6:14:19:ee:d8:b8:b6:40:15:11:39:fd:
79:23:c7:1f:99:51:1c:4e:c6:c7:cc:5c:08:b0:b2:
f8:cb:4b:2f:e6:8b:62:5c:07:39:46:ed:71:00:2e:
d3:1f:bd:5a:20:9c:ea:ec:7e:ff:9d:dd:49:00:45:
ed:4a:ea:dc:bc:a4:f3:e1:88:23:29:ad:43:31:e5:
1c:57:2a:fd:cb:f2:fa:46:07:d8:c1:51:67:23:cd:
18:b6:5f:01:d1:4a:cd:bd:d8:69:5e:d7:f0:f5:c2:
d5:94:ce:08:bd:44:a7:10:be:90:4c:bc:0f:08:4c:
f9:12:9a:90:2c:00:27:8b:42:a1:61:76:18:66:4a:
b5:ba:0e:70:14:cf:63:28:e4:ad:ab:a2:04:66:d3:
a1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F7:A8:E2:26:4F:DD:FF:CC:D5:44:E4:82:1C:C9:24:A4:C9:C3:88
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/WPeo4iZP3f_M1UTkghzJJKTJw4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.220.0/24
45.91.238.0/24
80.68.156.0/24
185.211.170.0/24
186.246.0.0/20
195.206.243.0/24
Signature Algorithm: sha256WithRSAEncryption
14:ca:41:84:f8:a0:eb:9f:8b:49:c1:60:d2:f4:51:95:d3:d7:
77:cc:09:27:9d:70:c5:b8:33:d8:3a:5a:7e:24:c4:ce:da:49:
a9:3b:5c:63:46:3f:8a:9c:e9:08:74:83:67:30:e6:bc:bb:d2:
49:a2:10:fc:6e:4e:1b:50:b0:f9:47:b0:34:18:e4:ed:61:23:
5d:22:98:fd:a4:40:84:ae:c3:67:20:60:ff:3b:70:1f:7a:fc:
58:a2:8d:a8:3a:12:78:e0:c8:c8:be:7c:61:d6:70:4e:e0:cd:
85:8a:c9:81:b8:de:58:73:62:0e:8a:f1:7c:16:49:01:b7:5b:
8d:7e:e8:1e:08:c4:ff:8b:06:75:e8:59:d7:03:d5:83:f2:b2:
f2:90:6e:bb:ef:dd:32:10:be:70:97:c8:ef:60:f3:6f:f7:a7:
55:90:81:d6:55:f9:04:bd:be:a4:81:92:87:fa:de:41:e9:fd:
73:0f:9d:8b:49:e0:83:9a:67:10:7e:3b:b4:44:31:f3:8f:1d:
a6:14:b8:66:7e:6b:86:f6:58:73:f2:e9:f0:22:bd:c5:53:72:
6b:7d:b5:d9:a1:41:68:e2:eb:93:c0:98:2f:fe:a3:5e:0e:b4:
9f:2f:fe:4b:bf:fc:4b:dd:68:c5:34:93:7e:1c:f2:7c:43:a7:
82:bb:1f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:48:38 2026 by rpki-client