Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/WtbHisRdncnw4HB-C-Q2nOatpCk.roa
File: WtbHisRdncnw4HB-C-Q2nOatpCk.roa (raw, json)
Hash identifier: 3wmWRlMXTcqOjL6bnR/KTtOAF4ruJh0llk95iowxjzE=
Subject key identifier: 5A:D6:C7:8A:C4:5D:9D:C9:F0:E0:70:7E:0B:E4:36:9C:E6:AD:A4:29
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 019CA01E9E7225781DBA0175C968A9A614D0
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/WtbHisRdncnw4HB-C-Q2nOatpCk.roa
Signing time: Fri 27 Feb 2026 17:21:27 +0000
ROA not before: Fri 27 Feb 2026 17:21:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206803
IP address blocks: 212.22.79.0/24 maxlen: 24
212.22.91.0/24 maxlen: 24
2a09:d006::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a0:1e:9e:72:25:78:1d:ba:01:75:c9:68:a9:a6:14:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Feb 27 17:21:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ad6c78ac45d9dc9f0e0707e0be4369ce6ada429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:86:da:ca:3e:f4:89:7a:a7:75:58:f7:93:76:
37:e5:98:e7:6e:09:b2:43:79:fe:1a:a7:9c:0d:99:
e5:39:3e:39:a3:fc:b0:33:dd:b8:91:dd:50:9f:e6:
4f:13:d7:a9:79:37:f0:bf:7b:5d:97:c1:7b:35:50:
76:ca:6e:91:62:60:b0:da:09:f9:63:6c:be:60:a8:
59:d7:d3:91:09:82:32:6b:fa:ef:05:fc:51:bf:32:
bf:81:0f:43:2c:d4:e0:39:71:d9:d5:09:1c:99:87:
bc:4c:ab:65:7c:dc:1e:73:c4:88:c8:06:59:79:f3:
1d:9f:21:70:51:48:9f:15:41:d5:38:2b:ca:4c:db:
43:ae:52:8b:82:ea:7b:d8:62:fc:42:2c:94:bc:f0:
e4:b3:e3:1f:d4:b2:c7:45:45:27:ec:f4:58:51:b1:
aa:6b:49:60:c4:3f:4f:93:09:96:0e:d5:e9:7d:08:
f6:7d:64:52:c8:45:da:17:bc:b5:40:d6:27:72:c6:
98:62:14:2c:48:02:1e:6f:54:c7:05:10:33:da:40:
b4:03:58:ae:8e:b6:c9:3e:97:fe:ee:75:32:cd:99:
f4:aa:df:4d:ff:b4:f6:b3:a0:9d:c8:20:d6:1d:6e:
13:65:11:36:37:36:49:1d:7a:fd:33:04:ce:6c:4f:
63:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D6:C7:8A:C4:5D:9D:C9:F0:E0:70:7E:0B:E4:36:9C:E6:AD:A4:29
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/WtbHisRdncnw4HB-C-Q2nOatpCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.22.79.0/24
212.22.91.0/24
IPv6:
2a09:d006::/48
Signature Algorithm: sha256WithRSAEncryption
38:5e:60:67:76:1e:90:58:d4:57:ff:70:85:70:e0:c0:f0:ae:
bb:1b:1b:64:24:46:b1:e5:b8:d0:ac:97:c7:7e:aa:35:8c:30:
42:89:5d:90:22:b4:47:eb:d8:1f:e3:1a:38:53:ad:27:a5:88:
33:8a:c9:17:bc:f6:5d:31:cc:b1:37:1c:42:2e:b4:80:33:02:
2a:4c:06:b5:93:6e:2e:60:1a:77:0f:23:02:5d:c6:0b:68:c7:
d1:b2:f0:e5:36:97:30:dd:e5:08:6f:1e:91:92:e6:06:70:47:
65:67:29:1a:c6:9f:60:a7:db:d4:8f:d8:17:5b:c6:95:b6:8f:
0d:f7:56:77:31:0c:d2:10:a1:b0:40:24:8b:b7:4b:67:a2:22:
54:b9:59:09:68:94:ce:61:a3:6e:61:26:ef:27:82:34:46:23:
8b:7c:e6:d2:40:e8:17:9b:87:9f:3b:4b:24:d5:98:91:08:3f:
02:7d:97:80:e1:31:ab:f8:24:94:33:7e:55:60:1d:2b:14:98:
f5:3f:bb:fb:3b:ac:fc:d1:59:80:1b:64:ec:0d:8c:de:a9:22:
e2:71:b0:0a:da:1d:ad:f7:b3:26:9d:15:d5:6a:e2:13:b4:0a:
01:5a:06:6c:0e:5e:0b:7f:32:fb:3d:82:04:80:94:fc:7f:d5:
ea:a1:1e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:11:22 2026 by rpki-client