Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/WwlFKSi70cdm8R4QQ6IohhTOe8M.roa
File: WwlFKSi70cdm8R4QQ6IohhTOe8M.roa (raw, json)
Hash identifier: wVwdHqgHuoUEme5UMB/nGp3be/XLSFQ4OjhvIpt1CzA=
Subject key identifier: 5B:09:45:29:28:BB:D1:C7:66:F1:1E:10:43:A2:28:86:14:CE:7B:C3
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 019FA8A949D005300888C786A7369C0EE3E3
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/WwlFKSi70cdm8R4QQ6IohhTOe8M.roa
Signing time: Tue 28 Jul 2026 12:18:14 +0000
ROA not before: Tue 28 Jul 2026 12:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48031
IP address blocks: 45.146.170.0/24 maxlen: 24
45.149.133.0/24 maxlen: 24
45.153.53.0/24 maxlen: 24
45.153.54.0/24 maxlen: 24
193.142.253.0/24 maxlen: 24
194.55.102.0/24 maxlen: 24
194.169.86.0/24 maxlen: 24
195.245.102.0/24 maxlen: 24
195.245.103.0/24 maxlen: 24
2a0e:bcc1::/32 maxlen: 32
2a0e:bcc3::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:a9:49:d0:05:30:08:88:c7:86:a7:36:9c:0e:e3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jul 28 12:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b09452928bbd1c766f11e1043a2288614ce7bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:dd:d5:82:49:c9:9f:ac:0c:11:08:81:a4:66:
82:d0:08:9e:40:4c:7e:92:87:5b:d5:f6:1d:e3:24:
e1:39:40:ec:94:d1:fc:4b:e8:43:b4:45:47:ad:39:
65:5c:69:2b:c1:bf:6b:f0:15:f7:9f:31:6f:ac:f6:
2f:d6:61:37:52:bb:9f:57:68:eb:8b:fc:22:e7:57:
43:90:69:48:8c:cd:68:25:32:6e:98:59:48:4d:b9:
a5:7f:e9:33:12:af:02:e8:06:ae:45:eb:43:8f:0a:
d3:56:27:78:07:e5:9d:8c:40:db:ad:3f:e9:66:a4:
e9:01:da:52:3b:94:86:a6:76:40:98:99:d1:7f:88:
d2:7c:e3:98:53:19:c7:3e:42:c7:dc:98:98:0a:04:
c7:09:42:12:37:03:9a:7a:99:8b:ae:dd:09:80:45:
44:0b:30:40:12:dc:8c:be:32:a4:5a:e5:3d:8d:9e:
b1:7e:06:7d:17:5e:18:8e:93:63:69:57:e1:f3:24:
3d:9c:b3:99:15:5a:c7:05:83:fc:d9:39:b9:c0:84:
b7:6c:7f:9f:b3:34:17:33:9a:b4:a5:77:48:b6:24:
b9:08:82:9d:f3:50:97:f3:b5:86:bc:7a:2a:e7:a4:
17:45:83:82:de:85:65:ca:ec:74:06:72:e1:58:de:
49:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:09:45:29:28:BB:D1:C7:66:F1:1E:10:43:A2:28:86:14:CE:7B:C3
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/WwlFKSi70cdm8R4QQ6IohhTOe8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.170.0/24
45.149.133.0/24
45.153.53.0-45.153.54.255
193.142.253.0/24
194.55.102.0/24
194.169.86.0/24
195.245.102.0/23
IPv6:
2a0e:bcc1::/32
2a0e:bcc3::/32
Signature Algorithm: sha256WithRSAEncryption
a5:59:9e:3d:90:8c:b7:2e:d5:9f:8e:9d:b3:f1:1f:ed:4d:5e:
dc:bf:bb:21:f6:ba:c8:85:f8:d7:ba:bd:37:9a:5f:5b:05:43:
51:71:7f:9d:f5:13:c7:17:8e:75:b0:6f:2c:20:06:c1:f5:46:
f7:9a:ad:28:03:46:2a:6f:81:68:78:65:43:53:9a:62:0a:15:
28:6c:0a:99:9b:af:12:24:81:ee:6f:76:18:e0:e1:59:0d:52:
02:78:cb:ab:cd:14:a1:cf:54:77:06:7e:71:11:54:6a:a1:0d:
f5:9e:af:d0:35:de:49:be:27:90:c2:1e:25:69:6c:12:94:bd:
f0:80:e2:45:0f:e2:7c:8c:22:2a:53:b0:7c:7a:a2:d6:42:a0:
16:a2:9a:f9:3e:c9:6e:0d:69:b3:fe:ef:4b:79:c0:4e:de:a6:
c0:12:11:5b:bf:eb:77:23:d2:ce:84:2b:56:6b:52:af:8e:5f:
f6:81:30:36:a7:96:1f:25:7b:2d:77:8e:84:3f:1a:71:46:51:
02:a9:3a:3e:d4:68:93:53:9a:07:52:ed:b5:2f:84:2a:47:14:
6b:d3:83:4d:8c:d8:70:32:5f:35:ca:aa:6d:70:c0:38:32:cf:
9c:12:ff:47:50:ee:64:e7:0c:49:39:33:c6:fa:ce:cb:14:a2:
ba:87:77:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:37:41 2026 by rpki-client