Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/wi1RA5BI8oNacbRgbyfKdEiybII.roa
File: wi1RA5BI8oNacbRgbyfKdEiybII.roa (raw, json)
Hash identifier: sssybe7+qI8tKgzrVZFsNOeNSc0N+lx3VRgqvv5wBeE=
Subject key identifier: C2:2D:51:03:90:48:F2:83:5A:71:B4:60:6F:27:CA:74:48:B2:6C:82
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019D570913E47D3D951962C526ADEB8098F9
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/wi1RA5BI8oNacbRgbyfKdEiybII.roa
Signing time: Sat 04 Apr 2026 05:48:25 +0000
ROA not before: Sat 04 Apr 2026 05:48:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51722
IP address blocks: 45.136.5.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:57:09:13:e4:7d:3d:95:19:62:c5:26:ad:eb:80:98:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Apr 4 05:48:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c22d51039048f2835a71b4606f27ca7448b26c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:dc:80:89:fc:38:d4:ec:f7:b5:0c:73:b8:b1:
ba:3d:eb:e1:00:83:7f:07:60:f4:61:01:54:d1:96:
c5:ff:85:45:ee:39:5c:57:df:fa:5d:9a:68:59:5c:
a6:0b:df:4c:c3:7a:82:bb:01:f9:d6:bd:64:64:fc:
b5:f0:46:6d:ea:ec:e6:e3:15:3a:e4:c7:c3:b5:e0:
f1:25:0d:dc:ed:5b:06:88:b8:a0:97:3d:6b:bd:f4:
48:07:19:af:6d:fd:41:bf:30:2b:69:9c:07:60:7a:
29:2e:fb:d3:30:d2:d0:46:99:e1:ed:c4:76:21:22:
10:1c:af:a7:cb:4e:6f:43:34:2e:a3:da:0d:fb:38:
0f:d7:0b:84:d3:67:7e:72:77:14:f0:4c:1d:8f:b9:
5a:ac:ef:3f:e2:46:51:e6:41:6e:90:be:54:36:c4:
91:2f:bd:89:91:28:41:78:84:99:16:c0:11:89:71:
0f:b7:bf:45:2a:46:d1:1e:7b:d2:30:61:1d:54:c0:
be:41:98:03:3c:86:8b:de:99:20:0d:cb:db:10:f3:
44:a1:e5:60:04:e4:a3:0b:95:b5:d2:cb:ea:99:46:
41:d4:db:3b:72:db:62:07:be:1a:e7:e0:a5:b3:46:
45:db:57:09:3d:83:04:d7:77:b2:47:2a:9c:41:08:
cb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2D:51:03:90:48:F2:83:5A:71:B4:60:6F:27:CA:74:48:B2:6C:82
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/wi1RA5BI8oNacbRgbyfKdEiybII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.5.0/24
45.141.148.0/24
194.116.236.0/24
Signature Algorithm: sha256WithRSAEncryption
18:4e:a8:1c:44:1e:87:f7:3a:1a:7c:f3:c3:12:f2:5b:cd:ea:
26:9d:f7:5e:e9:12:b5:8d:86:29:35:e8:7e:e8:7a:59:a1:f1:
22:e0:38:aa:50:01:4b:a2:f6:84:3a:87:f3:3e:cd:dd:e2:02:
83:28:82:bd:29:c6:9a:b7:86:90:a1:58:69:0e:0e:8f:88:82:
e5:13:81:64:b2:c0:d6:d4:a9:ec:29:44:e3:a9:a2:45:ae:92:
43:9f:35:82:ba:ab:5b:31:ea:d1:b2:c6:7c:26:85:d5:aa:bb:
bb:27:ee:e9:60:e4:dc:d8:9a:99:29:d6:9c:fa:05:cb:81:80:
76:68:4d:18:07:22:6f:d7:07:82:45:52:d7:8e:a3:26:86:52:
4d:f9:dd:2d:fa:50:31:67:35:98:07:b7:1f:af:47:e6:1d:79:
db:2e:4c:aa:21:fe:09:dc:21:98:6c:3a:81:ef:0c:92:29:94:
59:f1:8e:4e:91:80:e8:6d:0f:35:9e:a8:2a:eb:02:ba:9e:dc:
e6:da:e1:16:fd:25:c5:30:75:0e:2f:9b:f3:2c:dd:57:84:53:
c9:fd:5e:9d:e7:9c:d5:f4:d4:2b:4c:be:dd:8c:76:17:c6:e7:
5c:6f:ad:4b:39:ba:fd:2c:06:ec:f8:af:6b:32:20:35:a1:37:
9b:c6:a5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:14:50 2026 by rpki-client