Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/wTLPGuLOHqPnHyV1-DWkjRm-ga4.roa
File: wTLPGuLOHqPnHyV1-DWkjRm-ga4.roa (raw, json)
Hash identifier: 10mhEa57RDwxHQMBxEEUjA/shxuHL7rFX2NPhDQWKYM=
Subject key identifier: C1:32:CF:1A:E2:CE:1E:A3:E7:1F:25:75:F8:35:A4:8D:19:BE:81:AE
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01A117CE1E2D8747BB9964D0AFB2739F7DE4
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/wTLPGuLOHqPnHyV1-DWkjRm-ga4.roa
Signing time: Wed 07 Oct 2026 19:19:06 +0000
ROA not before: Wed 07 Oct 2026 19:19:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 80.96.16.0/23 maxlen: 23
81.180.37.0/24 maxlen: 24
85.121.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:ce:1e:2d:87:47:bb:99:64:d0:af:b2:73:9f:7d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Oct 7 19:19:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c132cf1ae2ce1ea3e71f2575f835a48d19be81ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:56:41:1d:f1:43:c3:b2:81:0e:00:b8:06:02:
2e:15:fe:fe:6a:4d:5c:10:42:4d:65:56:c0:1e:a6:
23:97:1e:79:cc:ed:69:c8:d3:5b:bb:45:89:f1:e5:
8b:e9:c3:78:f6:be:0a:6a:55:81:a3:61:fb:23:3c:
3c:fd:e7:db:66:27:82:b1:b9:05:63:fe:48:dd:75:
00:92:28:7c:00:32:b3:60:58:ee:06:16:ab:d2:2b:
8a:a8:0c:19:de:a0:00:cb:02:83:7a:3a:3c:bf:5f:
d1:97:d1:78:96:3f:22:a3:90:08:ff:64:c8:3d:f9:
ca:a7:97:c0:46:d3:e1:e4:73:a2:ff:4d:db:bb:7b:
77:97:97:5a:95:0a:94:4c:47:9d:06:4d:eb:85:8a:
d1:db:6b:a8:f3:1c:4d:47:8c:50:8f:a1:c9:d9:0f:
e1:60:fd:8c:79:46:96:a5:ec:07:2b:73:ca:90:73:
00:a1:6b:93:e2:94:bb:8b:d7:e6:39:b8:52:55:ba:
a0:a3:da:aa:b1:40:02:63:d9:90:4c:6d:1b:07:0a:
fb:3e:f9:aa:95:19:91:2b:a0:2c:1f:7b:2d:1a:ef:
00:8c:c7:46:6b:70:f1:2d:2e:22:1c:c9:a2:7d:69:
6d:1c:d0:c6:1b:83:cc:d4:70:13:66:43:e6:03:fd:
00:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:32:CF:1A:E2:CE:1E:A3:E7:1F:25:75:F8:35:A4:8D:19:BE:81:AE
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/wTLPGuLOHqPnHyV1-DWkjRm-ga4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.16.0/23
81.180.37.0/24
85.121.220.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:95:ad:1c:f7:e3:9c:63:22:c9:e5:00:e2:02:7e:82:60:35:
a7:18:60:94:f8:7a:f6:c5:3a:f1:e7:8f:d2:3e:a3:b9:32:9d:
ae:dd:b2:a2:29:f6:01:e2:06:62:c0:2e:0b:c8:8f:a3:13:cb:
41:da:d2:fd:1d:ab:fb:0d:c9:da:10:5b:34:99:19:4b:f9:68:
c9:d1:e9:59:dc:28:7f:01:05:9a:05:97:1b:c7:d2:61:36:ec:
ea:2f:0b:04:35:07:24:8c:69:d7:63:b6:04:a4:66:84:73:9c:
02:9b:39:c7:57:e9:89:d4:98:ca:a1:ec:4e:e2:72:af:01:b7:
73:1d:56:e3:13:26:86:c2:7e:3e:ef:7e:f9:ce:e6:b9:92:55:
57:29:fb:d0:ea:09:86:4e:e5:50:57:8a:ac:1c:54:2f:8e:da:
87:32:e1:57:73:31:5c:80:6a:86:5f:c1:17:13:91:18:b5:e5:
31:df:dd:0a:92:96:83:da:d3:b7:d3:9d:f2:b1:a0:6d:ad:4f:
9d:ac:2d:02:88:30:e7:15:aa:3d:f5:28:c2:61:b9:ba:4a:ac:
7a:96:c5:82:35:d9:1b:51:f2:f8:3c:e3:2c:bb:e2:cf:37:29:
1f:f6:42:dd:3d:16:c0:c8:d6:80:d7:fe:a4:58:63:47:40:f4:
67:66:b3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:30:29 2026 by rpki-client