Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/wlK8DH6vvBCSGiPEt6TQ8ln7xrI.roa
File: wlK8DH6vvBCSGiPEt6TQ8ln7xrI.roa (raw, json)
Hash identifier: 95bSqsPZ8Qh5qUbW4eyvVKJiv3x2zL+UElIQsl4lr1A=
Subject key identifier: C2:52:BC:0C:7E:AF:BC:10:92:1A:23:C4:B7:A4:D0:F2:59:FB:C6:B2
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 019F80B9981709B0016474641F44A3BC8106
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/wlK8DH6vvBCSGiPEt6TQ8ln7xrI.roa
Signing time: Mon 20 Jul 2026 18:11:14 +0000
ROA not before: Mon 20 Jul 2026 18:11:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61087
IP address blocks: 45.14.244.0/24 maxlen: 24
45.140.145.0/24 maxlen: 24
45.140.146.0/24 maxlen: 24
45.150.65.0/24 maxlen: 24
138.124.180.0/24 maxlen: 24
138.124.183.0/24 maxlen: 24
138.124.184.0/24 maxlen: 24
194.39.110.0/24 maxlen: 24
2a0e:4000::/32 maxlen: 48
2a0e:4007:fff4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:80:b9:98:17:09:b0:01:64:74:64:1f:44:a3:bc:81:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jul 20 18:11:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c252bc0c7eafbc10921a23c4b7a4d0f259fbc6b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2f:58:c8:67:f5:80:d8:fd:d9:4c:aa:91:d2:
df:17:ac:d1:fd:40:88:28:6d:ae:71:9f:ce:18:b2:
22:47:65:86:48:4b:8e:92:2e:7c:66:0f:c3:03:86:
50:73:ca:d6:25:1b:d8:b2:a7:94:5b:55:0c:21:c5:
44:df:91:61:23:33:8f:4e:93:54:5d:03:34:71:8d:
5d:34:15:e4:8f:1c:d7:37:4a:f2:35:a2:c5:1e:d4:
11:d0:6e:67:b3:52:dc:50:a6:9e:98:07:e9:4a:89:
1f:8a:4a:a7:99:d7:a0:66:50:4a:db:2d:42:62:7e:
95:1b:44:6f:51:1e:ac:56:24:46:67:cc:e5:ed:1a:
15:eb:2f:9e:3f:e6:12:d4:64:67:c2:48:42:5e:09:
1a:1b:40:93:66:ae:45:a3:ce:6d:af:8c:a2:f4:8e:
ed:d4:de:df:94:4f:8a:4d:ca:83:fe:84:cc:fe:c0:
c2:c3:45:97:de:98:5d:eb:8b:ad:d5:f3:b5:d9:cb:
a9:34:fa:e4:dd:f7:c6:23:59:0f:2a:31:0e:82:41:
aa:1c:13:60:eb:6c:57:35:ad:1d:b5:48:fc:03:ea:
f1:84:dc:10:6a:87:fd:46:c4:95:d5:2d:c0:db:d1:
d3:af:74:07:c6:8f:32:2c:15:4b:70:10:36:78:8e:
8a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:52:BC:0C:7E:AF:BC:10:92:1A:23:C4:B7:A4:D0:F2:59:FB:C6:B2
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/wlK8DH6vvBCSGiPEt6TQ8ln7xrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.244.0/24
45.140.145.0-45.140.146.255
45.150.65.0/24
138.124.180.0/24
138.124.183.0-138.124.184.255
194.39.110.0/24
IPv6:
2a0e:4000::/32
2a0e:4007:fff4::/48
Signature Algorithm: sha256WithRSAEncryption
b5:0e:fb:1b:e2:56:28:e7:2a:62:11:74:8a:45:ca:51:39:dd:
fe:64:99:a3:80:21:84:f5:97:50:4e:6c:b7:55:14:2d:7b:a6:
8c:62:97:46:c5:3c:ca:9a:9c:b1:87:24:ac:e5:72:21:3a:93:
c9:54:fa:99:e0:8a:51:4d:2f:76:c2:4b:01:24:5f:f8:4b:ed:
3b:a2:1a:d8:f7:ee:86:17:a4:7b:0c:cb:ee:79:36:b6:15:52:
6f:04:ee:f5:75:f2:c1:f4:fd:19:d8:da:1f:3d:32:37:19:fd:
e2:3c:0b:49:6d:2e:85:45:4b:39:0a:c4:5e:2a:71:39:50:0a:
cb:24:da:3d:7f:e8:5b:90:ab:95:c1:3c:09:28:ab:96:39:7d:
df:3d:36:fc:0e:fd:ac:ed:1e:56:1e:cc:1a:7f:5d:1f:c1:b0:
6f:0a:00:ec:fe:80:b4:c3:1c:f3:46:7c:a4:fb:38:6b:03:15:
30:40:c9:2f:32:d0:d5:95:6e:4f:58:a6:bc:7a:08:5f:94:11:
c3:93:d8:c3:a6:86:d4:91:1a:bb:18:32:c5:22:63:21:fd:d7:
13:d0:06:24:b6:3f:ab:2e:98:a6:fc:19:04:16:ea:39:48:35:
42:b1:75:88:aa:ee:e5:6f:80:90:30:a0:c1:3a:cb:6b:8e:4e:
93:b7:88:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:25:51 2026 by rpki-client