Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WxcWtOzgYZvsoWneMUiZ4RBC73E.roa
File: WxcWtOzgYZvsoWneMUiZ4RBC73E.roa (raw, json)
Hash identifier: ldPHK4DJyg1XTxi449MZakFBBnK86nJDHo60qR7WKGk=
Subject key identifier: 5B:17:16:B4:EC:E0:61:9B:EC:A1:69:DE:31:48:99:E1:10:42:EF:71
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019D696E7BE119E574E21505263298FFED5B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WxcWtOzgYZvsoWneMUiZ4RBC73E.roa
Signing time: Tue 07 Apr 2026 19:32:21 +0000
ROA not before: Tue 07 Apr 2026 19:32:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 45.12.255.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
87.121.58.0/24 maxlen: 24
94.156.79.0/24 maxlen: 24
141.98.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Apr 2026 13:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:69:6e:7b:e1:19:e5:74:e2:15:05:26:32:98:ff:ed:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 7 19:32:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b1716b4ece0619beca169de314899e11042ef71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6d:c5:a4:f8:d5:82:1e:bd:3a:47:66:20:27:
de:f6:3c:f8:de:4b:44:a8:a2:27:f4:86:f2:1e:ba:
1d:b1:cc:b5:8f:c4:ff:af:2f:c7:95:8a:c1:ec:34:
6b:75:05:5d:8e:70:99:70:56:cf:a9:3c:c2:87:de:
6a:88:7b:4a:64:f8:35:4a:df:ce:e1:82:08:9b:01:
d8:f8:8e:c5:2d:9b:66:bc:8f:04:cb:6d:43:23:d4:
8c:34:37:66:27:3b:6e:f5:ac:09:36:4b:a7:75:c8:
98:67:1d:0c:10:da:5f:52:c9:ed:8d:c6:a9:5e:c3:
36:73:f4:f0:81:f7:ba:da:27:39:59:0b:4d:27:7f:
04:c8:bc:8e:59:7d:1f:08:b6:73:38:c6:79:27:f9:
68:ac:b0:d4:29:d3:5a:27:1d:cd:38:df:b2:c9:b4:
2b:4d:33:4c:94:2e:d6:61:70:88:48:e6:c8:12:35:
70:62:f5:44:cd:3f:71:f1:01:14:6d:8e:9e:ec:a5:
d5:a8:c7:ff:50:73:6d:4e:b0:4a:8e:00:41:7c:f9:
97:cc:b4:84:7a:a8:0d:1c:32:71:9a:a6:c5:f9:e8:
61:60:3c:67:df:36:a9:a0:e3:6b:74:f1:52:ca:39:
53:36:db:3e:ed:cc:ad:db:b9:43:bb:ee:49:44:f0:
26:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:17:16:B4:EC:E0:61:9B:EC:A1:69:DE:31:48:99:E1:10:42:EF:71
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WxcWtOzgYZvsoWneMUiZ4RBC73E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.255.0/24
79.110.50.0/24
87.121.58.0/24
94.156.79.0/24
141.98.4.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:de:2c:08:f8:49:99:4b:1d:b4:89:d2:54:12:91:8f:e5:e2:
62:57:f4:e7:a5:ea:0e:8a:cc:8a:2e:b2:d7:b4:42:c3:28:57:
bc:54:70:91:46:d8:56:db:e8:97:6a:ab:60:11:bc:1f:90:c6:
55:29:4c:b2:ba:dd:db:67:95:fe:16:df:44:b6:3c:3f:ab:c4:
22:a2:f1:0a:89:0e:b5:b5:e1:45:ba:9e:61:5b:91:73:f4:97:
18:35:5b:71:86:fb:1d:32:c9:25:af:a8:84:2b:25:78:0c:71:
d0:9f:31:b5:b8:82:2b:e0:b7:13:83:0d:fe:30:3c:14:f5:03:
16:25:03:ba:26:cb:48:3e:20:70:d5:4a:a2:a4:64:ee:44:43:
18:b4:b7:19:2e:ab:4f:f1:50:0d:25:94:f0:de:df:46:02:75:
92:dc:c7:38:bf:7e:60:92:0e:55:78:1c:3d:fc:ee:bb:75:b2:
41:67:b8:b2:21:be:29:00:46:10:37:e6:61:21:9e:70:de:2a:
7f:84:9b:33:e3:d8:4b:ff:5f:2d:19:ea:60:17:be:ff:fc:33:
6d:d7:57:a1:44:4d:63:26:c5:98:a6:3d:c6:06:a5:cb:1a:a2:
a8:9c:8a:ee:cd:7c:f5:47:00:0e:50:4c:7c:ad:68:8b:fc:81:
39:fe:e5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 23:14:22 2026 by rpki-client