Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/wGWwo0E6K55d816ADtVpaqGsYoE.roa
File: wGWwo0E6K55d816ADtVpaqGsYoE.roa (raw, json)
Hash identifier: Qv1Am1EocmBUM6XTSjIqfN+fr9y61yBhGrH08ROvpPo=
Subject key identifier: C0:65:B0:A3:41:3A:2B:9E:5D:F3:5E:80:0E:D5:69:6A:A1:AC:62:81
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 019EE5CBA1A56FF41A42895DFBDD9ED02EDE
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/wGWwo0E6K55d816ADtVpaqGsYoE.roa
Signing time: Sat 20 Jun 2026 16:09:48 +0000
ROA not before: Sat 20 Jun 2026 16:09:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206119
IP address blocks: 45.133.37.0/24 maxlen: 24
185.169.181.0/24 maxlen: 24
185.169.182.0/24 maxlen: 24
185.174.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e5:cb:a1:a5:6f:f4:1a:42:89:5d:fb:dd:9e:d0:2e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Jun 20 16:09:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c065b0a3413a2b9e5df35e800ed5696aa1ac6281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5c:b7:f7:fa:62:4f:4a:b9:9f:44:6c:57:00:
51:fd:81:b5:ac:48:e0:8a:55:4a:c0:47:1a:cb:49:
02:66:12:a1:52:99:37:d5:c2:2a:77:4f:ad:f1:f8:
38:62:bc:ba:dc:66:16:76:45:a1:1b:25:26:86:b1:
f5:71:8a:3e:ba:47:45:6e:ee:9e:f8:40:86:87:ff:
92:0e:48:c7:1e:12:60:5d:e8:3a:a9:af:ca:de:b7:
44:a5:a2:ad:3e:1d:67:9f:e0:89:18:34:48:d7:2c:
37:55:af:07:54:db:85:2d:b1:2c:a2:de:89:bf:c7:
5c:36:ae:32:11:79:df:f3:b3:c9:d1:f3:01:5c:f1:
08:f9:ab:e9:36:32:26:4f:1e:8f:81:cd:d9:df:63:
67:a8:95:f2:ef:08:1f:fb:81:a2:c4:fc:fd:4f:0b:
81:65:be:9e:4f:43:08:ad:18:aa:e0:99:85:09:9f:
ba:e7:26:c4:8f:98:99:0e:ca:c3:53:20:9c:2b:1a:
0d:d2:ae:c8:7e:a3:a8:e7:6c:04:f1:04:cb:62:11:
56:04:d2:fb:17:b7:c6:d5:e8:a4:8a:d4:13:2a:a8:
9a:64:ce:60:47:c4:4a:92:ca:e3:ed:da:a5:c9:05:
1c:da:25:28:82:07:28:6f:09:ae:38:e2:2a:e6:c1:
1d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:65:B0:A3:41:3A:2B:9E:5D:F3:5E:80:0E:D5:69:6A:A1:AC:62:81
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/wGWwo0E6K55d816ADtVpaqGsYoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.37.0/24
185.169.181.0-185.169.182.255
185.174.21.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:57:90:88:aa:7b:51:86:3c:ae:97:93:73:9b:65:a7:1f:d8:
f2:f3:41:1d:cf:49:04:5a:91:e7:09:20:d0:9a:b7:98:d2:eb:
05:19:90:56:8e:f8:c4:82:28:cc:31:cb:be:d6:f0:7e:10:24:
18:85:90:a8:12:e5:38:50:d3:fd:99:d6:a4:3f:aa:ce:08:df:
75:40:71:dd:5d:95:68:0a:78:9b:d1:6d:74:4e:bb:2b:69:f0:
f5:83:4d:93:8f:5b:90:4d:f4:7b:3c:d3:0d:c1:1f:c5:3c:ba:
5d:1b:7b:e9:9c:8f:eb:f4:a0:55:56:27:de:a6:52:ff:43:1c:
61:6f:af:98:e6:e7:81:1b:05:10:94:2e:5e:04:a2:28:67:3d:
b1:04:3a:e3:3b:43:5f:a5:70:2e:60:bb:92:6a:2a:33:ff:a5:
5f:19:31:5f:cb:07:4c:78:a9:cb:7c:52:e6:56:af:ea:e5:ec:
3f:05:98:92:da:85:47:e9:09:ac:02:4c:8e:d9:74:cc:3e:fa:
be:98:a3:55:71:a7:46:db:43:97:89:22:7c:13:cd:1a:29:ec:
73:56:08:c7:43:e6:8e:fc:cb:9f:cc:8d:48:64:72:91:ad:bf:
fd:c4:f9:2e:90:a8:85:d2:13:e2:1a:fe:4d:4b:a0:b9:dd:11:
b6:02:f7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:37:21 2026 by rpki-client