Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/RkWno_xcdKUD5Yliub51iejaEX0.roa
File: RkWno_xcdKUD5Yliub51iejaEX0.roa (raw, json)
Hash identifier: fR0NrxrJ21Se9P0RUJnxJAPyzwI0HoDQ/c8CntSvvm0=
Subject key identifier: 46:45:A7:A3:FC:5C:74:A5:03:E5:89:62:B9:BE:75:89:E8:DA:11:7D
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01A136155A36A64EB2C69ED03A9170EE77D6
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/RkWno_xcdKUD5Yliub51iejaEX0.roa
Signing time: Tue 13 Oct 2026 16:25:31 +0000
ROA not before: Tue 13 Oct 2026 16:25:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203804
IP address blocks: 2.56.108.0/24 maxlen: 24
2.56.109.0/24 maxlen: 24
45.81.113.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
45.151.2.0/24 maxlen: 24
85.209.120.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
194.15.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 10:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:15:5a:36:a6:4e:b2:c6:9e:d0:3a:91:70:ee:77:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 13 16:25:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4645a7a3fc5c74a503e58962b9be7589e8da117d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ff:58:12:65:4c:3b:ae:cf:55:c4:b6:20:58:
68:25:17:25:1f:66:d8:b5:bc:9b:44:e7:f8:fe:bf:
06:76:af:f1:aa:8a:69:02:56:dc:11:73:33:e0:70:
a2:b2:bb:88:2b:85:6e:b4:14:a8:a9:a7:dc:00:12:
93:07:bc:c0:86:14:32:41:1d:08:7c:7e:fb:78:77:
f4:86:fd:1e:a2:1d:db:31:0d:ac:3f:60:9e:04:f0:
00:8e:48:3a:02:b2:d7:5e:6b:b8:74:37:30:92:6f:
bf:d0:b2:97:ca:b3:97:ea:51:5b:02:18:ec:29:50:
b4:34:f1:74:7e:d2:05:c6:aa:30:6c:4a:7a:42:d2:
80:b2:82:8d:81:2e:a4:71:9a:b1:0d:7b:81:3c:05:
a6:e1:06:95:fe:20:3f:ee:92:3d:24:b6:d7:c5:f0:
d9:ae:a2:a4:72:50:66:2a:71:54:13:ba:6c:19:57:
ff:ec:12:78:39:d6:d1:75:b2:9f:67:95:a8:f7:d5:
c5:92:d7:7c:6c:9f:0e:64:49:ac:71:0e:82:c7:9a:
4e:8f:a5:3d:dd:a6:26:4b:81:6a:2e:36:e9:ce:60:
88:05:8b:92:10:6d:19:c6:31:2b:c1:f3:5a:a8:37:
d6:a8:7f:0f:43:a3:1b:6f:da:32:36:6b:59:1c:14:
20:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:45:A7:A3:FC:5C:74:A5:03:E5:89:62:B9:BE:75:89:E8:DA:11:7D
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/RkWno_xcdKUD5Yliub51iejaEX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/23
45.81.113.0/24
45.81.115.0/24
45.88.139.0/24
45.132.181.0/24
45.151.2.0/24
85.209.120.0/24
193.57.41.0/24
194.15.52.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:fe:43:e7:60:85:e6:92:38:4e:50:fc:9e:77:f4:86:58:8c:
13:47:9d:b9:40:28:10:c7:c6:26:96:0d:05:63:6f:0e:6c:71:
6b:bd:c9:e3:48:e1:ca:3a:a6:75:25:11:52:76:cf:e8:bc:a4:
74:5e:d0:ec:11:11:45:a5:04:08:44:8a:4f:f1:16:00:b6:ab:
75:03:e0:e0:d5:ff:1f:8c:62:06:df:aa:72:26:47:95:7c:31:
63:97:bc:43:d1:84:1a:9e:46:77:94:00:97:48:82:17:ea:7c:
60:f8:39:f9:0c:84:37:8c:31:52:56:a0:7f:de:f5:3b:44:ab:
5d:8b:80:cb:11:4c:0c:fb:e6:38:1f:6d:6c:17:e6:dc:61:bb:
21:9d:c6:62:23:ed:90:fb:b0:a3:2c:3f:a2:60:8d:54:cf:e7:
10:d5:0d:ea:c5:bb:1b:70:9a:f9:cb:7f:22:84:e2:2a:06:8c:
56:cd:5d:a2:c7:9f:65:8f:15:f6:74:8d:e7:32:ef:a6:6e:8a:
dc:1b:4f:5a:ec:32:71:49:52:f6:d7:e1:50:06:26:0a:7e:0b:
2f:d7:25:02:16:dd:9f:ee:42:d9:23:9e:94:ed:ad:9a:bf:e5:
44:3f:fc:69:de:35:13:fb:19:99:31:4b:7d:b4:48:fc:b2:68:
a6:1e:1a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 15:11:26 2026 by rpki-client