Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/wm1lXzHcJX95NHj9ois5gkctOoQ.roa
File: wm1lXzHcJX95NHj9ois5gkctOoQ.roa (raw, json)
Hash identifier: fWjCquBSQ6//3hLKFz3ks7PPTJDwsXZsgsh+NNqW3Mc=
Subject key identifier: C2:6D:65:5F:31:DC:25:7F:79:34:78:FD:A2:2B:39:82:47:2D:3A:84
Certificate issuer: /CN=d26a4409ea91f506d633871c6c35540d460337d1
Certificate serial: 01A07FC18D0F7DEE52B6586678C87CE32F91
Authority key identifier: D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/wm1lXzHcJX95NHj9ois5gkctOoQ.roa
Signing time: Tue 08 Sep 2026 06:43:05 +0000
ROA not before: Tue 08 Sep 2026 06:43:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41368
IP address blocks: 5.45.169.0/24 maxlen: 24
5.61.200.0/21 maxlen: 24
5.61.200.0/23 maxlen: 23
5.61.202.0/24 maxlen: 24
5.61.203.0/24 maxlen: 24
5.61.204.0/24 maxlen: 24
5.61.205.0/24 maxlen: 24
5.61.206.0/24 maxlen: 24
5.61.207.0/24 maxlen: 24
171.22.8.0/22 maxlen: 24
171.22.8.0/24 maxlen: 24
171.22.9.0/24 maxlen: 24
171.22.10.0/24 maxlen: 24
171.22.11.0/24 maxlen: 24
185.62.20.0/23 maxlen: 24
185.62.20.0/24 maxlen: 24
185.62.21.0/24 maxlen: 24
185.62.22.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7f:c1:8d:0f:7d:ee:52:b6:58:66:78:c8:7c:e3:2f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d26a4409ea91f506d633871c6c35540d460337d1
Validity
Not Before: Sep 8 06:43:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c26d655f31dc257f793478fda22b3982472d3a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:06:f2:2c:30:f7:e5:73:38:e9:21:a0:88:6d:
dd:1f:bf:79:e7:59:26:a0:67:7b:a7:aa:0b:b7:96:
b3:28:80:88:15:09:dc:3f:77:ca:51:0d:9f:7a:7a:
ca:6c:a0:b6:2b:65:d0:1c:2c:1a:0e:15:7e:39:d5:
b0:9d:6f:c3:98:a6:6b:9e:5f:e4:0c:76:80:ad:2e:
65:0d:42:c1:94:51:2e:88:34:24:81:79:e5:4e:35:
10:cf:3e:58:38:e4:99:02:a6:e9:b2:8f:58:6c:2b:
d3:5e:7e:35:57:c1:d6:40:3c:b4:4e:b0:3a:7c:d7:
a5:92:7d:da:1f:04:97:35:0b:24:61:73:cd:88:c7:
77:01:b0:b5:74:db:04:f6:cf:57:df:0d:14:f5:4e:
4d:c2:d6:77:fc:94:50:16:76:a0:e5:d0:e9:06:33:
34:69:16:86:61:0c:0d:bc:2e:a0:6b:82:ef:a0:f2:
1c:0e:69:c9:ad:2e:be:06:5e:86:1d:42:2d:c9:cd:
62:44:49:22:e0:e0:e5:f8:27:68:0d:e5:1e:fa:db:
16:59:70:3d:a2:bd:4b:ff:46:65:04:dc:78:5d:9a:
6d:fa:3b:44:93:f0:80:ac:e4:1a:44:48:af:4c:f3:
a8:bd:3b:8b:b4:32:ec:be:c2:e4:ad:03:4a:d6:ee:
a4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6D:65:5F:31:DC:25:7F:79:34:78:FD:A2:2B:39:82:47:2D:3A:84
X509v3 Authority Key Identifier:
keyid:D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/wm1lXzHcJX95NHj9ois5gkctOoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.169.0/24
5.61.200.0/21
171.22.8.0/22
185.62.20.0/22
Signature Algorithm: sha256WithRSAEncryption
51:74:86:aa:66:89:ed:1d:b5:75:df:b0:32:1c:a8:d8:5b:f0:
2b:89:ad:ad:93:d8:77:d6:4d:d3:3a:01:d4:28:e7:f9:de:e3:
1d:06:b4:a7:3c:62:f3:57:2d:b7:fa:4b:d4:ba:4b:7d:39:6b:
f1:0b:91:b6:8e:45:af:7e:5a:80:e4:f6:4d:1d:a6:8d:4f:aa:
4c:92:a2:22:c6:88:49:5a:da:06:43:8c:23:23:58:74:85:d3:
e7:55:4a:a2:84:e2:cc:cd:43:60:24:42:80:55:5f:dd:46:a4:
cb:70:30:67:57:d2:e6:73:f3:bc:7b:45:b3:ff:9d:4a:33:45:
f4:d3:86:ca:f1:be:c9:06:70:f8:c7:5b:8e:35:8b:ce:7f:54:
a1:d4:49:d4:4d:2e:55:03:14:fc:c2:6e:5b:d1:a9:a6:6a:29:
ae:6d:8d:7f:77:9b:7b:1c:37:da:a2:f5:e5:ea:f7:83:52:45:
1a:66:16:92:ae:83:3f:34:7f:96:28:df:cc:0f:93:9c:ca:2a:
f9:1a:b8:82:b2:a3:23:44:08:22:de:84:3e:fd:64:4a:20:9e:
66:9d:e1:89:f1:e6:6a:23:39:c3:06:a1:a4:8c:33:c1:46:01:
8e:e2:91:9e:a5:b1:fb:49:e8:5d:9c:ab:96:1d:59:ca:9b:ff:
16:be:9c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:56:16 2026 by rpki-client