Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Wrz1ohQ4Bg6Lcy_RljHi26OIOcI.roa
File: Wrz1ohQ4Bg6Lcy_RljHi26OIOcI.roa (raw, json)
Hash identifier: BwR3/bSzpwYyFNp1z1EIKK8WM4mTGyDxSLdSo/6lNkw=
Subject key identifier: 5A:BC:F5:A2:14:38:06:0E:8B:73:2F:D1:96:31:E2:DB:A3:88:39:C2
Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial: 019CC96C0AC6C8DF293022385D3914BFEBB2
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Wrz1ohQ4Bg6Lcy_RljHi26OIOcI.roa
Signing time: Sat 07 Mar 2026 17:50:26 +0000
ROA not before: Sat 07 Mar 2026 17:50:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 5.45.64.0/21 maxlen: 21
5.45.72.0/22 maxlen: 22
5.45.76.0/22 maxlen: 22
5.45.84.0/22 maxlen: 22
5.45.88.0/22 maxlen: 22
5.45.92.0/22 maxlen: 22
5.61.48.0/22 maxlen: 22
5.61.52.0/22 maxlen: 22
5.61.56.0/22 maxlen: 22
37.1.200.0/21 maxlen: 21
37.1.216.0/21 maxlen: 21
37.252.3.0/24 maxlen: 24
37.252.13.0/24 maxlen: 24
37.252.14.0/23 maxlen: 23
45.136.48.0/22 maxlen: 22
62.197.48.0/23 maxlen: 23
153.56.140.0/22 maxlen: 22
153.56.144.0/20 maxlen: 20
153.56.160.0/19 maxlen: 19
153.56.192.0/18 maxlen: 18
176.97.79.0/24 maxlen: 24
185.238.168.0/23 maxlen: 23
185.238.170.0/23 maxlen: 23
188.116.20.0/24 maxlen: 24
188.116.21.0/24 maxlen: 24
188.116.23.0/24 maxlen: 24
188.116.24.0/24 maxlen: 24
188.116.25.0/24 maxlen: 24
188.116.26.0/24 maxlen: 24
188.116.27.0/24 maxlen: 24
195.54.174.0/23 maxlen: 23
213.142.146.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Mar 2026 23:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c9:6c:0a:c6:c8:df:29:30:22:38:5d:39:14:bf:eb:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Validity
Not Before: Mar 7 17:50:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5abcf5a21438060e8b732fd19631e2dba38839c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d1:61:77:72:7b:c7:18:68:52:7c:6b:62:6a:
6c:44:5c:8c:c0:44:a5:06:a6:87:35:65:35:08:21:
02:1a:95:25:c3:1e:37:c6:0a:aa:d8:b8:50:46:4e:
40:48:0f:1c:f4:ce:13:5c:fa:c1:fc:47:1b:80:de:
50:2b:80:61:12:87:51:72:5c:bc:d9:3c:20:8c:fa:
1d:05:67:f0:db:3a:81:8d:b5:02:13:ac:41:0d:c9:
34:33:46:f0:b8:07:32:2a:98:e3:76:79:de:8e:8c:
7c:f0:69:e8:86:b9:e5:67:d4:78:2d:de:c8:3a:aa:
bc:c2:16:0a:4f:b3:9c:60:43:3b:a0:02:96:73:d7:
12:1e:8c:8a:ff:66:46:0f:bc:ff:9c:c3:27:b8:76:
f3:0c:52:40:c2:83:8d:b4:d8:38:41:b2:54:12:2a:
51:4f:e5:e2:0c:2c:e7:68:ab:94:64:a6:20:4d:7d:
31:de:3e:60:30:57:cc:b9:d9:d0:92:9b:cb:f8:5e:
d4:79:c5:4b:c9:ea:2c:47:57:8d:8f:64:62:3c:52:
11:63:50:bb:e6:8a:15:70:0a:47:d8:e2:20:17:45:
c1:fa:66:71:67:96:4e:99:0f:4e:90:05:03:42:f8:
28:9a:be:76:e0:74:d7:eb:b4:4f:88:08:2a:2c:cb:
c7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BC:F5:A2:14:38:06:0E:8B:73:2F:D1:96:31:E2:DB:A3:88:39:C2
X509v3 Authority Key Identifier:
keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Wrz1ohQ4Bg6Lcy_RljHi26OIOcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.64.0/20
5.45.84.0-5.45.95.255
5.61.48.0-5.61.59.255
37.1.200.0/21
37.1.216.0/21
37.252.3.0/24
37.252.13.0-37.252.15.255
45.136.48.0/22
62.197.48.0/23
153.56.140.0-153.56.255.255
176.97.79.0/24
185.238.168.0/22
188.116.20.0/23
188.116.23.0-188.116.27.255
195.54.174.0/23
213.142.146.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:c0:ea:4f:82:08:2b:db:3a:dd:0d:10:fd:11:94:82:3a:f9:
83:b2:21:6f:eb:82:76:4e:ad:e3:2d:bd:4c:0e:f3:da:fe:cd:
58:2f:0a:24:28:17:24:d8:12:b7:7c:c2:92:6d:1c:41:40:66:
3b:14:f0:05:5c:ae:b7:b6:b0:81:da:95:f8:25:1a:7b:fd:ef:
49:72:e6:e9:61:c0:df:be:90:97:d3:99:5a:5d:a8:e7:38:a3:
08:15:77:37:c3:c9:d4:f7:c8:c2:b3:ad:46:c8:9e:66:13:6a:
48:91:68:36:0c:9b:09:43:68:ef:1a:ab:95:47:e4:fd:69:27:
d5:d8:1c:b5:f4:b7:fe:09:11:fa:8b:71:b5:d1:ac:57:80:4c:
3e:4c:d6:6c:1f:1a:23:6e:62:06:55:f3:8e:b2:d8:f3:0f:d6:
cb:21:0b:b3:73:ed:68:e6:7b:16:0f:aa:64:a4:3c:47:a5:0c:
13:1f:31:e0:de:56:70:7a:c7:b9:af:6b:65:90:38:2e:54:df:
a3:b3:8d:5e:b1:2f:fc:56:f2:ae:68:25:85:9f:ff:26:ff:db:
2a:b0:fa:1c:5b:ae:0f:dd:95:de:e3:96:dc:e4:e2:67:25:32:
dd:36:90:d0:24:9d:a3:03:e0:59:ab:30:fb:7f:4a:05:db:20:
f6:7a:41:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 10:01:52 2026 by rpki-client