Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/WqMtvNIaP6HL0M7jC3RzwOrLuMk.roa
File: WqMtvNIaP6HL0M7jC3RzwOrLuMk.roa (raw, json)
Hash identifier: zDKW3FIsrJ0v83XQ4NHGkjrW9c4b6jey+AivEoqxnnM=
Subject key identifier: 5A:A3:2D:BC:D2:1A:3F:A1:CB:D0:CE:E3:0B:74:73:C0:EA:CB:B8:C9
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 01A144387AD0E6A5317E5F2D2776FC0C5ABA
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/WqMtvNIaP6HL0M7jC3RzwOrLuMk.roa
Signing time: Fri 16 Oct 2026 10:18:34 +0000
ROA not before: Fri 16 Oct 2026 10:18:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213221
IP address blocks: 45.158.252.0/24 maxlen: 24
45.158.255.0/24 maxlen: 24
185.235.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:38:7a:d0:e6:a5:31:7e:5f:2d:27:76:fc:0c:5a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Oct 16 10:18:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5aa32dbcd21a3fa1cbd0cee30b7473c0eacbb8c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:44:fc:a5:49:98:f3:80:8d:57:05:8d:cd:4a:
4c:38:b6:e9:05:74:4f:08:89:2a:c1:74:0f:77:3e:
7b:f7:3c:61:55:b0:17:47:25:25:8b:8e:56:fa:58:
6f:97:a8:98:01:f6:51:38:f6:26:f2:b1:e7:fb:7e:
7e:f4:7d:c2:2f:fa:77:5f:d2:13:31:a3:24:74:73:
90:69:3d:ec:ca:19:04:44:02:d7:3b:e1:13:21:eb:
56:a4:91:b7:67:68:b9:dc:8f:80:9e:a8:b6:ab:84:
61:ba:86:cd:61:b9:5d:d0:8b:28:5a:49:90:b1:b9:
c8:21:cf:48:0c:4d:a6:f6:69:1a:9a:7e:a5:90:40:
91:51:34:8a:38:db:70:47:8c:64:0b:fb:4c:5e:54:
f4:cf:70:4b:66:a7:58:1c:78:4a:77:d2:82:18:b4:
11:d2:52:48:b8:5b:48:ca:94:4f:aa:91:8f:31:19:
37:7f:52:c7:b1:1a:08:31:0f:8b:4a:d3:b5:d9:27:
dd:6f:69:21:7b:d1:d3:81:ee:9b:88:3c:5d:c2:c3:
fa:c3:bb:87:7b:00:ff:88:0b:54:d1:4f:90:01:99:
66:06:86:fa:4e:2a:97:f2:b8:b2:90:e8:49:0e:17:
8f:fc:0e:ed:95:77:76:c4:d4:1f:bd:1a:39:df:16:
2a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A3:2D:BC:D2:1A:3F:A1:CB:D0:CE:E3:0B:74:73:C0:EA:CB:B8:C9
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/WqMtvNIaP6HL0M7jC3RzwOrLuMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.252.0/24
45.158.255.0/24
185.235.165.0/24
Signature Algorithm: sha256WithRSAEncryption
77:ec:0b:bc:43:82:c2:37:ca:aa:af:e5:3d:a3:9e:56:6c:f6:
f0:06:a1:d3:cc:57:6d:2f:ec:3c:d5:db:33:cb:d8:fa:c6:67:
ba:0b:00:ef:4b:40:cb:c3:ea:c6:50:a8:4c:60:03:b8:9a:e2:
f5:06:b4:25:07:a8:a3:dc:13:1b:ce:5d:dd:52:ad:b7:fd:01:
49:69:a1:6a:e1:e7:e5:a9:ce:00:f5:ef:88:5e:5d:c6:cb:de:
9a:87:f4:59:df:52:50:0a:19:bf:da:7c:f0:72:26:c1:41:1e:
c9:af:24:ac:12:50:fd:78:c4:03:5e:63:40:4a:69:81:63:2a:
c9:4b:92:81:bb:e5:87:94:4e:f6:de:fa:52:6a:f3:45:15:8a:
b4:88:17:d1:28:53:ea:0e:03:7d:97:ec:3e:28:33:6e:53:fb:
6b:1f:6c:89:c3:7b:3e:30:3e:42:33:eb:9d:d7:d6:70:8d:e0:
8a:28:73:64:13:b7:a4:12:74:92:63:b3:30:ce:d6:1a:1f:1f:
0d:12:d5:b3:9a:1e:06:b5:ce:e9:5b:52:b4:d0:a0:2d:2f:28:
52:d1:08:8e:2b:fd:de:b1:e5:f7:b7:81:99:7c:d2:56:34:de:
fd:cd:ab:a5:90:ca:ca:f9:97:5f:a6:1c:e3:3a:88:a1:de:1f:
07:10:24:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 07:10:33 2026 by rpki-client