Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/wSPNPlOzROPvobbc59n5gvSJl2A.roa
File: wSPNPlOzROPvobbc59n5gvSJl2A.roa (raw, json)
Hash identifier: FmUU+LVsKXzl10dMZnHRPydiPVXhhfwVgPgjOD1f4+0=
Subject key identifier: C1:23:CD:3E:53:B3:44:E3:EF:A1:B6:DC:E7:D9:F9:82:F4:89:97:60
Certificate issuer: /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Certificate serial: 01A1A774E54B8F0885DE5F2313C7011CEC5E
Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/wSPNPlOzROPvobbc59n5gvSJl2A.roa
Signing time: Wed 04 Nov 2026 16:46:58 +0000
ROA not before: Wed 04 Nov 2026 16:46:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 45691
IP address blocks: 173.214.112.0/20 maxlen: 24
185.217.5.0/24 maxlen: 24
193.56.180.0/24 maxlen: 24
2a12:f8c1:1::/48 maxlen: 48
2a12:f8c2:200::/40 maxlen: 40
2a12:f8c3:4000::/36 maxlen: 36
2a12:f8c4::/32 maxlen: 32
2a12:f8c5::/32 maxlen: 32
2a12:f8c6::/32 maxlen: 48
2a12:f8c7::/32 maxlen: 32
2a13:fc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a7:74:e5:4b:8f:08:85:de:5f:23:13:c7:01:1c:ec:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Validity
Not Before: Nov 4 16:46:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c123cd3e53b344e3efa1b6dce7d9f982f4899760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8e:df:3e:a2:13:ce:96:e4:4e:ac:da:0c:8e:
b5:3c:e7:b4:11:cb:5f:b4:1f:c7:6f:98:e5:62:04:
5e:31:41:f7:4d:a5:06:ca:8e:f6:9c:56:75:4e:9f:
bd:ad:22:a9:24:ce:6a:84:c8:2a:bc:18:78:f4:7f:
2b:cd:00:fd:26:42:a8:b3:24:d7:1f:55:f0:e3:bb:
a7:0d:21:05:ca:de:fe:54:bc:f8:f5:78:d8:fc:9a:
81:fa:0b:5e:0f:dc:ec:97:80:b0:31:91:d3:a2:3a:
15:70:b4:9c:df:c4:0e:a6:3a:82:6d:9a:1b:79:b2:
21:26:34:35:fb:82:12:38:7f:40:0a:d3:fb:b4:b4:
f8:da:d1:6a:15:d0:27:e9:ee:f9:8b:e7:75:72:42:
2e:e0:62:34:d9:bb:cb:f8:d2:2e:76:51:f5:ba:4d:
27:23:e3:aa:b3:f3:58:ac:83:6d:b9:17:2c:5d:c4:
bd:03:dc:8a:60:2a:15:2c:04:5a:a5:67:4d:09:d1:
c1:c6:30:8b:f0:42:77:3d:fb:48:66:68:2a:42:62:
f4:b9:8b:ee:cc:e1:bc:42:83:92:91:23:26:1f:4a:
9b:14:fd:b7:40:7c:62:88:14:bc:3f:d5:ca:a3:d6:
27:a3:12:27:97:0a:fa:96:e9:29:48:8e:2e:4b:3c:
71:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:23:CD:3E:53:B3:44:E3:EF:A1:B6:DC:E7:D9:F9:82:F4:89:97:60
X509v3 Authority Key Identifier:
keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/wSPNPlOzROPvobbc59n5gvSJl2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.214.112.0/20
185.217.5.0/24
193.56.180.0/24
IPv6:
2a12:f8c1:1::/48
2a12:f8c2:200::/40
2a12:f8c3:4000::/36
2a12:f8c4::/30
2a13:fc0::/29
Signature Algorithm: sha256WithRSAEncryption
3d:86:20:91:c7:02:0a:cc:a0:b9:6f:a2:ad:ba:75:d5:0b:49:
b7:c8:63:04:98:f1:da:fe:88:2c:4d:e2:7d:81:f2:db:be:ee:
93:da:f8:2f:7a:0b:1b:dd:98:49:ba:2b:60:36:5f:ff:3a:c4:
fb:77:b6:8e:62:c8:54:7d:ec:52:73:b8:6f:4d:df:af:44:0f:
32:49:e1:e7:b0:3c:0d:e6:d3:24:15:a6:18:a9:00:d1:e0:c7:
cb:81:bf:03:7e:0e:fc:c1:ca:d4:c8:77:7c:55:8e:1d:fe:9f:
01:f1:91:20:3b:f4:6d:53:f0:a9:8e:1f:59:73:5f:84:76:d9:
cc:01:bb:2a:d8:31:0a:87:61:39:e7:15:0b:f1:e7:b1:e2:7c:
fe:de:64:3f:a2:9e:b6:39:a3:b8:f7:ed:f6:fc:5c:04:25:57:
f8:24:c6:9e:ac:72:f8:34:84:ae:38:cc:45:d7:95:e9:0a:17:
19:f1:9e:80:4f:dc:f4:c7:49:f3:26:f9:0f:bd:2d:07:1a:84:
7e:fd:ce:40:68:13:e3:9b:66:63:43:29:6b:da:64:3c:ef:bb:
08:9a:c3:19:f0:aa:9c:0b:04:1b:10:28:01:a9:d1:bd:79:3a:
91:1b:74:95:b1:dc:f1:b2:30:e2:4d:3f:d4:c8:43:48:45:b8:
fc:90:dd:6d
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgISAaGndOVLjwiF3l8jE8cBHOxeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMzkyZTkyOTMxN2FlNmJkZTA4YTVhM2I5OGEyYjcwMWRk
Yjg5M2EwHhcNMjYxMTA0MTY0NjU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTIzY2QzZTUzYjM0NGUzZWZhMWI2ZGNlN2Q5Zjk4MmY0ODk5NzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApI7fPqITzpbkTqzaDI61POe0Ectf
tB/Hb5jlYgReMUH3TaUGyo72nFZ1Tp+9rSKpJM5qhMgqvBh49H8rzQD9JkKosyTX
H1Xw47unDSEFyt7+VLz49XjY/JqB+gteD9zsl4CwMZHTojoVcLSc38QOpjqCbZob
ebIhJjQ1+4ISOH9ACtP7tLT42tFqFdAn6e75i+d1ckIu4GI02bvL+NIudlH1uk0n
I+Oqs/NYrINtuRcsXcS9A9yKYCoVLARapWdNCdHBxjCL8EJ3PftIZmgqQmL0uYvu
zOG8QoOSkSMmH0qbFP23QHxiiBS8P9XKo9YnoxInlwr6lukpSI4uSzxx1wIDAQAB
o4ICRDCCAkAwHQYDVR0OBBYEFMEjzT5Ts0Tj76G23OfZ+YL0iZdgMB8GA1UdIwQY
MBaAFGM5LpKTF65r3gilo7mKK3Ad24k6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEt
ODcyNTBmNWEwN2NjLzEvd1NQTlBsT3pST1B2b2JiYzU5bjVndlNKbDJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEtODcyNTBmNWEwN2Nj
LzEvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTAYBAIAATASAwQErdZwAwQA
udkFAwQAwTi0MC0EAgACMCcDBwAqEvjBAAEDBgAqEvjCAgMGBCoS+MNAAwUCKhL4
xAMFAyoTD8AwDQYJKoZIhvcNAQELBQADggEBAD2GIJHHAgrMoLlvoq26ddULSbfI
YwSY8dr+iCxN4n2B8tu+7pPa+C96CxvdmEm6K2A2X/86xPt3to5iyFR97FJzuG9N
369EDzJJ4eewPA3m0yQVphipANHgx8uBvwN+DvzBytTId3xVjh3+nwHxkSA79G1T
8KmOH1lzX4R22cwBuyrYMQqHYTnnFQvx57HifP7eZD+inrY5o7j37fb8XAQlV/gk
xp6scvg0hK44zEXXlekKFxnxnoBP3PTHSfMm+Q+9LQcahH79zkBoE+ObZmNDKWva
ZDzvuwiawxnwqpwLBBsQKAGp0b15OpEbdJWx3PGyMOJNP9TIQ0hFuPyQ3W0=
-----END CERTIFICATE-----
Generated at Thu Nov 5 04:54:37 2026 by rpki-client