Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/Wh6JdWbFf767tpcWkFtr8UJXLgM.roa
File: Wh6JdWbFf767tpcWkFtr8UJXLgM.roa (raw, json)
Hash identifier: W1BnQBZwaWYQKobp/KfvfGYFyHPluWWlI7Hmrj6OUg0=
Subject key identifier: 5A:1E:89:75:66:C5:7F:BE:BB:B6:97:16:90:5B:6B:F1:42:57:2E:03
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 019CE1B090F6ACF92732882F8E99F2B9ADFE
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/Wh6JdWbFf767tpcWkFtr8UJXLgM.roa
Signing time: Thu 12 Mar 2026 10:56:10 +0000
ROA not before: Thu 12 Mar 2026 10:56:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59651
IP address blocks: 45.80.104.0/23 maxlen: 23
45.140.204.0/23 maxlen: 23
193.187.92.0/23 maxlen: 23
193.187.94.0/23 maxlen: 23
193.202.8.0/23 maxlen: 23
193.202.10.0/23 maxlen: 23
193.202.82.0/23 maxlen: 23
193.203.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e1:b0:90:f6:ac:f9:27:32:88:2f:8e:99:f2:b9:ad:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Mar 12 10:56:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a1e897566c57fbebbb69716905b6bf142572e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7f:4a:02:f8:7b:cf:ef:2f:c6:bc:5f:0b:19:
3b:6f:f2:51:6d:1f:eb:b3:c3:8a:26:ad:fb:53:f9:
2a:da:23:ed:60:28:a8:00:37:9d:93:9a:6c:00:da:
0e:1d:f3:f7:20:aa:cb:5b:a7:71:78:4e:76:09:c2:
3f:c8:0d:b3:8f:3b:d8:e8:ca:6a:20:60:2f:29:55:
4f:db:54:1f:3c:8b:c4:1e:df:b1:92:9d:2c:cb:ef:
f9:0f:3c:43:31:33:71:cc:d6:03:0a:37:33:69:d8:
f9:32:34:72:45:d6:2e:cc:32:1d:85:d8:e3:57:4d:
8c:a2:fc:56:ae:b4:04:d6:9a:3c:f0:01:26:88:af:
9d:25:c4:64:94:44:21:f8:2a:ac:c1:69:4d:0f:a1:
ce:a2:b5:e9:11:57:09:61:d8:ca:b7:5b:e2:d9:34:
8b:52:aa:8b:82:4f:4a:fc:c1:34:cc:11:ab:42:64:
c4:64:0d:44:f9:de:34:a8:ab:d7:8b:35:47:99:3e:
de:f6:c3:c9:46:ed:e6:ca:97:94:a5:59:39:a4:de:
0a:48:ec:bd:99:be:7e:48:8e:1a:18:b2:f8:73:ec:
3b:01:8a:94:ce:3f:8d:4b:b2:cd:23:37:08:53:20:
8b:d2:5f:a3:73:78:83:78:2b:29:0a:74:44:04:da:
81:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1E:89:75:66:C5:7F:BE:BB:B6:97:16:90:5B:6B:F1:42:57:2E:03
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/Wh6JdWbFf767tpcWkFtr8UJXLgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.104.0/23
45.140.204.0/23
193.187.92.0/22
193.202.8.0/22
193.202.82.0/23
193.203.11.0/24
Signature Algorithm: sha256WithRSAEncryption
75:0c:87:d7:bb:20:85:01:77:02:ac:2d:c4:69:e9:9f:b1:d7:
15:ea:c9:ae:4f:5b:f7:af:9f:41:9f:e9:36:db:70:65:44:f6:
aa:91:a2:72:fc:11:cd:71:2c:83:3e:48:85:07:c4:b2:b7:81:
ea:de:ac:1b:06:9e:27:ab:0d:a5:16:88:38:dc:c8:a6:f1:f1:
b3:14:66:5a:f9:1c:51:22:1a:a6:61:b6:91:05:35:9b:78:4b:
48:8d:a2:34:71:b5:d9:13:55:4b:2b:80:d7:87:c7:63:3a:c7:
9c:cd:f9:f2:d0:4e:64:ac:bf:d9:02:56:e7:e8:7e:51:9c:2c:
9d:4c:d8:e6:fd:de:90:18:ce:0b:65:97:fd:10:9e:6e:ba:68:
21:9d:b7:b0:10:e8:d4:6f:87:90:0b:75:71:10:c3:a4:49:6d:
fd:3f:da:5f:aa:b2:ae:82:17:81:8f:6a:76:89:53:23:af:28:
5d:7f:c0:7c:65:1d:97:4a:20:ba:07:8d:e4:dc:82:3c:42:e3:
3d:15:3a:8b:27:8f:8e:9c:2c:58:0a:96:36:be:b8:63:0a:d3:
26:4d:31:c2:72:ad:4a:95:ee:76:eb:7a:dd:4a:72:f6:69:b7:
e4:bc:f4:bd:f5:89:97:b6:b1:dc:d0:5a:ff:3f:e4:23:26:97:
b0:52:1c:28
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZzhsJD2rPknMogvjpnyua3+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NjUxYjExOTRmMTJlOThlNzBkM2RhNzhlZmU0ZGQyNDY3
Y2Q0MjMwHhcNMjYwMzEyMTA1NjEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTFlODk3NTY2YzU3ZmJlYmJiNjk3MTY5MDViNmJmMTQyNTcyZTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1H9KAvh7z+8vxrxfCxk7b/JRbR/r
s8OKJq37U/kq2iPtYCioADedk5psANoOHfP3IKrLW6dxeE52CcI/yA2zjzvY6Mpq
IGAvKVVP21QfPIvEHt+xkp0sy+/5DzxDMTNxzNYDCjczadj5MjRyRdYuzDIdhdjj
V02MovxWrrQE1po88AEmiK+dJcRklEQh+CqswWlND6HOorXpEVcJYdjKt1vi2TSL
UqqLgk9K/ME0zBGrQmTEZA1E+d40qKvXizVHmT7e9sPJRu3mypeUpVk5pN4KSOy9
mb5+SI4aGLL4c+w7AYqUzj+NS7LNIzcIUyCL0l+jc3iDeCspCnREBNqBXQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFFoeiXVmxX++u7aXFpBba/FCVy4DMB8GA1UdIwQY
MBaAFPhlGxGU8S6Y5w09p47+TdJGfNQjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1HVWJFWlR4THBqbkRUMm5qdjVOMGtaODFDTS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjli
LWExYjdjZWVmYTE2Yy8xL1doNkpkV2JGZjc2N3RwY1drRnRyOFVKWExnTS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjliLWExYjdjZWVmYTE2
Yy8xLzEtR1ViRVpUeExwam5EVDJuanY1TjBrWjgxQ00uY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwPQYIKwYBBQUHAQcBAf8ELjAsMCoEAgABMCQDBAEtUGgD
BAEtjMwDBALBu1wDBALByggDBAHBylIDBADBywswDQYJKoZIhvcNAQELBQADggEB
AHUMh9e7IIUBdwKsLcRp6Z+x1xXqya5PW/evn0Gf6TbbcGVE9qqRonL8Ec1xLIM+
SIUHxLK3gererBsGnierDaUWiDjcyKbx8bMUZlr5HFEiGqZhtpEFNZt4S0iNojRx
tdkTVUsrgNeHx2M6x5zN+fLQTmSsv9kCVufoflGcLJ1M2Ob93pAYzgtll/0Qnm66
aCGdt7AQ6NRvh5ALdXEQw6RJbf0/2l+qsq6CF4GPanaJUyOvKF1/wHxlHZdKILoH
jeTcgjxC4z0VOosnj46cLFgKlja+uGMK0yZNMcJyrUqV7nbret1KcvZpt+S89L31
iZe2sdzQWv8/5CMml7BSHCg=
-----END CERTIFICATE-----
Generated at Thu Mar 12 15:48:12 2026 by rpki-client