Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wvAAI3_13eZ7MsfDs_T-RicMiic.roa
File: wvAAI3_13eZ7MsfDs_T-RicMiic.roa (raw, json)
Hash identifier: YeL1/8HJQFZ0mHqbDiJ2uRSyWmYomFXZFc0PosOvNa0=
Subject key identifier: C2:F0:00:23:7F:F5:DD:E6:7B:32:C7:C3:B3:F4:FE:46:27:0C:8A:27
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09A04A33646D695300E8E0D893EEDDE28
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wvAAI3_13eZ7MsfDs_T-RicMiic.roa
Signing time: Sun 13 Sep 2026 09:06:30 +0000
ROA not before: Sun 13 Sep 2026 09:06:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216300
IP address blocks: 45.12.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9a:04:a3:36:46:d6:95:30:0e:8e:0d:89:3e:ed:de:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 13 09:06:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c2f000237ff5dde67b32c7c3b3f4fe46270c8a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:28:0d:43:dd:95:36:e3:c2:bb:51:3a:4e:c4:
5e:be:4c:bb:88:e5:5d:de:b3:05:4a:65:79:84:b6:
b4:5a:6f:55:6b:ea:ff:05:1a:5b:69:86:0d:27:2f:
6a:94:fd:72:38:ee:b5:27:aa:48:3c:c9:b8:57:55:
a9:d5:46:c6:ef:ba:06:c6:f4:6a:d6:15:0e:12:4e:
84:91:dc:f0:0a:05:4a:54:b7:d1:ee:d6:a4:9f:30:
94:26:96:da:e3:74:59:ff:d1:5c:da:c9:60:ee:9c:
01:8c:c6:81:28:59:b1:b1:19:98:db:c6:2a:e9:ca:
fb:90:50:95:34:a3:52:ab:54:63:09:f9:cc:cc:60:
5d:9c:cc:62:e7:f6:ed:de:57:ed:dd:e2:44:48:29:
62:e5:d9:ae:e6:f5:dc:3e:f6:94:29:28:16:7f:ec:
50:78:ff:ea:9b:bc:3e:b1:80:f7:c8:a2:f0:86:af:
6b:7e:eb:2e:9e:8b:aa:4b:80:09:a5:6f:82:14:8c:
6c:86:a3:a9:0a:a2:6a:97:47:65:5b:a9:71:19:b5:
b7:03:35:76:7f:27:4f:82:91:e8:de:cd:b4:62:94:
cc:a3:22:dc:4c:85:2b:64:b0:ae:02:8c:0c:e5:f9:
76:23:cd:77:fc:de:3f:b1:36:9e:e4:3c:1f:99:a5:
bc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F0:00:23:7F:F5:DD:E6:7B:32:C7:C3:B3:F4:FE:46:27:0C:8A:27
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wvAAI3_13eZ7MsfDs_T-RicMiic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.68.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:12:98:a2:cf:d9:4c:27:b1:2f:07:84:65:5e:fb:8a:c1:1b:
33:81:6d:6c:0f:84:c3:f8:54:45:b1:f6:1c:de:f3:66:18:42:
a2:e2:db:53:83:eb:22:35:16:ae:5b:35:80:0f:11:b4:a0:71:
ca:97:a8:59:a3:18:40:e4:03:6b:79:db:c8:77:ec:8c:77:e2:
93:1f:88:fb:e2:86:4d:2f:1e:de:67:08:9b:43:93:3a:f6:1e:
cd:16:9d:d9:e5:21:d8:13:5d:8a:0f:2e:84:12:f8:09:02:9f:
b6:ac:a7:e9:2e:30:be:86:3d:f2:fc:c5:77:e3:e7:92:1d:4d:
0d:49:da:03:60:18:70:26:05:5b:16:af:82:ab:a9:26:35:d7:
a8:c1:41:b1:1f:e1:65:6d:ce:c3:a8:27:37:58:97:d3:d7:12:
d2:b7:a1:0d:5a:3c:e6:cb:f5:f3:d5:63:69:ef:da:2b:1a:71:
ef:a5:60:5f:a3:70:66:af:77:40:bd:02:aa:78:be:ae:a3:f7:
eb:b9:e0:75:39:93:98:59:76:13:5a:ea:2a:3a:d3:3e:57:d9:
0d:41:b2:64:1f:a3:9e:f2:c4:2a:24:11:f4:13:80:aa:11:4d:
e7:69:34:52:d4:d4:4a:a2:e9:93:0c:43:b4:4d:b7:6f:bc:19:
79:0e:3a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 20:28:58 2026 by rpki-client