Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/woAOb4AN3cSy4oY_QAjYETncO0E.roa
File: woAOb4AN3cSy4oY_QAjYETncO0E.roa (raw, json)
Hash identifier: nKozfVGE5cnQbfzUetkE8F54sr9HFGBho4qeVuXBxKk=
Subject key identifier: C2:80:0E:6F:80:0D:DD:C4:B2:E2:86:3F:40:08:D8:11:39:DC:3B:41
Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial: 01A04C9A2732CFB8DDDFEB8912B432319441
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/woAOb4AN3cSy4oY_QAjYETncO0E.roa
Signing time: Sat 29 Aug 2026 08:19:26 +0000
ROA not before: Sat 29 Aug 2026 08:19:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44854
IP address blocks: 45.113.237.0/24 maxlen: 24
93.114.180.0/23 maxlen: 24
2a10:e300:20::/44 maxlen: 44
2a10:e300:26::/48 maxlen: 48
2a10:e300:27::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4c:9a:27:32:cf:b8:dd:df:eb:89:12:b4:32:31:94:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Validity
Not Before: Aug 29 08:19:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c2800e6f800dddc4b2e2863f4008d81139dc3b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e7:bb:9a:55:9a:22:ba:28:45:b2:1d:0d:2f:
0b:79:20:3f:fa:36:af:16:a0:db:6b:7f:33:21:79:
ce:25:20:1b:72:a6:9a:3e:05:70:a3:02:e9:98:e6:
94:d9:c5:eb:79:8a:f2:90:38:d8:06:42:9a:3a:2e:
05:cb:a3:78:53:58:4b:84:1e:8b:37:07:98:63:fc:
26:cb:4e:40:ba:5c:cd:76:b1:b7:97:92:f6:c0:c0:
13:40:23:cd:a5:3e:b3:59:dc:be:cf:b7:b3:98:2c:
2e:1a:53:90:b2:1c:43:ab:cf:45:15:cb:d8:d2:c1:
43:22:cd:1d:58:05:3e:de:9c:86:74:bd:cc:19:ad:
81:25:55:a4:50:51:dd:e3:9c:e8:54:ee:54:00:f9:
0d:f2:2e:a6:66:14:94:c3:7d:12:c8:ff:99:86:83:
3c:69:4d:e1:fa:23:22:68:d4:52:72:2c:c6:9e:df:
60:15:93:37:de:9f:10:a0:21:0b:7d:fe:30:59:ed:
31:f2:52:49:a0:66:0e:1c:90:b8:f5:0f:ae:71:34:
d4:33:49:d1:25:d1:6b:a5:33:da:61:86:f4:cd:09:
c1:cb:ed:c1:b3:92:a9:5a:39:62:36:b8:e3:e4:c2:
39:53:fd:db:2d:83:e9:29:c2:55:af:a3:20:66:61:
02:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:80:0E:6F:80:0D:DD:C4:B2:E2:86:3F:40:08:D8:11:39:DC:3B:41
X509v3 Authority Key Identifier:
keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/woAOb4AN3cSy4oY_QAjYETncO0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.113.237.0/24
93.114.180.0/23
IPv6:
2a10:e300:20::/44
Signature Algorithm: sha256WithRSAEncryption
37:c9:bb:a0:78:28:90:4e:ed:0c:40:40:ba:90:04:98:4e:28:
07:20:3e:8c:fc:d5:f0:8f:cb:b5:65:b3:99:df:1b:3e:a1:31:
06:81:bf:c9:d7:21:c6:35:d1:97:1e:a1:cc:77:95:c9:e6:46:
e2:15:fe:a7:57:c9:5f:cd:d7:a7:35:23:79:35:76:f7:7a:6a:
ba:0a:17:64:db:62:4a:cf:24:b7:a9:a5:ef:4f:bd:87:82:43:
b4:6d:7e:1c:5b:f9:83:1d:d0:b1:c5:80:65:dd:96:db:af:7e:
fa:60:90:bb:b1:fd:66:c1:28:45:04:8f:b2:da:85:a6:a3:a8:
46:06:88:20:17:31:02:7b:08:a8:e9:21:54:f3:37:c3:3d:94:
48:11:51:1a:b3:65:f1:92:6f:49:30:a5:15:4b:be:8a:cd:d7:
29:cf:76:6c:d8:fc:75:d9:f3:89:ca:bc:ea:11:a2:08:6d:f1:
0a:72:52:db:67:c5:42:2c:78:fb:bf:b0:9d:a3:75:9a:42:88:
5b:a9:69:36:ed:da:46:5b:8a:0d:81:4c:0b:3d:37:c5:4b:f9:
f6:6e:5e:6b:25:c5:73:3c:6f:d9:e4:dc:0f:b5:ff:ed:24:9a:
6f:3d:3d:64:4c:ba:d6:4f:97:10:6d:df:cd:73:f7:d3:6e:9a:
4e:94:41:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:41:03 2026 by rpki-client