Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Wpllp8x3IPSIu2NKqMIsX4CqA-M.roa
File: Wpllp8x3IPSIu2NKqMIsX4CqA-M.roa (raw, json)
Hash identifier: y6yVGF74iM63320M/aisDv7GfSSwpDKSPPaZofgGzow=
Subject key identifier: 5A:99:65:A7:CC:77:20:F4:88:BB:63:4A:A8:C2:2C:5F:80:AA:03:E3
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 019FD23DD629C58E8B3B570E9CDF6164798E
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Wpllp8x3IPSIu2NKqMIsX4CqA-M.roa
Signing time: Wed 05 Aug 2026 14:04:55 +0000
ROA not before: Wed 05 Aug 2026 14:04:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48031
IP address blocks: 45.134.156.0/22 maxlen: 24
45.134.158.0/24 maxlen: 24
45.134.159.0/24 maxlen: 24
78.136.248.0/22 maxlen: 24
88.204.40.0/21 maxlen: 24
185.232.16.0/24 maxlen: 24
185.232.18.0/24 maxlen: 24
185.232.19.0/24 maxlen: 24
185.246.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d2:3d:d6:29:c5:8e:8b:3b:57:0e:9c:df:61:64:79:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Aug 5 14:04:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a9965a7cc7720f488bb634aa8c22c5f80aa03e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7e:ef:09:35:ac:b2:81:a3:6b:0b:76:9e:db:
d1:7b:5f:4a:5c:54:a4:69:dd:ba:71:e0:07:d5:36:
67:c7:3b:96:28:1b:0e:36:de:fc:0f:ae:f4:0f:62:
f5:89:30:10:d1:b6:1d:4e:01:5a:6a:9a:3b:6f:ca:
cf:87:c5:0a:f0:7c:9c:d8:a1:cb:06:d8:c8:ea:cd:
19:bc:86:12:89:9f:5d:37:52:d5:95:7c:38:97:82:
27:27:68:69:cf:21:39:42:d1:ab:0c:e2:da:77:f9:
ee:bb:de:37:b6:ff:2c:96:9f:b4:cf:36:28:9e:40:
c3:c0:17:3b:27:42:56:18:1e:09:a0:00:a2:70:87:
0e:60:db:e0:72:d6:22:a7:f1:fe:c2:86:49:43:3f:
86:3b:8f:3d:13:94:76:63:c8:ff:6c:a4:0d:df:56:
7f:02:6c:5d:f8:e4:e1:f0:87:7f:a1:88:5c:d7:d2:
8b:3f:f2:fc:a0:9e:db:10:d3:00:ad:ed:d3:8e:4a:
0e:b1:36:82:3c:48:a4:82:47:61:15:0f:7a:8f:1b:
3f:a2:2b:29:e1:19:1a:e5:90:ca:3e:c6:39:ba:1b:
55:c4:20:e1:eb:86:5a:32:3f:f2:c4:f5:e6:b8:44:
ae:ec:e1:be:6a:fb:22:75:6f:11:a1:f2:31:d2:ee:
f8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:99:65:A7:CC:77:20:F4:88:BB:63:4A:A8:C2:2C:5F:80:AA:03:E3
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Wpllp8x3IPSIu2NKqMIsX4CqA-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.156.0/22
78.136.248.0/22
88.204.40.0/21
185.232.16.0/24
185.232.18.0/23
185.246.216.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:fe:3c:90:9e:69:2c:1f:1f:6d:47:83:d5:82:3d:f9:69:69:
a1:d9:fe:1f:d4:f2:06:a8:5f:3c:52:1b:37:64:51:9d:c2:7f:
38:2d:03:af:1e:75:77:e4:c0:30:e9:bb:a7:e7:ea:8d:c9:8d:
ae:9b:08:03:0e:d1:55:86:3a:d5:2a:51:7c:d0:39:23:b8:aa:
8f:31:b5:1c:f1:ba:e3:81:b8:8a:72:0e:4d:09:a3:5d:8d:6a:
83:37:5f:45:c2:8d:cb:98:31:23:aa:be:b7:6d:42:83:8d:b2:
92:25:6e:73:5f:f8:71:06:72:7d:ac:e5:68:7e:23:f2:01:14:
dd:1e:49:c3:54:d5:87:c6:68:8f:0e:98:ff:90:b6:8e:22:4a:
80:5b:08:09:d3:52:9d:fd:5d:0f:ad:b5:d0:aa:65:4a:92:cd:
66:e3:19:49:e4:cf:d2:7e:57:d0:ca:02:93:47:ac:59:62:ee:
eb:5e:bd:fb:66:dc:76:db:fd:6c:11:94:80:4a:7c:eb:b2:65:
23:44:99:94:05:18:ea:ea:62:c9:27:32:31:0b:6c:de:9e:2d:
a0:8d:6f:41:1e:49:a4:bb:86:cb:59:69:33:05:56:92:0e:bb:
42:14:ed:96:d7:3f:3e:d8:ea:3e:d6:3d:25:99:c5:83:9e:00:
c9:d7:dc:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:55:11 2026 by rpki-client