Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/wkiX2_MkGI6s4bhIcjnfzVm0BP4.roa
File: wkiX2_MkGI6s4bhIcjnfzVm0BP4.roa (raw, json)
Hash identifier: O4bchmhyBEXRfLaloVcQLWKcvyzBDfrRM8IrejRYjOU=
Subject key identifier: C2:48:97:DB:F3:24:18:8E:AC:E1:B8:48:72:39:DF:CD:59:B4:04:FE
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01A0F15D0459772E507DA5FB19A3D8C4FD2F
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/wkiX2_MkGI6s4bhIcjnfzVm0BP4.roa
Signing time: Wed 30 Sep 2026 08:10:00 +0000
ROA not before: Wed 30 Sep 2026 08:10:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210415
IP address blocks: 45.130.163.0/24 maxlen: 24
45.137.139.0/24 maxlen: 24
91.132.30.0/24 maxlen: 24
185.246.15.0/24 maxlen: 24
201.49.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:5d:04:59:77:2e:50:7d:a5:fb:19:a3:d8:c4:fd:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Sep 30 08:10:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c24897dbf324188eace1b8487239dfcd59b404fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0d:71:01:73:07:9a:7f:7e:ef:a0:52:85:03:
6e:3c:a9:d2:c7:c1:62:40:a7:04:29:9b:77:51:84:
24:cd:0b:a9:74:6e:26:19:c3:dd:21:f6:78:db:42:
6c:f5:95:0d:21:91:b8:11:f0:af:1f:80:8c:9f:9f:
dc:bd:ed:03:69:e1:67:4e:a9:16:48:8f:f3:51:07:
da:68:79:8b:f3:99:4c:dc:05:1b:8c:1a:5e:a1:0d:
86:37:ef:ae:7e:8b:32:e4:5a:2f:a5:e2:76:ec:c7:
6e:97:8d:b1:47:12:b7:17:c0:a0:b3:8a:c3:31:1d:
74:a0:78:80:80:4f:c1:c0:ff:f6:3a:f4:55:ac:23:
72:22:dc:30:37:31:70:cc:a1:f1:99:7c:85:2a:75:
ea:27:1d:40:57:8c:a3:30:fa:a8:db:b3:46:6e:54:
bf:40:d0:4b:09:4d:57:42:9d:44:59:3b:48:87:48:
ab:1e:f2:20:e4:1b:c9:69:e4:37:3c:fa:a5:ea:4c:
c2:04:31:61:32:98:99:4d:1b:31:47:6c:1c:42:98:
61:c7:01:28:9f:0b:84:5d:87:c4:6e:28:b1:61:8d:
14:ea:d9:d7:79:58:31:01:b2:94:de:4f:6e:f6:a2:
83:23:81:0c:72:94:99:0c:ef:8c:88:0b:95:0a:ed:
ba:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:48:97:DB:F3:24:18:8E:AC:E1:B8:48:72:39:DF:CD:59:B4:04:FE
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/wkiX2_MkGI6s4bhIcjnfzVm0BP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.163.0/24
45.137.139.0/24
91.132.30.0/24
185.246.15.0/24
201.49.189.0/24
Signature Algorithm: sha256WithRSAEncryption
11:69:01:85:c1:99:02:70:4b:c5:6f:14:58:95:f3:19:b7:b0:
72:ca:6c:53:de:7c:88:02:3f:c1:7a:e2:1e:7b:e4:78:e2:5e:
a5:46:43:9f:de:f9:03:be:ca:6c:3f:7a:37:6a:22:da:77:81:
d6:0d:56:a4:8b:c3:a8:51:e3:34:7c:94:32:5d:59:0c:4d:e6:
d7:24:dc:43:84:2a:3b:c9:91:35:05:a0:20:f3:6d:11:54:c7:
dc:21:a0:f3:bd:03:67:d3:fb:e2:80:4e:12:db:24:74:8f:ee:
8f:b3:9f:ff:c1:31:e8:cc:07:77:49:7d:b6:94:33:2c:11:99:
32:ff:55:3a:eb:5c:c4:79:27:80:8f:82:31:27:f8:4a:ba:13:
27:1a:f6:ed:52:bc:76:7e:ba:bb:81:4a:ab:bf:30:4e:95:ef:
c6:23:4a:f2:e7:61:24:b8:c0:14:27:d2:87:00:27:70:71:14:
a9:be:2f:d1:4c:90:ce:31:9b:c9:db:6b:f6:09:50:2f:7c:c9:
8c:15:0d:1b:e3:81:a0:71:a4:16:db:b3:22:2c:f2:05:2c:27:
a7:5d:a2:4c:a9:1e:4a:2e:1a:bf:23:b7:c4:11:26:9e:cb:26:
5b:6a:2f:05:17:de:90:43:dc:e6:68:95:9c:dd:8c:59:b3:c9:
70:62:38:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:33:07 2026 by rpki-client