Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Wqq8hcJ5_qHe3FOy5gyjzn5VLV4.roa
File: Wqq8hcJ5_qHe3FOy5gyjzn5VLV4.roa (raw, json)
Hash identifier: wetJeK8CO3AhAJFW3pen0Dh4d+HddZQ7MBElfTGhZSA=
Subject key identifier: 5A:AA:BC:85:C2:79:FE:A1:DE:DC:53:B2:E6:0C:A3:CE:7E:55:2D:5E
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01A0F33AED9A82ED583F4806F871E66A1F17
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Wqq8hcJ5_qHe3FOy5gyjzn5VLV4.roa
Signing time: Wed 30 Sep 2026 16:52:00 +0000
ROA not before: Wed 30 Sep 2026 16:52:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212667
IP address blocks: 5.182.116.0/24 maxlen: 24
45.15.255.0/24 maxlen: 24
45.86.3.0/24 maxlen: 24
45.90.44.0/24 maxlen: 24
45.90.47.0/24 maxlen: 24
45.128.130.0/23 maxlen: 23
45.128.228.0/22 maxlen: 22
46.149.174.0/24 maxlen: 24
46.174.192.0/24 maxlen: 24
46.174.193.0/24 maxlen: 24
46.174.194.0/24 maxlen: 24
46.174.195.0/24 maxlen: 24
46.174.197.0/24 maxlen: 24
46.174.199.0/24 maxlen: 24
188.64.140.0/24 maxlen: 24
188.93.136.0/24 maxlen: 24
195.96.141.0/24 maxlen: 24
212.18.98.0/24 maxlen: 24
212.52.13.0/24 maxlen: 24
212.60.6.0/24 maxlen: 24
212.107.24.0/24 maxlen: 24
212.115.48.0/24 maxlen: 24
212.115.50.0/24 maxlen: 24
213.166.92.0/24 maxlen: 24
213.166.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:3a:ed:9a:82:ed:58:3f:48:06:f8:71:e6:6a:1f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Sep 30 16:52:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5aaabc85c279fea1dedc53b2e60ca3ce7e552d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:18:92:8b:d0:29:1f:60:af:9e:dc:29:b8:7f:
00:02:05:13:b6:8d:82:17:0f:3b:22:31:c4:37:1a:
0a:e2:fc:0a:62:6e:42:07:d3:c4:6c:69:18:be:67:
1b:1e:84:08:12:b5:96:11:22:66:39:b3:b1:25:f5:
0e:19:2d:5a:dd:03:bb:2e:b5:9b:69:5d:50:e4:45:
f6:52:8a:25:36:ee:99:fc:15:c2:75:9c:91:bb:09:
3c:d3:3f:ce:7e:4f:74:43:36:b0:cd:7f:e6:42:6e:
b6:94:1d:45:fd:26:6e:05:aa:db:9e:cf:38:26:cf:
6c:5b:af:0d:2e:74:45:37:78:99:23:a4:0a:77:ab:
18:a9:36:23:3a:bc:55:bb:13:a5:e4:b6:37:6e:8c:
2e:55:d5:44:0a:a2:81:ca:ca:62:a8:b0:50:28:a7:
09:d4:b1:28:88:7d:1a:cc:11:e8:4d:40:63:95:bb:
89:81:48:94:e2:98:91:bf:18:82:ec:21:b9:2c:ef:
67:87:ef:c0:cf:ab:e1:e0:e0:56:d2:28:ef:72:2d:
68:fd:1e:05:e0:3a:2a:2e:b7:9a:7e:4a:0a:ad:ec:
7b:19:5b:bc:2c:c2:29:98:4a:13:a0:9c:d5:65:90:
ce:fb:f3:a9:2b:08:e3:55:ac:14:fd:8a:53:2c:b7:
63:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AA:BC:85:C2:79:FE:A1:DE:DC:53:B2:E6:0C:A3:CE:7E:55:2D:5E
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Wqq8hcJ5_qHe3FOy5gyjzn5VLV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.116.0/24
45.15.255.0/24
45.86.3.0/24
45.90.44.0/24
45.90.47.0/24
45.128.130.0/23
45.128.228.0/22
46.149.174.0/24
46.174.192.0/22
46.174.197.0/24
46.174.199.0/24
188.64.140.0/24
188.93.136.0/24
195.96.141.0/24
212.18.98.0/24
212.52.13.0/24
212.60.6.0/24
212.107.24.0/24
212.115.48.0/24
212.115.50.0/24
213.166.92.0/24
213.166.95.0/24
Signature Algorithm: sha256WithRSAEncryption
35:8e:d6:23:8c:6a:36:d5:e7:89:fe:6c:df:c5:64:62:34:14:
84:5a:8c:52:ef:fc:c2:cc:9b:95:bf:0b:2a:5b:5e:68:41:7b:
4e:25:f6:e8:b5:35:7b:9f:8b:7d:d8:20:d0:82:08:5d:ca:6a:
f2:f8:ee:eb:0d:a3:b3:e5:0d:4e:3f:fc:d7:48:7e:47:f6:96:
89:88:00:6e:3a:7c:5c:40:7d:6a:32:1b:da:93:47:9c:20:17:
45:4b:24:42:60:ca:42:d2:63:70:4c:70:6d:c5:7f:e9:ff:bf:
86:41:12:fd:22:1e:4e:51:52:73:ff:a5:6b:72:e9:9b:28:8d:
43:2f:72:a3:74:24:64:b2:67:46:fe:7f:db:ae:b1:b2:1c:c8:
44:22:38:e4:3a:c1:43:52:a3:84:29:06:bc:94:b7:16:ee:c0:
c6:ee:e5:9c:22:47:a1:8a:d6:88:0d:20:a8:ae:02:3d:3f:f0:
a3:5d:47:d5:35:28:5c:59:28:76:bc:f0:33:32:43:25:1e:d7:
aa:50:d8:aa:2d:f2:77:c2:fa:33:44:07:fc:77:a4:56:30:fb:
12:e8:9b:ee:43:6a:26:91:8d:a6:1b:70:f2:f6:fe:a3:ca:e9:
3f:73:d2:ca:8d:be:24:90:cf:cd:db:d6:e6:6d:f8:16:b7:91:
9f:34:53:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 14:28:56 2026 by rpki-client