Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/wdyKNrxwhe0hQFPgpbFd8GIMJWo.roa
File: wdyKNrxwhe0hQFPgpbFd8GIMJWo.roa (raw, json)
Hash identifier: RbgzySewKtx9TAH6TcdhMuuR0Znh/rlKOMrQT/bjDA4=
Subject key identifier: C1:DC:8A:36:BC:70:85:ED:21:40:53:E0:A5:B1:5D:F0:62:0C:25:6A
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01A0F33AECD9DAC7BB6B437171248F6EEA45
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/wdyKNrxwhe0hQFPgpbFd8GIMJWo.roa
Signing time: Wed 30 Sep 2026 16:52:00 +0000
ROA not before: Wed 30 Sep 2026 16:52:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12722
IP address blocks: 5.182.116.0/24 maxlen: 24
45.15.255.0/24 maxlen: 24
45.86.3.0/24 maxlen: 24
45.90.44.0/24 maxlen: 24
45.90.47.0/24 maxlen: 24
45.128.130.0/23 maxlen: 23
46.149.174.0/24 maxlen: 24
83.171.212.0/22 maxlen: 22
188.64.140.0/24 maxlen: 24
188.93.136.0/24 maxlen: 24
212.60.6.0/24 maxlen: 24
212.107.24.0/24 maxlen: 24
212.115.48.0/24 maxlen: 24
212.115.50.0/24 maxlen: 24
213.166.92.0/24 maxlen: 24
213.166.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:3a:ec:d9:da:c7:bb:6b:43:71:71:24:8f:6e:ea:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Sep 30 16:52:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1dc8a36bc7085ed214053e0a5b15df0620c256a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0e:cd:f7:2d:e4:19:8c:91:55:6e:af:38:d8:
30:ed:7a:46:0a:8f:34:36:53:0c:3b:25:a0:f8:9e:
2e:a5:c3:9a:ee:e3:52:5c:35:39:c4:61:74:87:92:
28:86:8d:9e:b5:50:e2:73:28:29:f5:2d:b1:3e:c4:
6c:5f:bf:b5:f9:1d:ea:b9:08:50:ef:3c:eb:2c:d7:
2f:b8:a3:3d:ed:e6:1a:7c:6a:2d:be:9c:0d:66:8b:
2d:4c:59:52:0e:b5:b6:9b:d5:f1:c2:6c:10:76:84:
e8:ca:0c:64:34:3e:36:57:6c:f2:15:50:8f:5a:a7:
f8:01:d0:e9:86:b5:5c:a8:7c:9f:d3:f0:8a:58:3f:
39:a2:22:76:35:99:b4:01:6e:cd:af:43:bc:41:dc:
61:a1:d6:15:2e:fe:0a:8d:ca:91:79:9f:8a:0d:9c:
54:22:23:04:6f:6a:8e:6a:97:31:5c:40:f6:b6:03:
78:05:29:3b:1f:c9:0f:b2:27:60:9d:2e:e2:c7:19:
e0:0f:d0:09:73:3a:66:2a:8f:0f:b1:83:b3:9e:0a:
80:d4:41:31:7e:43:b1:4a:d6:e9:de:c6:2b:68:d2:
32:35:73:47:4b:ac:89:0f:ee:b6:2e:b5:65:2e:6f:
25:c8:3b:6d:88:e3:64:56:79:c0:a5:4d:f8:f8:91:
71:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DC:8A:36:BC:70:85:ED:21:40:53:E0:A5:B1:5D:F0:62:0C:25:6A
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/wdyKNrxwhe0hQFPgpbFd8GIMJWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.116.0/24
45.15.255.0/24
45.86.3.0/24
45.90.44.0/24
45.90.47.0/24
45.128.130.0/23
46.149.174.0/24
83.171.212.0/22
188.64.140.0/24
188.93.136.0/24
212.60.6.0/24
212.107.24.0/24
212.115.48.0/24
212.115.50.0/24
213.166.92.0/24
213.166.95.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:41:c8:49:80:97:7a:1d:fd:fb:84:6b:d1:1f:17:63:02:99:
be:ad:18:55:2c:1c:27:2c:32:a8:0d:af:66:a6:f2:5d:47:af:
59:ab:94:ce:f5:03:41:d3:70:87:c9:77:8a:2f:53:0c:47:ad:
48:b1:83:d7:d2:b2:97:fd:11:a3:2d:6e:66:52:9e:3d:51:2b:
3c:5b:bf:ca:4c:8e:ce:95:14:ff:5d:12:84:36:c2:62:ce:73:
5f:27:8a:33:08:66:28:b3:5d:81:33:21:fb:40:26:6a:a4:b9:
bd:06:09:f9:75:97:c5:f3:9d:99:94:8a:20:18:fc:9f:9f:fc:
0b:94:a0:72:16:5d:73:6f:90:6e:c8:89:52:bd:16:31:75:f5:
f9:62:4d:00:be:69:b1:be:96:58:a5:f4:17:7c:97:c7:78:8c:
a3:bb:cd:c3:dd:fe:a6:d7:e5:d4:af:1f:a3:88:a9:7a:f3:32:
9f:30:cf:d4:1d:02:97:7a:04:28:5e:44:5c:47:8e:a8:10:39:
bf:31:75:83:6b:5b:40:cb:82:23:4a:22:9f:a8:60:2a:80:55:
2c:65:41:b2:36:33:36:5c:c2:dc:69:a6:f5:16:38:3d:01:cc:
89:4b:40:7f:d1:9e:39:68:c9:7f:c0:98:d9:1e:62:81:c6:a8:
66:bd:2b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:48:10 2026 by rpki-client