Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Wy3sFCPbOpJAbbw7Fuzn38j2mdw.roa
File: Wy3sFCPbOpJAbbw7Fuzn38j2mdw.roa (raw, json)
Hash identifier: +XrELBwAHuqTDhlzQx2bisAVXK9xWzbv0Fs17+DiBlY=
Subject key identifier: 5B:2D:EC:14:23:DB:3A:92:40:6D:BC:3B:16:EC:E7:DF:C8:F6:99:DC
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019E97964E6B624460BCF7910BF48FFCEBA6
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Wy3sFCPbOpJAbbw7Fuzn38j2mdw.roa
Signing time: Fri 05 Jun 2026 11:41:10 +0000
ROA not before: Fri 05 Jun 2026 11:41:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216300
IP address blocks: 45.87.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:97:96:4e:6b:62:44:60:bc:f7:91:0b:f4:8f:fc:eb:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 5 11:41:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b2dec1423db3a92406dbc3b16ece7dfc8f699dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1c:b1:78:0c:57:7d:0a:e1:eb:ff:e9:f8:d8:
84:28:0a:a8:46:da:73:ca:f8:47:73:80:ce:4e:fa:
e4:01:6a:15:d9:f8:ba:02:07:a9:0f:61:f0:19:38:
d5:36:6d:f4:ea:88:fc:7a:b4:06:82:6b:f9:f6:bb:
7f:07:49:e2:1a:2a:ce:0a:51:de:f1:aa:7e:8f:53:
3b:8f:f1:e5:85:9a:45:a5:8c:65:ca:8d:04:3c:82:
ba:b5:3d:27:31:fa:48:79:d8:54:88:2e:be:b3:71:
d0:b2:75:d5:61:17:9a:fd:05:bf:c8:8f:37:60:4c:
fa:39:b1:27:15:cf:b2:87:ca:c5:4e:7b:6d:19:41:
a2:81:ae:bf:c5:3b:51:ea:9b:e9:5a:22:f3:bd:95:
79:82:38:90:9b:73:ef:96:f7:38:ca:19:45:94:50:
98:02:e1:44:52:b6:41:5c:8e:a5:3f:46:f5:8e:71:
67:4f:19:2a:9f:67:68:2f:4c:45:d7:3e:1b:78:bc:
a1:58:ee:7d:ab:82:a8:2b:c6:1f:af:71:bb:41:92:
72:ea:a7:ff:2a:0d:cd:2e:d2:be:f3:95:5f:65:89:
43:71:4e:41:8d:b4:71:df:d7:ed:00:1d:60:ff:7c:
66:23:da:f0:8a:7e:7c:26:aa:dd:18:07:96:88:e0:
df:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2D:EC:14:23:DB:3A:92:40:6D:BC:3B:16:EC:E7:DF:C8:F6:99:DC
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Wy3sFCPbOpJAbbw7Fuzn38j2mdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.121.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:7c:73:44:8f:48:2a:ec:2f:eb:e8:16:0b:d0:e6:b7:49:a7:
b5:d9:27:12:d8:56:9a:82:86:6e:ef:3d:f9:2e:06:23:2d:c7:
a6:d7:92:4d:f4:36:07:4e:d1:f1:5b:74:2f:25:03:45:cc:0b:
6a:12:04:1a:67:39:b5:88:de:28:f4:6b:93:eb:15:ea:28:02:
ff:46:ed:c3:d9:05:14:2d:52:d8:04:e7:8e:74:01:88:91:e0:
36:b4:71:6d:0b:69:b7:5f:56:03:e9:cd:cd:f2:ac:de:ad:5d:
e9:fa:cf:0f:30:d3:30:ed:5d:22:a2:d1:f4:ce:b2:98:a2:b8:
4c:45:0a:ea:fe:cc:d6:b5:52:e1:1c:16:74:9a:53:89:3c:52:
23:4f:fb:61:ac:4b:6e:47:e6:63:f1:0d:16:94:65:0c:1d:f3:
42:9b:e3:16:30:d9:2e:4b:13:32:7a:03:ec:56:82:ab:5d:26:
53:e9:bc:0a:47:25:00:85:47:47:ca:2a:3b:72:fe:31:70:60:
5f:3b:fa:4c:f3:46:cb:6a:e2:a8:fe:ef:83:bb:1e:f3:94:44:
ea:f2:ab:22:2d:91:46:ad:4b:dc:6e:9b:08:c9:11:6d:c3:6c:
3c:af:42:de:bd:3c:1b:cb:27:c2:62:07:6d:1d:96:1d:32:c2:
6b:4b:93:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:19:41 2026 by rpki-client