Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/WtYlW8E3-Cpwggd8_lNnBtRvx3I.roa
File: WtYlW8E3-Cpwggd8_lNnBtRvx3I.roa (raw, json)
Hash identifier: LODSZfRKT8SWMwcXcavi2c54WYMjniJJcDE39gX4M2U=
Subject key identifier: 5A:D6:25:5B:C1:37:F8:2A:70:82:07:7C:FE:53:67:06:D4:6F:C7:72
Certificate issuer: /CN=4587a688a89a989949416a819cc4a80dea454c9d
Certificate serial: 01A1352665A4522C28837391AAD56F0CA60E
Authority key identifier: 45:87:A6:88:A8:9A:98:99:49:41:6A:81:9C:C4:A8:0D:EA:45:4C:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/WtYlW8E3-Cpwggd8_lNnBtRvx3I.roa
Signing time: Tue 13 Oct 2026 12:04:31 +0000
ROA not before: Tue 13 Oct 2026 12:04:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13009
IP address blocks: 46.235.168.0/21 maxlen: 21
62.89.144.0/24 maxlen: 24
83.98.10.0/24 maxlen: 24
85.118.0.0/19 maxlen: 19
94.199.144.0/21 maxlen: 21
178.250.96.0/21 maxlen: 21
185.65.100.0/22 maxlen: 22
185.81.160.0/22 maxlen: 22
185.81.162.0/24 maxlen: 24
188.95.128.0/21 maxlen: 21
212.44.20.0/24 maxlen: 24
213.146.128.0/19 maxlen: 19
213.146.146.0/24 maxlen: 24
2a02:2998::/32 maxlen: 32
2a03:a000::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:26:65:a4:52:2c:28:83:73:91:aa:d5:6f:0c:a6:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4587a688a89a989949416a819cc4a80dea454c9d
Validity
Not Before: Oct 13 12:04:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ad6255bc137f82a7082077cfe536706d46fc772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:91:1e:4e:70:99:1b:27:5d:d0:59:09:6f:fb:
c6:db:ff:47:7e:8f:bf:00:15:8e:4b:8a:ec:4e:ae:
09:f4:30:1d:a4:b8:95:5b:a4:03:c1:a3:2a:70:09:
bf:29:5f:09:9b:ca:75:ec:49:a3:d2:a5:3f:18:3e:
56:53:03:a5:44:ef:cf:7e:ca:5c:fd:e7:50:10:8c:
8b:f3:70:f2:f3:c0:fd:2e:c5:b0:cb:2c:fb:d9:ad:
ba:eb:2c:84:19:c3:33:d7:06:37:4b:1a:f4:cf:b6:
48:42:23:0b:41:73:a9:16:ad:d1:4a:9a:08:1d:2e:
29:48:bc:f6:0a:34:ef:e3:33:be:db:7e:e4:85:7e:
f1:6a:9e:7c:b5:9c:91:37:52:83:e2:e3:22:6d:ab:
62:a5:f6:e9:51:d0:32:aa:2a:28:66:73:49:3f:29:
4a:c3:15:de:a9:1d:70:8e:f9:f5:e7:0a:84:bb:58:
d3:4f:5f:1b:9c:2a:e1:ba:ed:d0:2b:fd:7b:58:ec:
f6:3d:6d:f4:66:86:67:1e:c7:46:38:78:2b:73:2b:
42:1f:19:9d:40:37:61:90:2f:1a:6b:dd:93:3a:be:
da:49:ae:1f:1f:7d:9c:93:78:fe:ca:41:b6:1f:19:
ae:7d:e0:47:2a:e3:ec:5e:e2:c8:41:09:6c:79:ef:
5f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D6:25:5B:C1:37:F8:2A:70:82:07:7C:FE:53:67:06:D4:6F:C7:72
X509v3 Authority Key Identifier:
keyid:45:87:A6:88:A8:9A:98:99:49:41:6A:81:9C:C4:A8:0D:EA:45:4C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/WtYlW8E3-Cpwggd8_lNnBtRvx3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.168.0/21
62.89.144.0/24
83.98.10.0/24
85.118.0.0/19
94.199.144.0/21
178.250.96.0/21
185.65.100.0/22
185.81.160.0/22
188.95.128.0/21
212.44.20.0/24
213.146.128.0/19
IPv6:
2a02:2998::/32
2a03:a000::/32
Signature Algorithm: sha256WithRSAEncryption
2c:27:eb:e4:12:e3:3c:6d:56:b7:7a:16:32:73:b7:2f:1e:e9:
e7:6f:64:3e:7a:7e:22:52:fa:2d:7e:b9:37:6c:74:3e:b9:59:
93:52:43:6b:5c:12:3a:29:5a:3a:4a:30:a0:79:46:95:06:2a:
d3:15:63:81:5d:91:c0:6b:42:e4:09:16:3c:7e:c6:d5:0c:72:
56:ee:8d:90:bc:56:6b:b9:86:08:05:32:8b:40:14:07:b2:c7:
a2:4b:9e:ec:59:24:fa:2a:1f:16:28:51:41:72:69:70:07:c5:
ee:34:6c:48:6f:88:7d:4c:98:bc:ac:57:93:10:aa:1f:c5:c7:
74:45:d8:29:4f:d9:14:55:b5:23:fa:ee:f9:18:a6:45:5c:c9:
82:30:48:ef:0c:6d:a7:31:80:66:13:7e:1c:8c:9a:3e:4b:bf:
3e:18:e5:c3:f7:b1:e4:e9:ec:57:4b:5f:c4:cd:ec:cf:75:3c:
bd:15:78:82:36:63:c2:92:55:2c:ec:72:35:aa:cc:bd:47:26:
2a:82:f9:27:30:bd:84:c7:7f:b9:71:55:6d:c1:8a:4a:b9:75:
13:50:bf:ca:f3:1d:7a:72:cc:22:a9:86:83:32:10:5d:3d:20:
88:a2:dc:c0:ff:7c:3e:ee:47:7c:25:97:91:dd:b4:95:2c:f9:
bf:5c:4b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 20:24:52 2026 by rpki-client