Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/wyD5rZUYnotDvDLBTn1HvdDE-sg.roa
File: wyD5rZUYnotDvDLBTn1HvdDE-sg.roa (raw, json)
Hash identifier: LP8H59Ja7nr0y53p7ISvyJuUcJ0QD06m9kkaSrByJHc=
Subject key identifier: C3:20:F9:AD:95:18:9E:8B:43:BC:32:C1:4E:7D:47:BD:D0:C4:FA:C8
Certificate issuer: /CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2
Certificate serial: 019F23691CBA86D966673858AD38C1B4BC0B
Authority key identifier: A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/wyD5rZUYnotDvDLBTn1HvdDE-sg.roa
Signing time: Thu 02 Jul 2026 15:18:38 +0000
ROA not before: Thu 02 Jul 2026 15:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34679
IP address blocks: 45.14.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 18:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1c:ba:86:d9:66:67:38:58:ad:38:c1:b4:bc:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2
Validity
Not Before: Jul 2 15:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c320f9ad95189e8b43bc32c14e7d47bdd0c4fac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:29:3a:7b:97:54:af:05:61:ea:b7:da:bf:5b:
5c:d2:be:64:ae:ed:1b:22:f0:45:68:c6:29:75:85:
f3:a5:03:9f:15:c6:fe:2c:39:8d:12:15:57:d4:e0:
cc:7f:19:89:1f:27:fc:81:43:f8:22:43:ba:a2:3d:
a4:fd:9a:86:d0:44:fc:74:f4:3d:8f:b6:d9:dc:c5:
86:d8:e9:19:03:93:6c:80:07:2b:cd:bd:36:95:4f:
ec:77:59:e9:27:c4:f0:cd:25:69:10:a0:9d:d8:64:
d9:39:f7:6b:ea:66:00:07:f4:95:97:d0:78:02:04:
5c:f1:ab:7e:a8:bd:44:3c:62:07:f2:83:dc:c1:ed:
ce:05:78:48:6e:e5:e4:ad:1b:e5:51:cf:10:d5:f7:
53:5d:5d:b8:2c:bd:5f:54:11:4b:e3:99:dd:25:2c:
2a:4e:5a:93:6c:ad:bf:26:55:39:98:c5:59:b5:17:
f7:86:3e:00:7d:8a:f9:c6:13:7a:22:55:35:38:f0:
b9:81:7c:53:67:82:70:7d:a3:cf:9a:e6:ac:0f:08:
e4:66:52:9f:ac:13:38:69:08:2d:b6:0a:79:1e:2a:
59:5b:64:c9:63:35:61:bc:c8:d7:e7:83:a2:96:bb:
14:6f:28:a8:12:9b:7b:75:6b:1d:d0:96:51:4e:b2:
a9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:20:F9:AD:95:18:9E:8B:43:BC:32:C1:4E:7D:47:BD:D0:C4:FA:C8
X509v3 Authority Key Identifier:
keyid:A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/wyD5rZUYnotDvDLBTn1HvdDE-sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.237.0/24
Signature Algorithm: sha256WithRSAEncryption
34:16:ca:f3:7e:1b:41:5e:3a:e4:d2:52:b0:e0:46:f1:88:e1:
01:3b:b5:10:2e:dd:f5:a4:8e:61:b6:2b:e9:dc:65:2c:89:1e:
49:52:e1:e7:bb:0e:9e:8f:7e:eb:d6:83:dc:cf:7b:75:be:9c:
bb:14:f8:11:aa:87:da:ee:a9:41:df:a2:2c:c9:0e:21:dc:67:
99:01:f9:f1:8d:55:8b:95:f1:d4:30:4c:1b:c3:08:ba:aa:eb:
8d:b9:fd:4b:58:e6:6b:e4:2e:1a:4f:76:63:5b:b2:d1:e9:7f:
48:30:67:25:b1:f2:fa:53:30:0b:bb:4d:4e:d8:db:59:9f:f7:
73:01:bb:c7:9a:a9:9a:f2:99:0b:1f:54:14:99:81:3c:bb:e4:
c0:12:7a:d3:de:8e:8d:68:d3:51:f5:14:09:3a:9d:dd:d3:3f:
a6:6e:2a:7f:81:c0:88:fd:ea:18:61:ce:84:7e:f9:6c:f7:1b:
a4:e3:62:a6:f4:22:3f:0c:1a:fa:ca:a8:5c:ce:c8:24:f2:28:
86:43:25:12:c2:d4:7c:bf:bf:a3:5b:33:6e:b8:ab:c0:50:44:
01:df:d9:2c:86:8a:62:29:67:f2:0f:bf:9f:1c:6e:18:69:e6:
84:bb:3e:7e:02:01:e1:4b:39:1d:32:70:87:eb:5c:74:cd:5b:
f3:95:4d:27
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaRy6htlmZzhYrTjBtLwLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3MTMwZTdkM2E3NjA5N2QwMmE5NThiM2YwMzk1ZGZkMTg3
ZDE3ZTIwHhcNMjYwNzAyMTUxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzIwZjlhZDk1MTg5ZThiNDNiYzMyYzE0ZTdkNDdiZGQwYzRmYWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ik6e5dUrwVh6rfav1tc0r5kru0b
IvBFaMYpdYXzpQOfFcb+LDmNEhVX1ODMfxmJHyf8gUP4IkO6oj2k/ZqG0ET8dPQ9
j7bZ3MWG2OkZA5NsgAcrzb02lU/sd1npJ8TwzSVpEKCd2GTZOfdr6mYAB/SVl9B4
AgRc8at+qL1EPGIH8oPcwe3OBXhIbuXkrRvlUc8Q1fdTXV24LL1fVBFL45ndJSwq
TlqTbK2/JlU5mMVZtRf3hj4AfYr5xhN6IlU1OPC5gXxTZ4JwfaPPmuasDwjkZlKf
rBM4aQgttgp5HipZW2TJYzVhvMjX54OilrsUbyioEpt7dWsd0JZRTrKpCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMMg+a2VGJ6LQ7wywU59R73QxPrIMB8GA1UdIwQY
MBaAFKcTDn06dgl9AqlYs/A5Xf0YfRfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHhNT2ZUcDJDWDBDcVZpejhEbGRfUmg5Ri1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt
MmVjZTA0ZTE4NWMyLzEvd3lENXJaVVlub3REdkRMQlRuMUh2ZERFLXNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy
LzEvcHhNT2ZUcDJDWDBDcVZpejhEbGRfUmg5Ri1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQ7tMA0G
CSqGSIb3DQEBCwUAA4IBAQA0FsrzfhtBXjrk0lKw4EbxiOEBO7UQLt31pI5htivp
3GUsiR5JUuHnuw6ej37r1oPcz3t1vpy7FPgRqofa7qlB36IsyQ4h3GeZAfnxjVWL
lfHUMEwbwwi6quuNuf1LWOZr5C4aT3ZjW7LR6X9IMGclsfL6UzALu01O2NtZn/dz
AbvHmqma8pkLH1QUmYE8u+TAEnrT3o6NaNNR9RQJOp3d0z+mbip/gcCI/eoYYc6E
fvls9xuk42Km9CI/DBr6yqhczsgk8iiGQyUSwtR8v7+jWzNuuKvAUEQB39kshopi
KWfyD7+fHG4YaeaEuz5+AgHhSzkdMnCH61x0zVvzlU0n
-----END CERTIFICATE-----
Generated at Tue Jul 7 00:18:19 2026 by rpki-client