Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/WvL3TLsDsH_VCnKyj73Smuh-DL4.roa
File: WvL3TLsDsH_VCnKyj73Smuh-DL4.roa (raw, json)
Hash identifier: 8dDTLDJ7PdZOFvBYc+fT5gPwj0p+vRI2olnXQTt7r4w=
Subject key identifier: 5A:F2:F7:4C:BB:03:B0:7F:D5:0A:72:B2:8F:BD:D2:9A:E8:7E:0C:BE
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019CAF519CFBC34EDD031C4D22C49AA26C4A
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/WvL3TLsDsH_VCnKyj73Smuh-DL4.roa
Signing time: Mon 02 Mar 2026 16:11:27 +0000
ROA not before: Mon 02 Mar 2026 16:11:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44559
IP address blocks: 45.9.12.0/24 maxlen: 24
45.9.13.0/24 maxlen: 24
45.9.14.0/24 maxlen: 24
45.9.15.0/24 maxlen: 24
45.9.16.0/24 maxlen: 24
45.12.112.0/24 maxlen: 24
45.12.113.0/24 maxlen: 24
45.12.128.0/24 maxlen: 24
45.15.153.0/24 maxlen: 24
45.83.27.0/24 maxlen: 24
45.83.84.0/24 maxlen: 24
45.83.85.0/24 maxlen: 24
45.83.86.0/24 maxlen: 24
45.83.87.0/24 maxlen: 24
45.83.150.0/24 maxlen: 24
45.83.151.0/24 maxlen: 24
45.86.71.0/24 maxlen: 24
45.86.76.0/24 maxlen: 24
45.86.77.0/24 maxlen: 24
45.86.78.0/24 maxlen: 24
45.86.79.0/24 maxlen: 24
45.88.168.0/24 maxlen: 24
45.88.169.0/24 maxlen: 24
45.88.170.0/24 maxlen: 24
45.88.171.0/24 maxlen: 24
45.88.178.0/24 maxlen: 24
45.88.179.0/24 maxlen: 24
45.88.181.0/24 maxlen: 24
45.89.96.0/24 maxlen: 24
45.89.98.0/24 maxlen: 24
45.89.197.0/24 maxlen: 24
45.89.198.0/24 maxlen: 24
45.89.199.0/24 maxlen: 24
45.128.55.0/24 maxlen: 24
45.128.56.0/24 maxlen: 24
45.128.73.0/24 maxlen: 24
45.128.74.0/24 maxlen: 24
45.128.75.0/24 maxlen: 24
139.28.235.0/24 maxlen: 24
141.98.160.0/24 maxlen: 24
171.22.128.0/24 maxlen: 24
171.22.133.0/24 maxlen: 24
171.22.134.0/24 maxlen: 24
171.22.135.0/24 maxlen: 24
171.22.136.0/24 maxlen: 24
171.22.137.0/24 maxlen: 24
171.22.138.0/24 maxlen: 24
185.106.97.0/24 maxlen: 24
185.161.71.0/24 maxlen: 24
213.59.113.0/24 maxlen: 24
213.59.114.0/24 maxlen: 24
213.59.115.0/24 maxlen: 24
213.59.116.0/24 maxlen: 24
213.59.117.0/24 maxlen: 24
213.59.118.0/24 maxlen: 24
213.59.121.0/24 maxlen: 24
213.59.122.0/24 maxlen: 24
213.59.123.0/24 maxlen: 24
213.59.124.0/24 maxlen: 24
213.59.125.0/24 maxlen: 24
213.59.126.0/24 maxlen: 24
213.59.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 01:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:51:9c:fb:c3:4e:dd:03:1c:4d:22:c4:9a:a2:6c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Mar 2 16:11:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5af2f74cbb03b07fd50a72b28fbdd29ae87e0cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:53:27:3a:95:93:b5:09:58:be:1a:e1:a4:2c:
09:5f:b8:5f:da:6f:cf:ba:eb:c4:e5:7b:cc:26:b2:
dd:91:f4:36:fb:af:25:36:66:89:d6:3a:15:25:6a:
83:e3:69:ca:4e:2a:4e:66:e4:39:71:78:96:b2:60:
69:52:48:e1:55:40:2e:16:aa:6f:e1:84:04:7e:07:
bd:17:c2:47:4b:8f:4f:a4:ba:f5:26:fd:d5:43:25:
30:61:67:ce:76:79:02:ef:2c:b3:1c:ed:4f:32:92:
91:26:71:90:df:17:a3:c9:97:75:2d:5a:9c:d1:f2:
39:12:05:6d:80:54:74:97:4b:a3:3a:e4:04:dc:35:
c6:d6:70:c0:f7:18:00:c6:14:e0:54:30:47:8a:1c:
ff:89:65:6c:43:88:d6:c8:2b:47:31:bd:71:7f:39:
75:4f:9e:f1:08:fe:62:db:94:ca:90:30:4c:6b:22:
71:ba:b1:aa:aa:8e:6f:fe:70:46:1b:f1:ad:d4:aa:
9b:38:6e:89:d8:0a:0e:63:de:77:82:83:4b:33:74:
e8:78:fc:69:a7:dd:b6:f3:fe:41:dc:80:a7:0e:5f:
14:af:83:07:41:a0:c7:b9:74:e1:2d:c3:60:33:f8:
5a:d5:b5:27:2b:9a:55:3e:b3:e6:28:c5:de:12:2c:
53:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F2:F7:4C:BB:03:B0:7F:D5:0A:72:B2:8F:BD:D2:9A:E8:7E:0C:BE
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/WvL3TLsDsH_VCnKyj73Smuh-DL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.12.0-45.9.16.255
45.12.112.0/23
45.12.128.0/24
45.15.153.0/24
45.83.27.0/24
45.83.84.0/22
45.83.150.0/23
45.86.71.0/24
45.86.76.0/22
45.88.168.0/22
45.88.178.0/23
45.88.181.0/24
45.89.96.0/24
45.89.98.0/24
45.89.197.0-45.89.199.255
45.128.55.0-45.128.56.255
45.128.73.0-45.128.75.255
139.28.235.0/24
141.98.160.0/24
171.22.128.0/24
171.22.133.0-171.22.138.255
185.106.97.0/24
185.161.71.0/24
213.59.113.0-213.59.118.255
213.59.121.0-213.59.127.255
Signature Algorithm: sha256WithRSAEncryption
bb:7e:6d:15:99:e4:26:66:8b:90:eb:2d:b5:42:aa:cc:06:c2:
cb:0d:f4:d1:24:c9:aa:4e:ea:d4:f2:cf:3a:65:e0:d1:07:6e:
dd:2a:cd:1f:be:f9:ad:39:f6:a1:a7:c8:60:23:d7:39:ba:a6:
53:27:bd:1a:0a:f2:d2:61:1a:9f:55:8e:12:70:a9:bb:88:f6:
31:d2:5a:53:58:3a:bc:56:2a:b2:c6:7e:85:7c:9f:0a:2f:b9:
d6:04:ff:e9:42:61:11:8f:21:40:c1:7f:fa:b0:61:c2:81:f0:
d8:8b:a8:b2:34:bc:e1:12:8d:cc:e8:af:98:15:a9:42:28:37:
6d:df:36:37:bd:dd:be:1a:2d:3e:41:b5:49:cf:46:c9:2a:69:
a3:19:68:2e:a8:09:bd:78:80:b0:1d:f0:ee:09:d6:8e:04:25:
f5:09:36:0d:df:72:c1:fa:43:aa:44:88:4f:5d:1e:a7:71:26:
99:ca:a7:2f:17:38:47:b1:37:7a:d7:e0:92:b8:1d:d0:5c:aa:
24:27:bc:2e:37:18:86:72:db:fa:71:71:89:d6:61:64:40:21:
49:0c:3b:23:aa:ed:f6:3a:0a:a7:84:85:f7:14:57:39:eb:d3:
09:3a:1f:44:5d:e3:6e:a7:cf:43:d7:2e:51:a4:c5:c0:78:e0:
db:43:e1:58
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Mar 6 08:32:52 2026 by rpki-client