Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/WEPh0fxXcZpSXshWTeTHa1sxGn0.roa
File: WEPh0fxXcZpSXshWTeTHa1sxGn0.roa (raw, json)
Hash identifier: l/jDbDM2uAOUFVh3W20QmmLeO55QuQCZFs/XNh6PYj4=
Subject key identifier: 58:43:E1:D1:FC:57:71:9A:52:5E:C8:56:4D:E4:C7:6B:5B:31:1A:7D
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019D68EAA25AE1E8D78518F9FB003F5DF83D
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/WEPh0fxXcZpSXshWTeTHa1sxGn0.roa
Signing time: Tue 07 Apr 2026 17:08:20 +0000
ROA not before: Tue 07 Apr 2026 17:08:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400992
IP address blocks: 45.150.195.0/24 maxlen: 24
45.159.79.0/24 maxlen: 24
185.121.12.0/24 maxlen: 24
185.121.15.0/24 maxlen: 24
185.196.41.0/24 maxlen: 24
185.210.154.0/24 maxlen: 24
185.218.16.0/24 maxlen: 24
185.218.19.0/24 maxlen: 24
185.223.82.0/24 maxlen: 24
185.228.72.0/24 maxlen: 24
185.232.205.0/24 maxlen: 24
185.236.25.0/24 maxlen: 24
185.236.26.0/24 maxlen: 24
185.236.27.0/24 maxlen: 24
185.245.34.0/24 maxlen: 24
185.245.35.0/24 maxlen: 24
185.250.180.0/24 maxlen: 24
193.17.183.0/24 maxlen: 24
194.5.65.0/24 maxlen: 24
194.48.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Apr 2026 23:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:68:ea:a2:5a:e1:e8:d7:85:18:f9:fb:00:3f:5d:f8:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 7 17:08:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5843e1d1fc57719a525ec8564de4c76b5b311a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6f:e7:51:62:c8:03:85:b4:3b:4d:6a:0c:22:
36:8f:5b:bc:f2:92:18:8a:19:2b:f7:78:d6:cb:3d:
a6:c5:9c:50:4c:c0:11:f4:71:04:ed:37:a4:01:5c:
fe:6a:d7:1f:6d:b3:24:05:1f:c5:96:b3:f6:28:20:
6d:72:5d:c0:b5:ba:ca:ac:9a:70:2e:fe:c5:45:05:
8c:c1:74:a1:bf:7e:54:f8:cb:21:77:47:be:d8:03:
a5:fa:c5:84:b9:13:82:ab:8c:6c:2e:26:fd:3b:ad:
11:53:b9:d0:c0:e1:f6:03:f3:31:d4:18:5c:8a:a9:
8a:0b:7d:cf:22:04:26:d9:20:43:b7:95:8c:af:b6:
ae:f7:b9:dc:cf:02:a1:0f:7b:c2:23:20:b1:f4:33:
42:2e:da:c2:25:2a:2f:04:d3:4c:6a:73:81:9a:13:
9c:9e:76:2a:19:e2:12:ec:9d:a6:9e:fb:a4:fe:8e:
c3:4c:31:a2:8e:99:26:ee:62:3f:b9:32:e0:f0:8e:
2c:b8:0e:b5:cb:2c:d6:e0:7e:62:da:81:6d:88:2a:
3e:5e:6f:ce:82:41:72:9f:94:f9:db:f2:45:b0:ca:
15:ce:67:ad:f9:59:2a:25:72:b4:11:9f:16:94:75:
a7:21:ea:2a:eb:75:19:29:45:3d:13:d1:80:32:ad:
97:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:43:E1:D1:FC:57:71:9A:52:5E:C8:56:4D:E4:C7:6B:5B:31:1A:7D
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/WEPh0fxXcZpSXshWTeTHa1sxGn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.195.0/24
45.159.79.0/24
185.121.12.0/24
185.121.15.0/24
185.196.41.0/24
185.210.154.0/24
185.218.16.0/24
185.218.19.0/24
185.223.82.0/24
185.228.72.0/24
185.232.205.0/24
185.236.25.0-185.236.27.255
185.245.34.0/23
185.250.180.0/24
193.17.183.0/24
194.5.65.0/24
194.48.142.0/24
Signature Algorithm: sha256WithRSAEncryption
70:33:fb:41:4d:1f:a6:14:18:43:76:72:98:86:09:0e:75:0e:
6f:9f:b9:eb:68:33:cc:65:d5:3e:18:ca:8a:75:8e:3d:2c:be:
c1:3c:81:b5:4b:73:df:6a:77:f2:73:dc:f9:67:c2:bc:06:29:
73:7a:a6:cf:3a:1f:47:9c:de:8e:7d:4c:a3:11:6d:3d:c3:63:
74:32:d9:14:b4:3a:78:cf:ab:b8:cc:00:62:96:dd:33:f2:4f:
4f:9e:82:b6:b8:a0:c0:a8:bd:5b:21:32:06:e9:44:18:dc:d7:
30:36:79:4c:1d:3b:61:06:8a:63:36:95:94:3c:ce:4e:45:43:
0b:17:8d:e5:e9:62:6f:ae:a8:8a:e3:e5:0c:d6:ac:51:93:4f:
5f:9a:cf:62:3c:dd:d2:17:aa:ed:2f:57:99:d2:de:d3:bb:48:
5d:26:8e:09:c2:ad:e5:4f:bf:e8:d8:50:f0:bd:5a:75:bb:ae:
a1:e1:b3:00:2b:b3:15:78:cb:42:73:7b:1c:60:11:ff:a5:f4:
23:60:87:9d:93:97:b2:2b:59:b5:ba:72:1e:e0:8c:ce:e7:80:
a3:2b:15:5b:80:05:0d:41:7e:61:22:65:e5:af:f0:56:b6:f4:
da:1f:b1:2b:cd:7b:ab:91:33:da:86:5e:1e:1f:e0:6e:0e:c6:
53:e1:86:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 10 06:07:26 2026 by rpki-client