Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/WrS_BdHFX8rhoZjg9s5h8W4ieA4.roa
File: WrS_BdHFX8rhoZjg9s5h8W4ieA4.roa (raw, json)
Hash identifier: G6cNcr7kSmhgsDQLfQ5oCbsFpE9xHlF1FTMMsuw+x5g=
Subject key identifier: 5A:B4:BF:05:D1:C5:5F:CA:E1:A1:98:E0:F6:CE:61:F1:6E:22:78:0E
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 019FCD78868ECAEEE95142AB6EC1CF32A693
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/WrS_BdHFX8rhoZjg9s5h8W4ieA4.roa
Signing time: Tue 04 Aug 2026 15:50:55 +0000
ROA not before: Tue 04 Aug 2026 15:50:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44803
IP address blocks: 45.148.28.0/22 maxlen: 22
45.148.28.0/24 maxlen: 24
45.148.29.0/24 maxlen: 24
45.148.30.0/24 maxlen: 24
45.148.31.0/24 maxlen: 24
93.92.112.0/24 maxlen: 24
217.78.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cd:78:86:8e:ca:ee:e9:51:42:ab:6e:c1:cf:32:a6:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Aug 4 15:50:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ab4bf05d1c55fcae1a198e0f6ce61f16e22780e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:32:a6:99:dd:9c:24:00:d7:43:cf:ed:b8:73:
82:a0:00:78:41:74:ad:cb:0a:98:a8:c7:41:73:c4:
44:8d:88:dc:b7:f0:92:3b:ef:a6:e5:c3:4f:ea:fe:
6b:7a:1b:5a:40:d9:ca:80:43:36:cb:e1:6e:5b:8c:
bf:62:2a:99:70:c8:a9:5a:9c:22:45:c6:1f:1b:cc:
bb:3f:63:ec:af:83:76:0a:34:32:5a:33:04:0b:a1:
b7:89:8a:11:25:c7:3c:a4:ed:29:99:86:ed:e2:46:
c0:fa:14:13:eb:56:7b:b0:37:4c:4e:36:96:f8:7a:
ba:bd:12:d2:7a:6e:c3:92:a8:fd:c7:42:e8:90:71:
bf:18:b5:68:7f:ad:08:dd:74:b0:04:75:4f:39:d7:
d8:56:1b:9f:ae:d2:fa:e0:60:69:2f:d1:b9:7f:96:
15:71:58:a3:86:68:aa:d1:2d:06:e8:e7:e1:3a:57:
0f:f1:9b:20:ac:1d:1f:4b:20:73:f0:af:22:5f:d3:
fc:b2:70:63:e9:10:bd:99:1b:2a:93:2f:49:54:c1:
69:b4:27:56:a2:fc:a2:2a:63:65:1f:13:43:26:b8:
67:34:bd:6e:d4:99:96:81:6f:41:3e:10:2d:5d:f6:
c8:08:c9:8b:2e:d6:37:6b:0f:ec:16:8d:a5:01:ab:
bd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B4:BF:05:D1:C5:5F:CA:E1:A1:98:E0:F6:CE:61:F1:6E:22:78:0E
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/WrS_BdHFX8rhoZjg9s5h8W4ieA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.28.0/22
93.92.112.0/24
217.78.237.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:ae:4d:c7:06:8f:76:f9:13:25:49:89:62:f3:26:5f:c7:6b:
49:69:fc:3b:a9:fb:ba:00:47:76:a6:f5:58:98:1b:5d:8a:c7:
85:99:0f:09:68:a0:74:fd:35:5e:d1:8f:88:22:38:31:1a:58:
6d:da:8c:ca:3a:67:7b:24:b8:db:a6:0b:a4:10:68:8f:1e:c2:
0f:24:52:33:cd:c8:f6:78:30:66:76:4d:50:6f:06:27:dd:63:
04:3a:68:c4:04:47:2f:5e:d3:f8:4e:79:e6:7a:e5:c3:e2:ad:
49:06:88:08:02:63:3e:ca:46:09:4c:59:44:4f:de:0d:6c:c5:
92:4b:5a:b2:59:44:52:f6:eb:40:4e:3a:76:a2:82:72:53:8b:
34:8a:28:ab:94:d0:de:15:6a:cf:2a:97:92:a8:70:93:a6:f4:
b4:6d:85:19:7b:47:6b:9c:cc:fa:ad:cf:59:65:f8:2e:93:52:
a3:70:e2:d7:e0:ea:cf:72:38:8f:fd:41:95:4d:72:ef:75:95:
80:f0:db:60:94:2f:33:c0:f7:f4:f3:5c:d0:5a:69:b6:70:5d:
d1:4c:85:10:70:75:b2:48:3b:88:dd:0d:a0:4f:ee:d7:32:32:
c1:e5:06:0d:f2:55:4d:3e:24:48:01:7f:92:d1:2d:ed:5a:ca:
b4:d1:f3:79
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ/NeIaOyu7pUUKrbsHPMqaTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjYwODA0MTU1MDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWI0YmYwNWQxYzU1ZmNhZTFhMTk4ZTBmNmNlNjFmMTZlMjI3ODBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDKmmd2cJADXQ8/tuHOCoAB4QXSt
ywqYqMdBc8REjYjct/CSO++m5cNP6v5rehtaQNnKgEM2y+FuW4y/YiqZcMipWpwi
RcYfG8y7P2Psr4N2CjQyWjMEC6G3iYoRJcc8pO0pmYbt4kbA+hQT61Z7sDdMTjaW
+Hq6vRLSem7Dkqj9x0LokHG/GLVof60I3XSwBHVPOdfYVhufrtL64GBpL9G5f5YV
cVijhmiq0S0G6OfhOlcP8ZsgrB0fSyBz8K8iX9P8snBj6RC9mRsqky9JVMFptCdW
ovyiKmNlHxNDJrhnNL1u1JmWgW9BPhAtXfbICMmLLtY3aw/sFo2lAau9OQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFq0vwXRxV/K4aGY4PbOYfFuIngOMB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvV3JTX0JkSEZYOHJob1pqZzlzNWg4VzRpZUE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLZQcAwQA
XVxwAwQA2U7tMA0GCSqGSIb3DQEBCwUAA4IBAQCqrk3HBo92+RMlSYli8yZfx2tJ
afw7qfu6AEd2pvVYmBtdiseFmQ8JaKB0/TVe0Y+IIjgxGlht2ozKOmd7JLjbpguk
EGiPHsIPJFIzzcj2eDBmdk1QbwYn3WMEOmjEBEcvXtP4TnnmeuXD4q1JBogIAmM+
ykYJTFlET94NbMWSS1qyWURS9utATjp2ooJyU4s0iiirlNDeFWrPKpeSqHCTpvS0
bYUZe0drnMz6rc9ZZfguk1KjcOLX4OrPcjiP/UGVTXLvdZWA8NtglC8zwPf081zQ
Wmm2cF3RTIUQcHWySDuI3Q2gT+7XMjLB5QYN8lVNPiRIAX+S0S3tWsq00fN5
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:49:50 2026 by rpki-client