Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/wi4pwq_pbwyf-RifkawT_5o4jbY.roa
File: wi4pwq_pbwyf-RifkawT_5o4jbY.roa (raw, json)
Hash identifier: QtIyVI0mDcZKu2N+GCjxkT9Lyx1XzVHsblRr7n1YzG4=
Subject key identifier: C2:2E:29:C2:AF:E9:6F:0C:9F:F9:18:9F:91:AC:13:FF:9A:38:8D:B6
Certificate issuer: /CN=5df4ad87b8322cc949148e0d76621cea8358a685
Certificate serial: 019DBF3CCFCCA77404A585B5B34F690F3346
Authority key identifier: 5D:F4:AD:87:B8:32:2C:C9:49:14:8E:0D:76:62:1C:EA:83:58:A6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfSth7gyLMlJFI4NdmIc6oNYpoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/wi4pwq_pbwyf-RifkawT_5o4jbY.roa
Signing time: Fri 24 Apr 2026 11:25:26 +0000
ROA not before: Fri 24 Apr 2026 11:25:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206703
IP address blocks: 45.85.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfSth7gyLMlJFI4NdmIc6oNYpoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:bf:3c:cf:cc:a7:74:04:a5:85:b5:b3:4f:69:0f:33:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df4ad87b8322cc949148e0d76621cea8358a685
Validity
Not Before: Apr 24 11:25:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c22e29c2afe96f0c9ff9189f91ac13ff9a388db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:62:d8:28:dc:a1:07:62:5e:12:0f:f7:1e:f3:
dc:35:ae:36:13:74:78:bb:c6:42:6f:d1:c5:72:19:
cf:a7:7c:46:22:51:5c:12:62:e0:eb:64:1a:12:99:
cc:a4:85:71:26:d6:df:65:c0:70:5d:ee:2a:fa:95:
2d:f4:22:ee:83:11:61:b9:f8:5e:1a:fa:42:30:53:
13:37:2d:42:1b:97:6d:09:32:8c:1e:44:50:e6:13:
ab:8c:5b:f9:bc:40:56:ac:4c:1e:56:ba:14:0f:d8:
34:8f:1c:c8:ae:11:94:fc:46:92:33:fd:49:a2:f6:
c9:54:9f:51:e4:73:13:99:72:e1:85:30:59:d3:36:
03:b3:26:27:57:a7:32:ef:4a:e7:30:b8:38:cc:3c:
2d:81:a8:54:6f:18:4f:a8:07:40:da:6a:4b:e1:04:
8d:35:2d:bf:a9:29:fc:19:de:27:98:99:9c:0d:ef:
79:b7:4c:0a:cf:3a:90:49:c1:6a:ed:96:37:7f:b4:
56:7e:dd:22:79:f5:90:8f:48:6d:a0:86:1c:db:8f:
54:76:89:13:8c:68:8f:51:5c:74:a9:c7:4b:84:35:
c6:1d:ce:80:03:9b:94:2a:f9:e7:9c:7d:ef:28:22:
3d:84:0b:87:e7:15:35:02:12:39:e1:81:8e:1e:b4:
fd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2E:29:C2:AF:E9:6F:0C:9F:F9:18:9F:91:AC:13:FF:9A:38:8D:B6
X509v3 Authority Key Identifier:
keyid:5D:F4:AD:87:B8:32:2C:C9:49:14:8E:0D:76:62:1C:EA:83:58:A6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfSth7gyLMlJFI4NdmIc6oNYpoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/wi4pwq_pbwyf-RifkawT_5o4jbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.252.0/22
Signature Algorithm: sha256WithRSAEncryption
59:bb:df:94:a9:17:1a:9f:1f:09:58:f8:96:5e:9c:3d:55:5a:
d6:05:48:4a:51:64:fe:c0:a8:af:a6:bc:91:b9:b1:52:a7:7d:
25:2a:77:ec:27:eb:52:e6:81:19:4c:d1:91:ea:a0:03:7b:14:
5f:6e:81:13:9e:6b:41:63:97:40:97:00:ca:ba:2f:cf:c1:e2:
c1:22:85:e5:4a:10:a2:89:a9:0c:1c:b2:1b:25:e3:e8:2d:25:
46:54:93:0a:43:92:6c:3a:92:2c:1c:13:76:99:d9:66:c9:b4:
00:74:6d:84:6c:df:5b:fb:33:d0:c4:a1:61:df:b4:83:ac:6f:
53:19:78:71:ae:12:6f:f5:ec:61:74:93:ea:3f:50:f7:b3:f4:
7c:8f:3c:8e:b9:f0:73:11:f4:20:0c:6e:0d:4b:e4:68:88:16:
18:9d:0b:aa:ff:36:9a:ce:54:1d:4b:e2:38:1e:cd:63:90:2e:
7a:83:95:eb:15:70:2b:81:1b:f1:7a:3e:09:9d:31:a6:cf:ee:
09:72:35:7a:b1:83:6a:ac:d6:27:1a:11:e1:a4:27:2a:04:a8:
85:cc:97:1f:5e:50:6f:58:2b:5e:20:ea:e3:65:4a:27:ef:cf:
63:4c:e9:55:ae:c0:ea:aa:ab:68:97:ef:7b:99:1c:cc:b8:20:
11:36:58:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 04:25:34 2026 by rpki-client