Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/4WUIN7B1LUbtFgO_OnuV4j2LHV0.roa
File: 4WUIN7B1LUbtFgO_OnuV4j2LHV0.roa (raw, json)
Hash identifier: qeW3a+w8wnWqNiSTZboJhaQxDJzUQKeynwX9RQ2E2w4=
Subject key identifier: E1:65:08:37:B0:75:2D:46:ED:16:03:BF:3A:7B:95:E2:3D:8B:1D:5D
Certificate issuer: /CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
Certificate serial: 01A02E5AA5BDDA90DD14A37713DFA16A08B6
Authority key identifier: 5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/4WUIN7B1LUbtFgO_OnuV4j2LHV0.roa
Signing time: Sun 23 Aug 2026 11:21:27 +0000
ROA not before: Sun 23 Aug 2026 11:21:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58250
IP address blocks: 78.93.10.0/24 maxlen: 24
78.93.42.0/24 maxlen: 24
78.93.82.0/23 maxlen: 23
78.93.117.0/24 maxlen: 24
78.93.178.0/24 maxlen: 24
86.60.32.0/19 maxlen: 19
86.60.56.0/21 maxlen: 21
86.60.107.0/24 maxlen: 24
86.60.127.0/24 maxlen: 24
212.93.203.0/24 maxlen: 24
2a02:df4::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Aug 2026 20:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2e:5a:a5:bd:da:90:dd:14:a3:77:13:df:a1:6a:08:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
Validity
Not Before: Aug 23 11:21:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1650837b0752d46ed1603bf3a7b95e23d8b1d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:23:a8:e4:03:e8:19:8b:5e:e2:71:42:bc:3d:
c6:36:35:2f:31:ed:7e:29:bc:a4:14:3d:b1:8f:31:
c5:7a:fb:71:dc:48:fa:88:59:da:14:88:a0:4d:ee:
8d:f6:74:6b:50:3b:1e:13:f8:22:8d:7a:71:b9:a4:
1b:7d:21:94:59:5b:5a:b6:27:19:de:66:e4:d0:86:
e0:2c:75:fe:6c:18:1d:78:e3:7d:c0:da:8e:10:92:
49:6f:9a:ba:77:9b:9c:77:05:4f:27:ae:bb:4a:d7:
0a:c1:66:dd:5d:68:8d:da:2f:2b:2a:ae:98:f9:5a:
b0:8c:4f:fd:51:08:0f:32:81:f8:f3:bc:ed:00:96:
9e:c7:ee:90:f1:47:d4:8b:93:0f:d4:c9:c7:33:8d:
8d:a7:ac:69:cb:45:a7:56:1e:01:78:be:9b:45:dd:
d6:03:be:8d:b8:26:8e:e5:d0:29:24:fb:57:71:93:
46:c6:1e:ec:e4:e1:20:e1:2b:77:89:e2:bf:87:66:
4f:93:f4:81:68:e0:cf:75:6a:9c:69:dc:b6:14:9c:
1b:eb:76:d8:13:27:f3:ee:d4:df:aa:22:0a:20:e9:
5d:98:63:5e:cc:28:c4:ba:2b:44:be:52:94:48:a3:
c9:5a:a2:1a:42:d3:f7:2e:22:14:da:c1:e8:05:11:
5a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:65:08:37:B0:75:2D:46:ED:16:03:BF:3A:7B:95:E2:3D:8B:1D:5D
X509v3 Authority Key Identifier:
keyid:5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/4WUIN7B1LUbtFgO_OnuV4j2LHV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.93.10.0/24
78.93.42.0/24
78.93.82.0/23
78.93.117.0/24
78.93.178.0/24
86.60.32.0/19
86.60.107.0/24
86.60.127.0/24
212.93.203.0/24
IPv6:
2a02:df4::/32
Signature Algorithm: sha256WithRSAEncryption
19:1a:05:95:10:e1:fd:c2:ee:67:7c:b3:c5:d3:1b:0c:28:8e:
0e:a9:f0:41:70:68:3d:05:bb:c5:49:79:c9:55:71:fb:f5:4a:
50:aa:a7:57:05:fd:99:74:b7:57:63:48:14:7b:b4:46:b3:63:
2f:7c:27:43:be:60:7c:ec:8e:3a:88:52:55:6f:91:3a:e1:79:
a4:ad:0c:65:8a:04:42:56:1e:89:e6:ff:57:bd:1f:db:4e:5e:
de:10:bf:22:23:97:e8:40:11:07:54:8f:9a:09:a7:de:14:84:
27:7a:c2:29:55:9e:25:fe:81:ab:d9:66:9b:6e:59:7d:f2:d7:
92:2d:7a:a7:93:9a:ad:5e:fe:83:12:8b:a8:92:f6:64:97:33:
2e:e6:e9:ba:2b:b7:de:2c:22:57:43:3e:14:19:8d:cd:1b:43:
e2:14:e4:e3:55:34:23:5f:a0:da:b3:6a:7c:f3:56:f5:04:9d:
a0:8d:c0:4e:af:5d:61:d8:99:33:27:19:f7:27:af:f1:a2:d8:
e3:5b:e3:d4:40:a5:31:a5:0b:e5:c9:bb:64:50:6c:90:95:25:
2b:b5:0a:de:9a:92:7b:59:49:86:a4:eb:62:82:bc:db:7d:9f:
96:31:63:ad:7a:d4:bf:19:83:24:a9:bd:9c:96:77:09:4b:f5:
bd:99:58:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 06:35:19 2026 by rpki-client