Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/wkDhDr_SsN96X9kXV0Y2UXgMRcs.roa
File: wkDhDr_SsN96X9kXV0Y2UXgMRcs.roa (raw, json)
Hash identifier: mQK1vBfWGnexoaLq4CHPrdHK3U44AmVelxJeh/WjBCY=
Subject key identifier: C2:40:E1:0E:BF:D2:B0:DF:7A:5F:D9:17:57:46:36:51:78:0C:45:CB
Certificate issuer: /CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
Certificate serial: 01A17DA19C3BA33195B8DBE5FF3A207C9370
Authority key identifier: 1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/wkDhDr_SsN96X9kXV0Y2UXgMRcs.roa
Signing time: Tue 27 Oct 2026 13:51:45 +0000
ROA not before: Tue 27 Oct 2026 13:51:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206257
IP address blocks: 45.151.236.0/24 maxlen: 24
45.151.237.0/24 maxlen: 24
45.151.238.0/24 maxlen: 24
45.151.239.0/24 maxlen: 24
45.158.247.0/24 maxlen: 24
91.211.132.0/24 maxlen: 24
91.211.133.0/24 maxlen: 24
91.211.134.0/24 maxlen: 24
91.211.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:a1:9c:3b:a3:31:95:b8:db:e5:ff:3a:20:7c:93:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
Validity
Not Before: Oct 27 13:51:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c240e10ebfd2b0df7a5fd91757463651780c45cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2e:1d:2d:0c:4e:ca:dc:b8:83:17:e4:17:b4:
80:be:4c:67:1f:b7:03:aa:2a:b7:2a:0f:cc:d6:40:
b7:b4:e6:3d:47:a0:bd:a7:58:20:96:7a:c9:14:c9:
50:7b:aa:81:af:6c:ca:70:8a:63:d4:e5:e4:6e:d5:
b9:9b:5c:a9:f8:5e:60:c2:60:92:a8:bc:d6:42:6d:
a6:f1:d7:63:51:f4:28:0f:7b:f7:74:01:fd:c6:60:
e9:f8:c2:91:46:31:ab:fc:ad:35:ff:9c:74:80:1e:
5b:9a:19:73:4c:92:d0:5c:14:30:7d:44:02:44:06:
6d:dc:98:3f:ab:4a:25:c6:6e:b5:a4:57:61:dc:2f:
a6:fe:eb:c2:76:cc:ce:21:66:4d:37:49:3a:eb:ee:
d9:2e:d8:b9:55:f1:4b:8e:d9:b6:85:0d:fe:da:15:
5d:8c:bc:91:8f:14:e7:39:ca:23:06:54:a2:d3:f3:
36:e9:91:21:45:aa:66:5e:52:0f:f8:c4:0e:9b:87:
95:51:75:70:7b:ae:d4:b1:10:57:0c:d3:00:dd:aa:
9f:f1:67:34:15:da:18:8e:ae:28:27:bf:70:03:f0:
81:7c:66:ad:74:5c:5e:9c:8e:8c:5f:16:2a:2f:d5:
ed:a1:3e:60:93:2d:65:56:5b:b6:b1:c7:2c:05:39:
82:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:40:E1:0E:BF:D2:B0:DF:7A:5F:D9:17:57:46:36:51:78:0C:45:CB
X509v3 Authority Key Identifier:
keyid:1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/wkDhDr_SsN96X9kXV0Y2UXgMRcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.236.0/22
45.158.247.0/24
91.211.132.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:23:0b:d0:11:3d:0b:22:45:70:fa:bd:a8:66:af:5f:97:c1:
d6:5f:38:ce:d4:69:31:fa:fe:01:e6:3c:b4:b3:df:ed:e0:6a:
98:bb:32:58:5e:65:37:71:e9:12:ca:5e:45:10:38:20:05:28:
53:59:32:bb:22:6b:c1:ce:83:0b:58:4e:59:85:bd:d0:75:0d:
9a:ed:56:4a:68:dd:6f:d8:c6:96:bf:fb:6c:d6:34:b8:22:65:
b8:f4:85:56:fe:a7:c8:78:19:fe:1c:53:81:c5:eb:f6:de:0c:
ea:d9:be:ed:3f:51:8f:01:ba:22:26:ec:c4:6e:87:cd:38:2d:
d9:4f:b1:17:13:ae:d4:f2:5e:83:07:b1:98:f0:e4:9d:98:7a:
5d:e0:0c:a0:57:09:8b:32:2c:0e:92:52:d9:f8:65:00:2a:df:
44:c9:6b:c6:b9:a7:9a:1c:2c:47:dc:ce:41:73:4a:e1:df:d0:
20:c7:1f:49:d6:96:00:81:a1:b8:e3:3e:65:e1:92:a1:8a:31:
81:9b:8b:3e:ba:8d:e7:b6:03:fe:bd:88:bb:0d:2b:42:03:9a:
69:50:c1:61:ba:84:54:dd:ad:8b:6e:28:c6:47:f3:d0:e7:fb:
5a:21:df:f1:c0:0c:36:31:49:c9:22:99:5b:1c:16:30:44:ef:
96:45:63:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:33:08 2026 by rpki-client