Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/wHT_eMLVVj9Ye7YYwSHkP2sDEWc.roa
File: wHT_eMLVVj9Ye7YYwSHkP2sDEWc.roa (raw, json)
Hash identifier: +a5ZYiZbbKqVWCAGDiC/23NHgzdzMdyOxUtaLfQbP28=
Subject key identifier: C0:74:FF:78:C2:D5:56:3F:58:7B:B6:18:C1:21:E4:3F:6B:03:11:67
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 01A1895680279CB61C1FFE13BBD8211E7586
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/wHT_eMLVVj9Ye7YYwSHkP2sDEWc.roa
Signing time: Thu 29 Oct 2026 20:25:09 +0000
ROA not before: Thu 29 Oct 2026 20:25:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199453
IP address blocks: 45.10.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:56:80:27:9c:b6:1c:1f:fe:13:bb:d8:21:1e:75:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Oct 29 20:25:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c074ff78c2d5563f587bb618c121e43f6b031167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3e:d5:0a:2c:c7:e5:c4:b9:e0:6a:ec:e1:d5:
bb:b4:b5:a9:aa:30:7e:06:87:f1:5c:00:6e:d5:09:
44:d3:a1:21:e1:42:e9:d8:89:9a:9e:b3:3e:db:10:
42:d0:71:33:f9:f9:a2:99:38:ef:14:35:85:5a:dc:
fd:3f:21:51:be:35:30:c0:de:cb:1d:a6:41:fb:0a:
d1:7b:e8:03:01:72:6b:32:ec:ad:d0:f8:74:bb:00:
3b:2c:9d:af:f2:4a:d1:1b:ec:24:95:14:56:96:1a:
d5:59:cf:5c:a9:23:92:af:35:6a:fd:f3:d0:98:f4:
b3:33:e2:72:eb:86:0a:2d:dd:ab:52:0d:37:9a:f6:
53:c8:4c:b2:cd:50:fc:f0:ea:4b:c8:83:e0:f2:90:
34:64:77:5d:97:15:8f:d4:f3:94:6e:6d:03:fb:b8:
8a:c7:4f:c8:ff:09:25:ec:16:09:e0:09:27:9d:73:
55:d2:99:78:4d:f7:6c:cd:cb:03:ab:58:3d:de:a0:
7c:00:24:ae:97:50:3c:a8:76:a2:fa:52:e2:04:a7:
f5:97:75:c0:cd:de:b0:f5:4c:27:6a:da:71:32:ad:
bb:64:b8:cf:2b:fa:c7:52:40:48:a6:c2:df:9b:3d:
ad:9a:8a:5e:45:cc:2f:82:03:fd:92:52:c9:37:51:
f6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:74:FF:78:C2:D5:56:3F:58:7B:B6:18:C1:21:E4:3F:6B:03:11:67
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/wHT_eMLVVj9Ye7YYwSHkP2sDEWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.150.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:8f:ee:b4:2a:01:c3:6a:8a:9c:6c:5a:90:87:fc:09:03:98:
13:00:f2:eb:04:f3:ee:d0:b8:47:98:32:82:da:96:e6:74:60:
d1:6c:e9:14:b5:d8:ec:36:72:ad:66:95:6d:49:72:f8:6e:ec:
ac:e2:9c:15:b1:64:f0:cd:f2:62:9f:9b:c2:4f:f9:04:10:1c:
6d:d3:d3:a9:3d:07:de:51:45:7a:96:69:6a:67:f2:5f:84:05:
5e:e4:0f:ab:2b:a9:19:99:ca:08:25:37:3a:c4:82:a7:95:35:
82:85:d5:ad:1c:9f:26:8c:a2:94:c2:1d:5f:43:ce:76:e5:59:
d9:44:fb:29:11:2f:f4:98:64:0d:6a:1c:af:35:5c:b6:46:65:
42:ad:f6:99:43:35:9c:e3:11:e6:88:b6:70:f7:a5:1e:c4:2f:
57:65:0e:cd:d9:0f:84:03:64:c9:ca:91:f4:e9:4d:2f:0d:dc:
4c:c3:5c:77:c7:7e:37:68:b1:2a:20:f0:20:55:25:f4:f4:29:
30:ca:28:9f:a3:a5:1b:95:c7:ef:8e:17:d2:92:1c:4d:30:e7:
44:49:ff:66:48:19:7e:5c:c5:1d:91:09:ba:2e:a4:49:2a:a4:
6b:b2:eb:7a:d7:2e:09:04:52:59:08:ba:62:1f:8b:28:1e:ad:
79:9d:c0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:54:22 2026 by rpki-client