Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/6klAqUDcmb5Fwl8MBme-xk1cjbY.roa
File: 6klAqUDcmb5Fwl8MBme-xk1cjbY.roa (raw, json)
Hash identifier: UMoOrcyMTbvRKtBDKMxd7U1itYMkpR/DOGCMbMTSLRU=
Subject key identifier: EA:49:40:A9:40:DC:99:BE:45:C2:5F:0C:06:67:BE:C6:4D:5C:8D:B6
Certificate issuer: /CN=5be979fb8e477304bb591d6b68eea73da94a815b
Certificate serial: 019CFC383B57E2F262564F628D35AFB98B34
Authority key identifier: 5B:E9:79:FB:8E:47:73:04:BB:59:1D:6B:68:EE:A7:3D:A9:4A:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-l5-45HcwS7WR1raO6nPalKgVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/6klAqUDcmb5Fwl8MBme-xk1cjbY.roa
Signing time: Tue 17 Mar 2026 14:34:29 +0000
ROA not before: Tue 17 Mar 2026 14:34:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201290
IP address blocks: 45.128.0.0/22 maxlen: 22
45.153.252.0/22 maxlen: 22
46.231.16.0/23 maxlen: 23
46.231.18.0/23 maxlen: 23
46.231.20.0/23 maxlen: 23
46.231.22.0/23 maxlen: 23
46.231.244.0/22 maxlen: 22
130.112.0.0/17 maxlen: 17
130.112.128.0/17 maxlen: 17
185.41.36.0/23 maxlen: 23
185.41.38.0/23 maxlen: 23
185.94.244.0/23 maxlen: 23
185.94.246.0/23 maxlen: 23
185.146.104.0/22 maxlen: 22
185.214.88.0/22 maxlen: 22
185.214.88.0/24 maxlen: 24
185.214.112.0/23 maxlen: 23
185.214.114.0/23 maxlen: 23
185.229.52.0/23 maxlen: 23
185.229.54.0/23 maxlen: 23
192.145.56.0/22 maxlen: 22
194.39.40.0/22 maxlen: 22
195.191.198.0/23 maxlen: 23
195.191.206.0/23 maxlen: 23
212.115.36.0/22 maxlen: 22
2a05:3600::/29 maxlen: 29
2a0d:6e00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-l5-45HcwS7WR1raO6nPalKgVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fc:38:3b:57:e2:f2:62:56:4f:62:8d:35:af:b9:8b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5be979fb8e477304bb591d6b68eea73da94a815b
Validity
Not Before: Mar 17 14:34:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea4940a940dc99be45c25f0c0667bec64d5c8db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:23:91:4c:88:7c:f1:52:41:09:9a:d9:8e:e1:
ed:64:8f:96:4f:98:05:9f:94:e8:fa:dd:85:90:71:
80:19:9e:14:d1:44:6b:18:b9:e1:ac:49:f5:2e:d1:
af:68:c6:cb:11:6a:ca:8b:b8:b2:15:18:ac:04:89:
f9:91:ce:0d:a4:9b:57:98:b5:9c:ea:a0:35:8d:f3:
ba:81:a5:40:bd:59:35:63:d9:c3:41:a2:ac:87:8c:
51:c0:10:44:95:66:14:9c:e9:d7:b8:67:34:97:80:
50:c4:06:54:2c:93:9c:d0:97:02:15:fe:93:cd:72:
2b:c1:cc:1d:0b:70:11:d9:2c:c4:ff:8a:c9:d4:33:
1e:57:4e:67:1c:5f:ff:e9:4b:4f:b1:c0:f6:e3:c0:
36:06:30:6f:6e:0a:7d:b3:e4:18:4d:86:52:44:e9:
4f:65:74:2f:0a:99:10:0f:45:62:44:7e:ca:00:6d:
17:bf:5c:32:4c:96:40:c8:24:4a:88:4b:58:84:42:
a9:e4:20:40:b8:4f:fe:5f:68:fc:8c:61:72:14:92:
40:a9:a7:e2:74:1c:e3:91:56:8d:67:29:51:49:92:
ff:95:20:16:c7:40:90:a6:52:a9:24:0e:36:38:49:
95:b4:70:28:99:91:96:84:d6:c5:12:cf:4f:70:de:
55:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:49:40:A9:40:DC:99:BE:45:C2:5F:0C:06:67:BE:C6:4D:5C:8D:B6
X509v3 Authority Key Identifier:
keyid:5B:E9:79:FB:8E:47:73:04:BB:59:1D:6B:68:EE:A7:3D:A9:4A:81:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-l5-45HcwS7WR1raO6nPalKgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/6klAqUDcmb5Fwl8MBme-xk1cjbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.0.0/22
45.153.252.0/22
46.231.16.0/21
46.231.244.0/22
130.112.0.0/16
185.41.36.0/22
185.94.244.0/22
185.146.104.0/22
185.214.88.0/22
185.214.112.0/22
185.229.52.0/22
192.145.56.0/22
194.39.40.0/22
195.191.198.0/23
195.191.206.0/23
212.115.36.0/22
IPv6:
2a05:3600::/29
2a0d:6e00::/29
Signature Algorithm: sha256WithRSAEncryption
3d:00:5d:18:3c:39:ae:ae:dc:38:eb:5f:b2:95:22:0b:31:41:
cb:b4:91:89:b3:0d:87:33:1d:cc:65:20:3d:fc:b8:e9:98:39:
09:fc:dd:6a:2e:45:7a:63:14:fc:ff:1b:ca:97:38:43:84:4b:
1c:d5:b2:36:50:f0:84:ea:5a:26:ba:b9:7a:cf:36:66:47:48:
17:87:e4:c6:54:56:19:b4:19:75:ea:f7:21:5e:1e:18:c3:9a:
26:db:ba:c3:09:8f:1d:c7:b2:0b:bd:6a:41:e4:e5:2d:85:a4:
7e:a7:55:55:ae:46:a1:4f:a6:94:6e:99:9b:98:1d:4f:b3:7b:
ea:d2:a4:64:f9:19:0d:73:be:92:a3:14:9a:a4:fb:df:71:07:
fb:6e:04:8d:61:54:35:b4:7f:a0:6f:34:1a:70:44:dc:98:c3:
0e:3b:7a:3c:37:9d:d0:5e:47:b9:e8:fb:cf:25:71:48:df:f7:
d0:1e:55:ee:ad:d8:09:9f:58:37:a6:f7:a5:d7:b4:fa:bc:7e:
d9:7d:f4:2a:c0:65:1f:3e:34:02:a4:24:d7:93:ae:0c:83:04:
a8:b4:94:e3:47:74:53:39:12:dc:08:41:8f:ed:72:c2:1c:8b:
ec:ac:c6:64:dc:14:d7:82:9c:31:c8:a8:2c:e2:a6:dd:f2:48:
67:73:b1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:13:22 2026 by rpki-client