Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/W3uokoIan0bL_6hGsLT2Lc4cFQY.roa
File: W3uokoIan0bL_6hGsLT2Lc4cFQY.roa (raw, json)
Hash identifier: lnmDhnBJ1en6JgsP5wQ9r3eh318nNpbuOqRdtOpx05A=
Subject key identifier: 5B:7B:A8:92:82:1A:9F:46:CB:FF:A8:46:B0:B4:F6:2D:CE:1C:15:06
Certificate issuer: /CN=f5d6b1d90ed4bf1651aa2270e6ecbac2d87922ac
Certificate serial: 019DFDF666D352C29E1CB98B16535B31EC93
Authority key identifier: F5:D6:B1:D9:0E:D4:BF:16:51:AA:22:70:E6:EC:BA:C2:D8:79:22:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/W3uokoIan0bL_6hGsLT2Lc4cFQY.roa
Signing time: Wed 06 May 2026 15:44:37 +0000
ROA not before: Wed 06 May 2026 15:44:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47277
IP address blocks: 81.85.82.0/24 maxlen: 24
81.85.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fd:f6:66:d3:52:c2:9e:1c:b9:8b:16:53:5b:31:ec:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d6b1d90ed4bf1651aa2270e6ecbac2d87922ac
Validity
Not Before: May 6 15:44:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b7ba892821a9f46cbffa846b0b4f62dce1c1506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b2:83:7d:5a:84:62:25:6f:45:1e:ba:eb:7d:
0a:29:23:74:7b:a4:80:3e:db:55:9c:47:36:18:6d:
ad:fc:4b:f3:60:81:ae:6b:1e:ea:45:0c:2c:ac:55:
d9:71:d6:6a:2e:36:bd:82:f0:05:55:9e:bb:63:50:
cd:77:f5:5a:6b:8c:17:98:47:ea:f5:03:3b:63:2e:
b7:05:0e:8e:1a:f3:22:46:1e:72:21:3a:cc:08:20:
d6:b6:a5:cf:76:67:c3:f5:70:e9:7f:22:57:25:6a:
ef:12:db:bc:b9:2f:b6:72:77:ee:2d:61:51:d7:59:
3f:11:59:ea:fa:02:8e:bc:4a:ed:42:96:fe:35:25:
8a:45:29:bb:a4:61:d2:ac:a7:fe:2b:9d:28:c4:e5:
bd:c7:10:fe:6c:5b:32:62:68:25:9c:ff:8d:4c:0f:
ed:4e:54:e2:33:ea:d5:0e:73:c5:15:9a:83:b7:3d:
7d:45:62:f1:3b:51:4d:c2:03:7e:69:bc:12:97:18:
de:b6:d3:0b:ab:c7:97:d4:1c:c9:cd:81:59:88:34:
2f:01:46:cb:7f:ba:c0:34:3b:6e:6a:5b:c4:25:d3:
79:6f:ee:62:7a:4a:6b:9d:53:96:10:4f:2c:f8:5b:
7a:54:3e:ef:21:77:94:a7:ab:27:2b:ea:1b:06:ea:
bb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:7B:A8:92:82:1A:9F:46:CB:FF:A8:46:B0:B4:F6:2D:CE:1C:15:06
X509v3 Authority Key Identifier:
keyid:F5:D6:B1:D9:0E:D4:BF:16:51:AA:22:70:E6:EC:BA:C2:D8:79:22:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/W3uokoIan0bL_6hGsLT2Lc4cFQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.85.82.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:de:94:27:6d:ff:30:cd:3c:37:d2:6e:81:c8:d5:7d:cc:e3:
f9:74:b0:bc:7e:a0:bd:93:05:97:25:00:85:03:58:e0:f0:ec:
f7:3f:33:0a:be:e5:a6:97:e1:cf:c5:d5:6c:8d:01:ea:3c:49:
89:83:29:9d:13:26:a6:cf:bf:83:37:68:35:20:e4:ed:c7:78:
cb:d1:a2:1a:fc:ad:2a:1f:4f:96:20:38:6d:d7:c4:ea:11:12:
dd:5b:26:3a:06:5e:20:d2:d1:d9:0d:de:af:02:7c:a9:77:57:
f4:66:84:49:e2:43:36:ee:7b:c5:37:0c:6e:c7:aa:5c:58:3f:
40:33:d3:fa:a2:7e:6b:d7:dc:78:51:f2:b5:14:50:62:d2:e2:
96:24:bf:dc:d0:41:3d:c4:37:be:7a:e9:f8:6f:33:d2:d9:eb:
52:73:9d:95:89:4a:c9:8e:3b:64:2c:92:7c:69:11:b4:a7:f0:
09:5b:52:92:f6:9c:4a:f6:a4:f2:14:c2:3b:87:f9:71:c1:e6:
25:49:0b:28:cd:e1:ae:75:31:af:96:dd:07:4f:68:fe:c8:36:
5b:8c:16:f7:37:8b:62:e0:44:fc:fe:50:04:a6:34:75:e0:a6:
52:f4:8c:43:69:a4:b1:bb:51:6e:13:17:68:1a:44:f4:ef:39:
5a:a5:3c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:26:10 2026 by rpki-client