Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/AWu_WHM93JRneofXM1YLkcteG3U.roa
File: AWu_WHM93JRneofXM1YLkcteG3U.roa (raw, json)
Hash identifier: qBRtmYIkSAD5sUFWA8So9jT67pkquNgEz925+bd/SZE=
Subject key identifier: 01:6B:BF:58:73:3D:DC:94:67:7A:87:D7:33:56:0B:91:CB:5E:1B:75
Certificate issuer: /CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3
Certificate serial: 019ECA5691F8288384C8A517319A7E6E83BF
Authority key identifier: C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/AWu_WHM93JRneofXM1YLkcteG3U.roa
Signing time: Mon 15 Jun 2026 08:12:11 +0000
ROA not before: Mon 15 Jun 2026 08:12:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214570
IP address blocks: 45.137.16.0/24 maxlen: 24
45.137.17.0/24 maxlen: 24
45.137.19.0/24 maxlen: 24
45.156.116.0/24 maxlen: 24
45.156.117.0/24 maxlen: 24
45.156.118.0/24 maxlen: 24
45.156.119.0/24 maxlen: 24
185.101.39.0/24 maxlen: 24
185.254.165.0/24 maxlen: 24
195.234.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ca:56:91:f8:28:83:84:c8:a5:17:31:9a:7e:6e:83:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3
Validity
Not Before: Jun 15 08:12:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=016bbf58733ddc94677a87d733560b91cb5e1b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9d:b1:11:fb:f9:77:8e:2c:f1:c4:4a:77:65:
b6:c2:79:9f:da:91:c1:69:87:ff:32:79:e5:f0:52:
1e:97:73:9e:eb:ae:53:e6:58:03:c3:73:f0:e6:0f:
62:d5:6d:59:a9:d4:03:5e:36:f1:7f:38:3a:35:5e:
b7:fd:8b:77:a8:e1:5e:8a:23:54:09:27:02:41:38:
36:5d:b4:48:bf:06:f6:c8:a9:8f:94:89:17:db:ef:
12:a8:f5:04:e9:c3:46:45:88:fa:9a:db:d9:3a:d7:
30:51:f3:af:40:8d:20:f5:9b:29:35:b1:cd:08:d8:
fe:be:2f:66:9c:47:01:96:37:05:bd:3d:64:36:ad:
dc:66:59:30:51:58:d0:d6:ba:24:b8:03:fe:c2:df:
5f:06:64:59:80:6a:ce:7e:0b:fe:4d:74:bd:df:37:
cf:a7:2b:83:08:79:9c:bc:17:8e:b9:f8:95:fa:a6:
e8:fa:a2:c5:08:fc:48:62:c2:68:53:db:48:50:8f:
d6:2d:cd:fa:92:b4:36:e5:1d:a6:33:88:4b:13:db:
26:20:be:3b:de:c7:da:8f:ad:94:cf:48:21:21:6d:
2e:66:4e:d8:ae:f6:79:c8:aa:20:3f:85:d1:a2:32:
1d:41:84:35:aa:13:47:b0:40:3c:85:61:4f:9b:0a:
81:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:6B:BF:58:73:3D:DC:94:67:7A:87:D7:33:56:0B:91:CB:5E:1B:75
X509v3 Authority Key Identifier:
keyid:C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/AWu_WHM93JRneofXM1YLkcteG3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.16.0/23
45.137.19.0/24
45.156.116.0/22
185.101.39.0/24
185.254.165.0/24
195.234.153.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:45:68:c6:5b:d1:d7:5a:7f:2a:e9:02:ef:41:32:63:ce:d0:
c3:d1:4b:55:6d:93:df:1d:65:ae:ba:22:c5:95:9d:ea:a4:5b:
99:b7:eb:95:8a:4a:47:e3:a1:e6:93:d1:17:80:f2:44:0b:ad:
07:4c:ed:07:eb:70:18:94:6e:85:f5:ee:2d:6e:bf:d1:cc:5a:
c1:cb:cc:3b:3d:cc:64:f0:b4:4d:17:bc:a7:0c:6b:6a:1a:fb:
e8:1c:b1:de:7c:fc:3e:fb:98:d5:35:2d:10:f2:17:23:3b:22:
e4:f8:0e:3f:09:c9:c1:8d:e2:7c:8d:a6:7e:98:d2:0c:66:5e:
e0:96:30:fd:10:ed:ff:68:b8:93:97:a6:b6:22:04:3a:7a:c9:
fe:47:0e:90:94:08:35:22:5e:d4:90:08:f0:77:d3:2f:2e:79:
ca:ec:e9:44:c5:d4:f2:43:90:13:3f:b7:d9:c2:90:b2:a4:74:
1f:64:cf:5c:4d:39:a5:29:8d:ed:a1:fd:bd:0a:49:3b:42:bb:
31:a5:96:91:38:dc:93:8d:f4:46:9b:f2:62:78:5f:3c:64:0f:
51:09:89:8a:0f:a8:1a:c2:5e:cc:f6:fd:87:b8:54:92:d0:1b:
a1:54:83:1b:d4:3b:a4:22:b6:98:97:04:a2:1a:78:ec:72:a3:
79:6d:ec:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:49:01 2026 by rpki-client