Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/bf4eae-6ca9-4fb5-94ab-e5fffaf3a4f7/1/W4Jd97wklYPbtC1yRMX3CKRKmZA.roa
File: W4Jd97wklYPbtC1yRMX3CKRKmZA.roa (raw, json)
Hash identifier: 1Sm8Xnqv2nrDhx2KEVkLvXTxHHoxXzQJhfn447Uj43I=
Subject key identifier: 5B:82:5D:F7:BC:24:95:83:DB:B4:2D:72:44:C5:F7:08:A4:4A:99:90
Certificate issuer: /CN=04d85602cae861a1466a85a86cefb5acb038ab12
Certificate serial: 019E16065E06778435A5DC91A2572EA667D7
Authority key identifier: 04:D8:56:02:CA:E8:61:A1:46:6A:85:A8:6C:EF:B5:AC:B0:38:AB:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BNhWAsroYaFGaoWobO-1rLA4qxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/bf4eae-6ca9-4fb5-94ab-e5fffaf3a4f7/1/W4Jd97wklYPbtC1yRMX3CKRKmZA.roa
Signing time: Mon 11 May 2026 07:52:56 +0000
ROA not before: Mon 11 May 2026 07:52:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198798
IP address blocks: 45.135.140.0/24 maxlen: 24
45.135.141.0/24 maxlen: 24
45.135.142.0/24 maxlen: 24
45.135.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/bf4eae-6ca9-4fb5-94ab-e5fffaf3a4f7/1/BNhWAsroYaFGaoWobO-1rLA4qxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/bf4eae-6ca9-4fb5-94ab-e5fffaf3a4f7/1/BNhWAsroYaFGaoWobO-1rLA4qxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BNhWAsroYaFGaoWobO-1rLA4qxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:16:06:5e:06:77:84:35:a5:dc:91:a2:57:2e:a6:67:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04d85602cae861a1466a85a86cefb5acb038ab12
Validity
Not Before: May 11 07:52:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b825df7bc249583dbb42d7244c5f708a44a9990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6e:e8:14:ed:bb:fc:0f:f6:2b:7b:df:c4:1e:
60:0a:07:f4:1c:33:a0:d7:be:1f:48:f7:be:ba:27:
a8:ab:f2:88:f2:60:0b:74:40:5d:33:67:08:90:fc:
5a:9b:00:e8:b0:2e:72:9d:3b:61:0c:40:56:f0:ec:
44:9d:80:4f:55:28:bd:77:dd:1f:f3:e4:41:43:24:
14:bd:28:87:33:d3:b1:a4:47:68:37:1b:77:f4:53:
64:3c:b1:da:ef:45:4d:fe:cc:14:d9:fc:c7:2e:9c:
88:d8:23:95:51:bb:d4:48:36:76:ba:7a:7d:0d:af:
15:97:11:59:e2:8e:cb:0b:41:8c:92:52:23:91:3f:
62:ec:17:04:a4:a5:01:15:b7:38:8e:b0:dc:4b:86:
1e:4b:40:33:80:27:ce:9d:98:0f:bf:ed:5a:a3:9f:
e3:a2:53:44:cb:b4:8e:a1:0b:b2:2c:78:7b:cb:c7:
8a:3c:29:68:13:32:2d:23:21:47:a9:34:dc:42:20:
98:3e:13:1b:f4:6c:1f:b8:34:02:42:0e:39:33:e2:
77:f8:9d:e5:94:d9:4d:67:52:52:85:42:fe:8a:c0:
d8:42:60:9a:13:66:05:3f:31:d5:bd:6e:0b:4a:c2:
b9:02:04:b1:de:70:64:b0:e7:5f:ab:6f:60:48:29:
84:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:82:5D:F7:BC:24:95:83:DB:B4:2D:72:44:C5:F7:08:A4:4A:99:90
X509v3 Authority Key Identifier:
keyid:04:D8:56:02:CA:E8:61:A1:46:6A:85:A8:6C:EF:B5:AC:B0:38:AB:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNhWAsroYaFGaoWobO-1rLA4qxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bf4eae-6ca9-4fb5-94ab-e5fffaf3a4f7/1/W4Jd97wklYPbtC1yRMX3CKRKmZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bf4eae-6ca9-4fb5-94ab-e5fffaf3a4f7/1/BNhWAsroYaFGaoWobO-1rLA4qxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.140.0/22
Signature Algorithm: sha256WithRSAEncryption
93:2f:29:21:b3:bf:c7:d8:80:97:a1:e6:0e:61:4f:2f:34:32:
2a:9a:d1:8b:88:0c:47:99:38:80:78:8c:d6:3c:7a:04:67:9a:
28:10:1d:5c:36:d6:e9:52:f0:1d:ec:c9:7d:00:29:96:27:16:
bf:13:66:55:fd:ec:a3:a0:05:19:27:68:3f:b9:43:e5:06:9c:
f2:7b:02:b6:ce:c7:6b:79:32:85:43:a9:0a:dd:9c:cd:79:91:
8e:b7:12:e5:b5:2a:93:be:79:14:9a:ca:cd:24:41:1f:73:24:
c4:ce:6b:25:6f:b1:1e:98:aa:15:c9:d7:c1:6d:6e:1c:3c:43:
04:04:e8:84:e6:e0:f9:b8:8a:50:e7:2b:cf:fc:be:bf:73:ca:
78:f8:8a:eb:d7:69:1f:13:6f:8e:52:4b:5e:be:5c:30:64:52:
3e:0b:2b:66:dc:1c:1b:d2:c6:cf:b0:23:ae:1a:6a:a3:02:e0:
5d:4f:e4:4f:2a:f2:a8:af:7f:1f:84:ab:b7:04:73:e1:38:68:
e7:7f:7e:e3:79:aa:63:9e:54:0f:34:08:23:75:aa:71:8e:0b:
d8:53:9d:d5:9f:09:1e:43:86:84:68:1f:90:d8:1e:0c:be:0c:
8b:83:99:19:3c:73:d2:89:92:26:83:38:aa:b3:1f:82:81:ce:
db:be:94:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:45:27 2026 by rpki-client