Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/wnaFms1j3dMT1o1VbGCf21a9Zu4.roa
File: wnaFms1j3dMT1o1VbGCf21a9Zu4.roa (raw, json)
Hash identifier: nJqKXhAEc+nqIIa4fFyvWNnxyjhCpBSsxPXJhQxjolI=
Subject key identifier: C2:76:85:9A:CD:63:DD:D3:13:D6:8D:55:6C:60:9F:DB:56:BD:66:EE
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019F89C323CE01CA791EB684263A82CEA291
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/wnaFms1j3dMT1o1VbGCf21a9Zu4.roa
Signing time: Wed 22 Jul 2026 12:18:14 +0000
ROA not before: Wed 22 Jul 2026 12:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 45929
IP address blocks: 45.92.4.0/22 maxlen: 22
45.92.88.0/22 maxlen: 22
45.149.192.0/22 maxlen: 22
45.159.244.0/23 maxlen: 24
136.144.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:c3:23:ce:01:ca:79:1e:b6:84:26:3a:82:ce:a2:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jul 22 12:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c276859acd63ddd313d68d556c609fdb56bd66ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e1:28:d8:7f:10:4d:d3:06:27:9e:ab:7f:6f:
8d:5c:69:64:e8:2b:8a:20:b8:24:5a:d3:91:6e:75:
28:f6:6c:0f:e4:d3:5e:26:14:b9:de:df:54:2e:0e:
2a:d2:3b:f2:b2:83:0f:d3:96:7d:62:b0:03:c1:cf:
e7:ec:ba:24:00:c2:86:15:1f:bd:37:18:38:cf:2a:
b1:04:a0:a2:ec:d7:2d:61:23:ad:cf:8f:ef:4d:05:
08:0a:da:5a:d2:fb:9f:81:1c:ad:bb:80:0f:65:bc:
18:07:54:7b:ec:5b:58:6c:41:c3:99:38:39:b9:d0:
b4:a1:af:04:db:5b:da:6f:4b:f2:bc:41:3b:aa:85:
65:d8:77:0a:47:73:72:3b:91:6a:50:21:48:fc:a4:
9b:9d:c5:01:c5:63:48:03:46:b6:d7:d7:8b:e8:d9:
e5:7a:0d:19:2a:d7:c2:6d:38:f3:aa:67:a0:dc:b0:
1e:4e:0c:91:cd:39:18:9a:72:d1:0d:05:41:60:4a:
62:c2:5e:cd:fb:43:f4:0a:bc:c9:63:3c:a8:59:da:
42:dd:9f:99:16:b4:26:62:cf:47:5c:6e:21:f6:c2:
e2:65:60:e6:da:c4:ee:4d:8b:77:9d:40:46:a9:27:
b1:10:70:7c:38:af:ee:93:ef:07:20:c5:80:d2:11:
cc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:76:85:9A:CD:63:DD:D3:13:D6:8D:55:6C:60:9F:DB:56:BD:66:EE
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/wnaFms1j3dMT1o1VbGCf21a9Zu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.4.0/22
45.92.88.0/22
45.149.192.0/22
45.159.244.0/23
136.144.24.0/24
Signature Algorithm: sha256WithRSAEncryption
06:19:73:8b:22:5b:e3:ee:08:15:e0:4a:df:df:5e:94:9a:58:
cc:15:02:50:fa:9f:9a:2d:4b:36:f1:88:39:7e:34:c9:28:83:
23:41:bf:49:05:c5:2a:d8:7f:51:8a:bb:3b:79:59:d7:fa:41:
ea:ea:b0:b8:c3:43:b3:01:8b:b4:a2:36:37:65:a8:de:c6:cf:
9f:31:49:cf:96:10:7c:03:d0:5f:98:50:e2:17:73:e1:e2:33:
91:5c:da:9c:eb:2e:7f:01:fc:b7:eb:96:6d:56:3f:e6:71:aa:
c9:31:20:d1:1c:10:c6:13:ad:ea:b7:ee:e1:f7:76:11:b7:3c:
44:a1:5a:cc:89:4d:50:d8:d0:17:66:2a:5f:58:2d:09:79:9a:
93:62:ae:8a:c6:23:9e:d6:16:a8:a1:73:6d:15:74:f0:fe:21:
cd:4b:7b:d7:50:64:a7:d7:30:1f:38:09:2b:9f:0e:9c:7c:63:
7b:47:a2:84:39:2e:38:52:ea:90:f7:c9:8c:5d:a7:42:c3:ca:
3d:27:33:86:28:ad:7b:f8:ab:d0:9d:0a:65:93:55:4d:da:5b:
b5:00:37:bf:1a:0b:6b:94:84:2e:ce:20:bc:e0:45:11:3c:b3:
13:c9:f6:68:95:4a:0e:0b:31:92:49:81:a0:a8:10:f3:5d:ba:
82:2e:af:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:14:51 2026 by rpki-client