Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Wxmm9fwEqpppPROKvov8KRepTFQ.roa
File: Wxmm9fwEqpppPROKvov8KRepTFQ.roa (raw, json)
Hash identifier: 2iqhNSMdIuZgU7sDNYFJZldhxQhLS3+AAC90s08fFA8=
Subject key identifier: 5B:19:A6:F5:FC:04:AA:9A:69:3D:13:8A:BE:8B:FC:29:17:A9:4C:54
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01A0D4C0B7701CF61C5EA30576811F430D2D
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Wxmm9fwEqpppPROKvov8KRepTFQ.roa
Signing time: Thu 24 Sep 2026 18:49:54 +0000
ROA not before: Thu 24 Sep 2026 18:49:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40676
IP address blocks: 45.148.165.0/24 maxlen: 24
185.210.137.0/24 maxlen: 24
193.148.61.0/24 maxlen: 24
193.148.63.0/24 maxlen: 24
194.32.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 03:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:c0:b7:70:1c:f6:1c:5e:a3:05:76:81:1f:43:0d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Sep 24 18:49:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b19a6f5fc04aa9a693d138abe8bfc2917a94c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ea:de:a3:91:4c:6f:26:63:ad:69:75:bc:ae:
42:2f:b5:7d:53:0c:04:ff:d1:2c:ba:df:c3:7c:43:
96:d1:f1:ff:fa:62:2d:a2:2a:94:d6:2e:8f:43:21:
a3:3f:6f:b5:8f:c5:5d:09:87:d0:11:8f:42:8f:fb:
14:a9:c2:5a:62:7a:7d:92:32:6e:48:70:bd:3a:3b:
84:c0:f6:c6:ac:fb:7f:1b:fc:95:98:6a:05:92:83:
43:e2:44:6e:25:62:35:04:96:77:b4:e7:de:e0:b3:
8f:fd:ac:97:21:e4:fa:eb:3f:c3:22:16:44:98:f1:
13:4b:b5:5b:e4:cb:1b:d6:bc:34:b4:78:ab:9a:a7:
24:5a:eb:e7:dd:03:40:02:48:7c:1c:b0:15:22:d9:
b6:40:e2:9a:64:d6:d9:85:45:c2:e4:ed:a4:e3:68:
37:73:29:53:8e:40:a1:21:77:4a:06:db:c5:77:b6:
06:02:31:be:88:12:82:a8:21:68:f3:f5:30:ff:fe:
9b:dc:0a:fb:d7:3a:fd:58:08:09:de:24:12:a7:88:
f4:1d:0b:9b:ac:59:d5:42:c6:1c:8c:cb:b8:9d:94:
78:86:c8:ab:fd:78:84:27:e5:ca:cc:91:81:e5:e5:
65:9d:0e:2c:44:d7:c5:04:84:05:42:22:dc:93:05:
46:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:19:A6:F5:FC:04:AA:9A:69:3D:13:8A:BE:8B:FC:29:17:A9:4C:54
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Wxmm9fwEqpppPROKvov8KRepTFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.165.0/24
185.210.137.0/24
193.148.61.0/24
193.148.63.0/24
194.32.127.0/24
Signature Algorithm: sha256WithRSAEncryption
93:be:5a:71:a8:13:24:9e:3b:a9:9d:bc:8e:f0:92:38:6f:34:
c5:9f:19:c5:b9:16:46:0c:ff:6b:79:9c:04:7b:2c:90:fd:b0:
77:a2:89:25:36:ed:f2:32:e1:0d:50:46:e2:63:af:3f:b4:f6:
1c:a1:4e:de:97:a2:26:79:26:4a:45:49:46:9c:77:05:4c:b0:
27:34:ec:35:51:33:f4:24:42:2e:ca:d0:be:17:b0:10:4e:f1:
f5:73:23:3e:e1:cb:f3:d7:f2:74:13:39:ce:df:f1:b4:57:27:
ce:97:ca:76:b2:02:50:ae:f1:76:91:b6:5b:ab:40:a8:ce:fb:
f8:96:25:69:d4:f8:a7:2d:3e:22:98:71:e8:bf:94:75:de:0c:
0b:20:61:35:15:82:b2:fc:17:6a:71:5e:ef:74:c3:85:a2:7f:
af:ba:79:c5:e9:39:52:24:d7:95:3a:39:13:81:5b:20:bc:d7:
9e:85:79:e0:78:b8:00:90:3a:f4:43:72:68:3f:d2:b4:8e:d2:
53:cb:c5:a3:9e:aa:e2:b4:5f:e2:23:a1:38:ce:cc:0d:f5:d1:
68:a1:65:29:2f:3f:cb:ce:32:4f:f8:fd:1e:d2:c8:c0:25:7c:
49:f2:66:e0:e7:8b:16:c8:17:dd:f5:c1:07:5b:c1:bb:63:50:
38:4b:06:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:49:00 2026 by rpki-client