Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/04UDDO4dPpf5okwxXZ-kgr0gwnQ.roa
File: 04UDDO4dPpf5okwxXZ-kgr0gwnQ.roa (raw, json)
Hash identifier: /0Mp9IwQ4eJUo8KUUVrTjLa+roDltLCacYkXbVawpC8=
Subject key identifier: D3:85:03:0C:EE:1D:3E:97:F9:A2:4C:31:5D:9F:A4:82:BD:20:C2:74
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A12F08F7E7742B8E537F2968518AD62F89
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/04UDDO4dPpf5okwxXZ-kgr0gwnQ.roa
Signing time: Mon 12 Oct 2026 07:34:39 +0000
ROA not before: Mon 12 Oct 2026 07:34:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203614
IP address blocks: 45.137.41.0/24 maxlen: 24
103.139.51.0/24 maxlen: 24
185.126.66.0/24 maxlen: 24
193.27.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 20:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:08:f7:e7:74:2b:8e:53:7f:29:68:51:8a:d6:2f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 12 07:34:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d385030cee1d3e97f9a24c315d9fa482bd20c274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c6:00:df:0d:88:e7:83:5e:f7:d9:1a:0f:51:
a7:b0:bd:3c:3a:c5:61:28:ed:42:bf:a9:5e:8b:46:
d3:45:d2:95:f2:5d:a2:e6:2a:4d:9e:ae:a3:1e:02:
47:ce:98:0b:0a:a3:a4:9a:ec:5d:1e:5a:03:16:e6:
58:23:e0:58:63:5f:0a:44:59:9c:9e:50:6b:72:00:
96:3d:3b:f9:14:90:dc:1d:d6:55:27:6b:53:64:3c:
33:e1:10:cd:16:ea:e7:f9:7d:45:5b:0f:dd:c2:49:
fd:56:11:f6:b3:67:37:53:31:3c:a1:c3:09:24:3b:
8a:7d:88:96:e5:6c:90:f0:fb:55:47:46:dd:76:94:
a3:61:66:8c:d0:f9:43:dd:b2:b3:c9:ad:b6:aa:c6:
6d:2b:8b:68:72:8c:d3:26:e3:02:1f:8d:2d:da:ea:
d9:b7:65:b5:6d:79:22:be:70:b9:09:c7:ae:f0:88:
52:c8:05:d5:51:21:65:7f:80:df:5e:0c:f0:ae:4f:
5b:57:1a:9e:3f:f6:1c:e8:ff:2b:b2:ae:55:e3:0f:
97:68:45:c7:5c:f7:5a:c5:7c:86:14:1c:4c:8b:b7:
70:9b:ae:ff:c7:ee:c5:84:b8:9a:25:df:bc:b7:75:
71:c7:08:e5:4e:0d:c1:b0:8d:da:2b:f1:5b:da:6d:
84:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:85:03:0C:EE:1D:3E:97:F9:A2:4C:31:5D:9F:A4:82:BD:20:C2:74
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/04UDDO4dPpf5okwxXZ-kgr0gwnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.41.0/24
103.139.51.0/24
185.126.66.0/24
193.27.19.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:3d:91:5d:2b:66:2b:3e:13:4c:09:ca:b2:2a:55:f1:99:4d:
90:43:20:0a:28:f3:aa:cd:c8:63:a3:8d:66:a9:82:b9:9a:f5:
9c:c9:7a:7c:11:ab:57:27:df:c5:c3:f6:f9:d2:c2:99:1a:63:
14:be:0d:eb:1f:88:06:d3:d3:30:32:6e:1b:61:2f:ef:23:7d:
55:83:90:1f:ff:44:cf:71:fe:de:23:ea:af:6c:b6:bb:e4:7d:
2d:5b:0e:19:fb:47:4a:41:d2:e6:7b:e9:24:10:91:59:72:0d:
22:c9:7b:60:15:0f:c2:59:1f:a2:8d:b0:7c:88:3e:8c:cf:0c:
f5:bf:9e:d9:12:0b:02:d7:5f:c5:53:e6:77:77:a3:38:b9:b0:
bb:52:a2:ff:9b:8c:74:9c:b3:63:3e:5a:37:c3:04:a5:83:6d:
0d:55:a5:3c:3f:5b:45:7d:08:ee:4c:d0:44:f3:56:84:93:82:
d2:c4:a9:71:9a:6d:7a:25:56:64:7a:6d:a1:df:59:2d:42:ba:
5c:35:9e:2a:02:69:5e:69:5f:fc:00:0e:42:fb:2a:bf:26:1c:
20:31:65:e6:04:ff:0d:1f:05:b2:94:fa:6d:c9:4d:91:37:c7:
52:d6:01:eb:a8:a7:04:70:56:35:81:79:d8:5a:0a:f5:44:25:
34:5d:73:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:32:14 2026 by rpki-client