Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1W8Zz1qMU3SvN5I6EJv6RkmqXOM.roa
File: 1W8Zz1qMU3SvN5I6EJv6RkmqXOM.roa (raw, json)
Hash identifier: VZ6N8V3RS0XhT1Efw4+DrmOP6yXPRk6byEJheyDA3Fg=
Subject key identifier: D5:6F:19:CF:5A:8C:53:74:AF:37:92:3A:10:9B:FA:46:49:AA:5C:E3
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019F1450A3262B5B305F34CAB6A0516CF60A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1W8Zz1qMU3SvN5I6EJv6RkmqXOM.roa
Signing time: Mon 29 Jun 2026 16:57:36 +0000
ROA not before: Mon 29 Jun 2026 16:57:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30633
IP address blocks: 45.128.77.0/24 maxlen: 24
45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
80.253.250.0/24 maxlen: 24
103.139.50.0/24 maxlen: 24
193.5.125.0/24 maxlen: 24
193.27.23.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a06:1184:33::/48 maxlen: 48
2a06:35c2::/32 maxlen: 32
2a0a:2d06:55::/48 maxlen: 48
2a0c:7886:33::/48 maxlen: 48
2a0e:f201::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2d81::/32 maxlen: 32
2a0f:2e80::/29 maxlen: 29
2a0f:3d84::/32 maxlen: 32
2a0f:7d02:1::/48 maxlen: 48
2a0f:e1c6::/32 maxlen: 32
2a0f:e7c2::/32 maxlen: 32
2a10:32c0::/29 maxlen: 29
2a10:32c0::/32 maxlen: 32
2a10:32c1::/32 maxlen: 32
2a10:32c2::/32 maxlen: 32
2a10:32c4::/32 maxlen: 32
2a10:32c5::/32 maxlen: 32
2a10:32c6::/32 maxlen: 32
2a10:32c7::/32 maxlen: 32
2a10:35c0::/29 maxlen: 29
2a10:35c0::/32 maxlen: 32
2a10:35c1::/32 maxlen: 32
2a10:35c2::/32 maxlen: 32
2a10:35c3::/32 maxlen: 32
2a10:35c4::/32 maxlen: 32
2a10:35c5::/32 maxlen: 32
2a10:35c6::/32 maxlen: 32
2a10:35c7::/32 maxlen: 32
2a10:6d40::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a13:18c0:1::/48 maxlen: 48
2a13:18c6:55::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:50:a3:26:2b:5b:30:5f:34:ca:b6:a0:51:6c:f6:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 29 16:57:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d56f19cf5a8c5374af37923a109bfa4649aa5ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cb:f0:23:55:9d:21:03:7f:8d:c6:b0:47:3f:
e5:86:30:02:0f:d5:84:17:ea:0e:e5:c9:e8:66:b6:
58:43:ac:ed:fa:05:9e:c7:6b:b5:ee:73:70:90:c8:
4d:e3:21:4a:50:c2:ec:b5:e7:a2:80:64:44:29:18:
77:bc:1c:cc:3f:f5:ee:a1:1f:74:9c:a4:2e:86:63:
3a:c8:5f:ee:d6:4a:80:45:98:82:1e:bc:80:b8:69:
ca:3a:a5:35:94:16:29:14:43:eb:0b:77:1b:60:c6:
09:46:ee:4d:d5:34:51:46:80:15:2c:d3:9d:18:05:
ce:fb:6f:91:fc:cd:bd:d2:7c:5f:70:6e:ba:52:ac:
d8:ad:04:aa:e1:51:ae:c0:f7:62:f4:b5:0b:b5:8b:
e7:b6:1d:29:50:aa:54:c6:86:76:e5:27:a5:b9:c3:
c2:83:3d:72:79:49:26:61:f3:af:44:99:d5:06:02:
e4:75:07:1a:44:03:65:8e:22:9e:47:9e:6f:58:f4:
af:5f:0f:44:7d:95:22:8d:76:57:6d:7c:4d:93:f9:
07:7f:f4:02:9e:10:e3:65:f4:4b:26:cd:76:b9:88:
50:12:06:bd:c7:2a:9f:a7:35:3e:90:aa:e2:ae:7f:
f6:a1:f4:54:45:dc:4f:4b:37:80:3a:95:e0:96:e7:
a4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6F:19:CF:5A:8C:53:74:AF:37:92:3A:10:9B:FA:46:49:AA:5C:E3
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1W8Zz1qMU3SvN5I6EJv6RkmqXOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.77.0/24
45.129.127.0/24
45.135.37.0/24
80.253.250.0/24
103.139.50.0/24
193.5.125.0/24
193.27.23.0/24
193.164.199.0/24
IPv6:
2a06:1184:33::/48
2a06:35c2::/32
2a0a:2d06:55::/48
2a0c:7886:33::/48
2a0e:f201::/32
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2d81::/32
2a0f:2e80::/29
2a0f:3d84::/32
2a0f:7d02:1::/48
2a0f:e1c6::/32
2a0f:e7c2::/32
2a10:32c0::/29
2a10:35c0::/29
2a10:6d40::/29
2a11:fd80::/29
2a12:ac40::/31
2a13:18c0:1::/48
2a13:18c6:55::/48
Signature Algorithm: sha256WithRSAEncryption
2b:9f:d8:c3:21:c0:67:b9:58:60:b2:59:50:66:85:3b:de:f1:
c0:45:da:37:15:72:31:01:7b:10:b7:a9:7d:fa:0f:b0:27:da:
94:32:d9:cc:a6:0c:f8:fd:a5:d0:4f:05:f0:a1:ba:ad:12:bd:
16:2d:1d:5c:17:94:1f:19:7a:65:86:b2:01:7c:27:9c:85:b1:
4c:e7:6d:b4:a4:7f:94:98:f8:44:f5:95:64:45:ad:0e:87:b7:
69:72:ed:90:72:50:9e:c2:a9:21:16:6d:61:19:5c:69:86:04:
67:33:cb:a3:45:22:23:2c:6e:5d:da:e8:1b:2a:51:52:f9:a0:
45:de:3d:f3:5b:62:71:f6:aa:10:2f:47:2c:16:57:f6:24:28:
ba:8b:54:7c:ae:31:f4:b4:5a:5e:df:2a:91:9d:1d:fb:aa:9c:
9c:03:e5:9b:e9:e2:ce:12:a1:80:68:09:b8:28:9f:ff:5c:14:
db:b8:d8:3d:40:42:86:cf:74:a2:30:3e:fd:85:81:d7:f2:81:
3e:a2:0b:51:2d:c3:aa:da:17:37:28:49:79:a5:bd:ea:25:e0:
c7:80:0a:4a:8e:3a:8d:65:7e:f7:4e:a2:8a:83:dd:34:25:4f:
57:ba:39:7f:b1:0c:53:96:73:9d:a8:25:45:3a:e4:29:cc:60:
51:7c:93:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:41 2026 by rpki-client