Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3WUtG5a4KiWR3FUWY3KqvqSW0Kc.roa
File: 3WUtG5a4KiWR3FUWY3KqvqSW0Kc.roa (raw, json)
Hash identifier: ylLQ7lw4m07dZSBZQAZDUd0l4MqwEMkCMiRRBeOHGec=
Subject key identifier: DD:65:2D:1B:96:B8:2A:25:91:DC:55:16:63:72:AA:BE:A4:96:D0:A7
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A1397AD47B5CEB13C46F3BB2A2CD3AEFB6
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3WUtG5a4KiWR3FUWY3KqvqSW0Kc.roa
Signing time: Wed 14 Oct 2026 08:15:13 +0000
ROA not before: Wed 14 Oct 2026 08:15:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28753
IP address blocks: 45.130.124.0/24 maxlen: 24
176.96.140.0/24 maxlen: 24
176.96.141.0/24 maxlen: 24
192.166.153.0/24 maxlen: 24
193.254.234.0/24 maxlen: 24
193.254.235.0/24 maxlen: 24
2a04:9f40::/29 maxlen: 29
2a06:1184:101::/48 maxlen: 48
2a06:3bc0::/29 maxlen: 29
2a07:8a40::/29 maxlen: 29
2a09:7b00::/29 maxlen: 29
2a0a:2d06:102::/48 maxlen: 48
2a0a:7d00::/29 maxlen: 29
2a0c:4880::/29 maxlen: 29
2a0c:7886:99::/48 maxlen: 48
2a0d:2ac0::/29 maxlen: 29
2a0e:5800::/29 maxlen: 29
2a0f:17c0::/29 maxlen: 29
2a0f:2500::/29 maxlen: 29
2a0f:d200::/29 maxlen: 29
2a0f:d9c0::/29 maxlen: 29
2a0f:db40::/29 maxlen: 29
2a11:8880::/29 maxlen: 29
2a13:1380::/29 maxlen: 29
2a13:18c6:66::/48 maxlen: 48
2a13:2cc0::/29 maxlen: 29
2a13:2d40::/29 maxlen: 29
2a13:2dc0::/29 maxlen: 29
2a13:2e40::/29 maxlen: 29
2a13:3380::/29 maxlen: 29
2a13:4900::/29 maxlen: 29
2a13:5b80::/29 maxlen: 29
2a13:7900::/29 maxlen: 29
2a13:7d80::/29 maxlen: 29
2a13:8200::/29 maxlen: 29
2a13:d100::/29 maxlen: 29
2a13:d700::/29 maxlen: 29
2a13:d900::/29 maxlen: 29
2a13:f900::/29 maxlen: 29
2a13:fb00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 20:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:7a:d4:7b:5c:eb:13:c4:6f:3b:b2:a2:cd:3a:ef:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 14 08:15:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd652d1b96b82a2591dc55166372aabea496d0a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:05:de:24:11:86:97:0e:ee:c4:a4:7b:54:3f:
61:47:87:56:5a:d2:fa:40:8a:bd:98:1c:ce:d9:fd:
b9:d2:4c:a8:a2:7b:f3:61:e7:1d:aa:4d:f0:88:a3:
b4:5f:53:b7:c8:cb:e1:fd:90:c0:80:eb:42:21:5a:
5c:38:c6:76:77:40:99:5a:a9:8f:7b:4e:aa:cb:39:
50:0a:a0:03:0b:f8:68:28:79:b1:e0:88:11:19:ce:
ed:c8:40:b4:15:a9:1a:de:4b:80:de:17:db:8e:d7:
1a:a4:3d:d9:a4:66:9c:1a:7c:77:bf:3f:45:6c:d9:
0d:a8:9c:6b:0d:c9:76:ab:5d:8f:6c:89:e6:ca:a1:
56:f1:bb:7e:26:f6:2c:43:62:76:d1:54:86:8e:15:
3b:ee:c3:1a:12:bf:a2:32:b8:23:b4:25:80:0b:86:
eb:a9:26:03:54:77:7a:90:96:a8:88:18:23:61:b1:
79:3c:a8:9d:3d:fc:f6:29:fe:5f:e4:7c:ba:0a:49:
8c:dc:38:83:3f:ab:a3:4e:95:22:f9:bd:77:5b:8b:
50:93:48:1a:00:6f:87:a8:da:67:3d:60:79:6b:88:
cb:0d:50:c0:64:f6:c3:9f:79:2b:0d:f2:7e:7d:e0:
fa:23:d0:83:71:99:06:1e:a4:00:67:29:56:0d:18:
b4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:65:2D:1B:96:B8:2A:25:91:DC:55:16:63:72:AA:BE:A4:96:D0:A7
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3WUtG5a4KiWR3FUWY3KqvqSW0Kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.124.0/24
176.96.140.0/23
192.166.153.0/24
193.254.234.0/23
IPv6:
2a04:9f40::/29
2a06:1184:101::/48
2a06:3bc0::/29
2a07:8a40::/29
2a09:7b00::/29
2a0a:2d06:102::/48
2a0a:7d00::/29
2a0c:4880::/29
2a0c:7886:99::/48
2a0d:2ac0::/29
2a0e:5800::/29
2a0f:17c0::/29
2a0f:2500::/29
2a0f:d200::/29
2a0f:d9c0::/29
2a0f:db40::/29
2a11:8880::/29
2a13:1380::/29
2a13:18c6:66::/48
2a13:2cc0::/29
2a13:2d40::/29
2a13:2dc0::/29
2a13:2e40::/29
2a13:3380::/29
2a13:4900::/29
2a13:5b80::/29
2a13:7900::/29
2a13:7d80::/29
2a13:8200::/29
2a13:d100::/29
2a13:d700::/29
2a13:d900::/29
2a13:f900::/29
2a13:fb00::/29
Signature Algorithm: sha256WithRSAEncryption
3a:25:b7:18:2a:d4:ef:1e:b9:ae:97:c6:7a:bd:84:01:00:0a:
8a:53:3a:da:c5:70:3f:6f:48:13:1d:55:e1:05:e9:68:21:19:
bd:d1:ff:f6:bd:63:c6:32:25:a3:4a:cd:5b:e3:d9:ed:74:5c:
6c:7a:ae:7a:60:47:c1:84:9b:59:d0:6d:14:9c:5d:05:c7:33:
10:cc:9b:66:ee:d6:f4:7a:9e:a1:70:2e:cc:f1:79:31:ad:d4:
23:65:14:85:9d:89:1a:14:00:18:b4:c3:1c:18:66:da:41:ee:
75:10:7b:1d:3e:4c:95:be:39:c0:7e:8b:5d:c6:9a:b7:4b:a6:
8b:43:00:20:34:a2:90:b0:b1:39:45:66:a7:92:62:9b:2c:54:
ae:b7:30:ca:9d:32:db:11:b8:93:56:af:f5:70:ee:1f:03:76:
fd:c3:1a:65:20:09:50:6a:9f:38:60:05:73:03:5e:65:4e:50:
d2:1a:61:27:e8:8b:df:c0:c5:2a:07:fe:20:f6:f5:38:27:7a:
5f:43:90:8e:d6:f1:22:3b:f2:81:e2:c5:38:bb:98:4c:1c:c4:
95:ba:57:69:5f:0a:a3:f9:6e:de:f8:92:8e:25:5a:4f:df:12:
69:45:90:b0:3d:4a:90:50:29:3d:01:0a:d3:f7:21:70:08:0d:
29:6a:8c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:36:27 2026 by rpki-client