Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ADq7AGvDwJjRYLYymxzhdoQ9Zwo.roa
File: ADq7AGvDwJjRYLYymxzhdoQ9Zwo.roa (raw, json)
Hash identifier: 9owx9F/xuwNizLgmctK60UyG7A7vryQ1fo5hZzCPl64=
Subject key identifier: 00:3A:BB:00:6B:C3:C0:98:D1:60:B6:32:9B:1C:E1:76:84:3D:67:0A
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A13AE1B7A0DDADD42D32CCD51FAF1E5C29
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ADq7AGvDwJjRYLYymxzhdoQ9Zwo.roa
Signing time: Wed 14 Oct 2026 14:47:13 +0000
ROA not before: Wed 14 Oct 2026 14:47:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142019
IP address blocks: 45.135.39.0/24 maxlen: 24
45.142.28.0/24 maxlen: 24
45.153.22.0/24 maxlen: 24
45.154.84.0/24 maxlen: 24
193.8.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:e1:b7:a0:dd:ad:d4:2d:32:cc:d5:1f:af:1e:5c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 14 14:47:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=003abb006bc3c098d160b6329b1ce176843d670a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:64:64:28:b1:e0:ca:29:34:e7:41:b4:9d:79:
6e:c4:d9:0a:c8:8f:45:50:13:3b:94:8a:4e:e9:67:
3d:97:c6:1b:76:1d:72:ab:b6:a5:4a:c6:9b:d3:bf:
4c:6e:5c:24:33:ef:07:80:ef:ab:ad:a7:df:d8:92:
ec:00:7e:54:9a:6f:1d:58:45:a5:40:db:9a:1a:60:
13:31:b9:53:23:ed:da:85:e0:6d:02:bf:37:23:d0:
d2:27:c7:03:c5:97:6f:8d:44:8a:9e:21:d4:1c:ba:
3c:9f:16:ce:9a:03:e4:c0:a8:0a:21:bb:1f:50:47:
7c:e4:89:f0:02:5e:a7:95:7d:ff:f3:71:1f:89:e9:
d7:d3:b6:dc:c5:ba:a1:9a:81:31:98:86:d5:4e:6e:
60:ce:a0:00:7e:7a:c6:2a:ff:c1:ba:4b:52:55:26:
62:d4:2b:54:a7:94:15:78:a7:ca:85:99:df:f4:43:
72:e1:19:fa:73:81:70:94:94:4a:65:f2:98:48:26:
1a:9a:e5:e5:b2:79:1c:31:e3:fe:b5:a1:92:2a:05:
2a:c3:f6:5e:20:77:73:43:b8:74:e9:38:5b:29:cc:
92:8c:28:3d:8a:0b:4f:0c:66:fb:31:13:3f:12:21:
44:27:8a:18:46:31:23:94:74:46:53:e4:1c:57:d0:
8f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3A:BB:00:6B:C3:C0:98:D1:60:B6:32:9B:1C:E1:76:84:3D:67:0A
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ADq7AGvDwJjRYLYymxzhdoQ9Zwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.39.0/24
45.142.28.0/24
45.153.22.0/24
45.154.84.0/24
193.8.138.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:cf:bc:9d:69:9a:1e:3a:c4:a9:c9:57:e1:56:5c:48:d5:89:
15:da:2f:de:d2:fe:90:b8:6d:06:6d:f5:43:07:a5:c5:5a:6a:
dc:96:1a:c2:28:33:75:c5:ab:17:88:ab:c1:39:99:98:f3:9d:
6d:04:0b:04:e6:ab:d5:37:6a:15:9f:37:2d:c7:32:d6:22:3a:
e7:b2:1d:05:c7:a3:d5:fd:4c:c0:12:31:67:66:12:e6:50:46:
80:ff:f8:4f:1f:e2:1c:ae:52:1e:20:64:84:d6:3f:d1:19:96:
cb:b4:94:df:31:73:d1:f9:dd:f8:d5:18:ce:76:77:d0:e8:05:
ab:30:31:79:1b:b3:07:c7:2b:32:d8:d1:75:4b:5f:18:e8:f3:
93:0e:65:f1:3e:60:a7:38:63:9e:90:e7:de:9b:aa:68:c4:49:
1f:8b:88:e7:c7:31:5b:35:8d:43:fc:22:15:d7:35:f2:6d:2f:
d3:9e:62:be:88:3d:65:c3:7b:65:75:7f:bd:98:56:00:d5:aa:
71:9c:d3:95:08:34:4b:7a:19:f7:f3:5c:4a:86:d2:ca:23:c7:
ee:e0:ae:5b:53:67:72:49:82:40:19:22:bb:1d:26:4d:f4:58:
b9:5a:98:d3:02:09:ee:12:e0:5f:2d:55:9f:ed:3f:25:e6:03:
c8:5f:03:22
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAaE64beg3a3ULTLM1R+vHlwpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYxMDE0MTQ0NzEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDNhYmIwMDZiYzNjMDk4ZDE2MGI2MzI5YjFjZTE3Njg0M2Q2NzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2RkKLHgyik050G0nXluxNkKyI9F
UBM7lIpO6Wc9l8Ybdh1yq7alSsab079MblwkM+8HgO+rraff2JLsAH5Umm8dWEWl
QNuaGmATMblTI+3aheBtAr83I9DSJ8cDxZdvjUSKniHUHLo8nxbOmgPkwKgKIbsf
UEd85InwAl6nlX3/83EfienX07bcxbqhmoExmIbVTm5gzqAAfnrGKv/BuktSVSZi
1CtUp5QVeKfKhZnf9ENy4Rn6c4FwlJRKZfKYSCYamuXlsnkcMeP+taGSKgUqw/Ze
IHdzQ7h06ThbKcySjCg9igtPDGb7MRM/EiFEJ4oYRjEjlHRGU+QcV9CPuQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFAA6uwBrw8CY0WC2Mpsc4XaEPWcKMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvQURxN0FHdkR3SmpSWUxZeW14emhkb1E5WndvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALYcnAwQA
LY4cAwQALZkWAwQALZpUAwQAwQiKMA0GCSqGSIb3DQEBCwUAA4IBAQA6z7ydaZoe
OsSpyVfhVlxI1YkV2i/e0v6QuG0GbfVDB6XFWmrclhrCKDN1xasXiKvBOZmY851t
BAsE5qvVN2oVnzctxzLWIjrnsh0Fx6PV/UzAEjFnZhLmUEaA//hPH+IcrlIeIGSE
1j/RGZbLtJTfMXPR+d341RjOdnfQ6AWrMDF5G7MHxysy2NF1S18Y6POTDmXxPmCn
OGOekOfem6poxEkfi4jnxzFbNY1D/CIV1zXybS/TnmK+iD1lw3tldX+9mFYA1apx
nNOVCDRLehn381xKhtLKI8fu4K5bU2dySYJAGSK7HSZN9Fi5WpjTAgnuEuBfLVWf
7T8l5gPIXwMi
-----END CERTIFICATE-----
Generated at Sun Oct 25 07:40:05 2026 by rpki-client