Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FVSDNkKeZRY77OeR81kIYKgR7Gc.roa
File: FVSDNkKeZRY77OeR81kIYKgR7Gc.roa (raw, json)
Hash identifier: t1vQeUkiUy3+I4WZnIELxCxQ4FmQJak3jiyKBIUtheE=
Subject key identifier: 15:54:83:36:42:9E:65:16:3B:EC:E7:91:F3:59:08:60:A8:11:EC:67
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019F7BCEC0C684B1EEDCDFF624BCEFD08F82
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FVSDNkKeZRY77OeR81kIYKgR7Gc.roa
Signing time: Sun 19 Jul 2026 19:16:15 +0000
ROA not before: Sun 19 Jul 2026 19:16:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216334
IP address blocks: 45.9.118.0/24 maxlen: 24
45.86.15.0/24 maxlen: 24
45.128.78.0/24 maxlen: 24
45.134.186.0/24 maxlen: 24
45.135.38.0/24 maxlen: 24
45.146.91.0/24 maxlen: 24
45.152.196.0/24 maxlen: 24
45.154.246.0/24 maxlen: 24
45.154.247.0/24 maxlen: 24
45.158.185.0/24 maxlen: 24
45.158.197.0/24 maxlen: 24
45.158.198.0/24 maxlen: 24
103.91.147.0/24 maxlen: 24
113.30.154.0/24 maxlen: 24
193.5.250.0/24 maxlen: 24
193.39.143.0/24 maxlen: 24
193.39.209.0/24 maxlen: 24
193.41.39.0/24 maxlen: 24
193.41.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7b:ce:c0:c6:84:b1:ee:dc:df:f6:24:bc:ef:d0:8f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 19 19:16:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15548336429e65163bece791f3590860a811ec67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a5:23:75:82:57:b3:11:76:a1:4c:a2:b0:7f:
76:44:cc:ab:e9:df:05:ac:ae:9d:42:39:15:41:64:
25:97:7d:bb:96:cf:ef:0d:de:fe:aa:76:54:db:5d:
0e:68:72:88:ea:a7:d3:33:f0:53:92:15:55:8e:9f:
5a:65:e1:cc:c8:5f:aa:a4:75:5b:60:d2:b1:48:43:
fe:da:28:6d:af:35:44:20:d0:a1:eb:fe:c1:a2:33:
70:02:3d:4e:e9:8c:58:f6:13:67:66:d6:bd:93:e1:
d0:d3:90:2d:5c:ea:37:9a:90:a5:eb:bb:de:f2:ae:
a9:6a:89:9d:47:60:55:d2:dd:4f:9e:ca:58:de:ee:
96:14:4b:20:78:c5:fc:87:d0:2a:fd:e6:ee:a1:90:
6f:a8:ab:08:d6:85:06:16:74:25:8c:20:37:68:6d:
0f:1c:e9:2f:96:41:83:e0:54:66:01:74:36:b7:99:
fb:ce:86:cc:a5:a2:32:58:c1:4f:9f:4c:d9:44:7d:
40:6d:de:9e:53:57:4c:d1:43:f9:08:bb:82:c8:a6:
38:b1:d4:df:ae:44:54:8b:c3:8a:bf:d6:03:ad:57:
ec:12:08:39:a6:0b:73:30:71:55:94:2d:72:da:65:
be:51:5a:e8:9f:8f:54:2e:bc:ca:de:75:1a:11:bb:
ec:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:54:83:36:42:9E:65:16:3B:EC:E7:91:F3:59:08:60:A8:11:EC:67
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FVSDNkKeZRY77OeR81kIYKgR7Gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.118.0/24
45.86.15.0/24
45.128.78.0/24
45.134.186.0/24
45.135.38.0/24
45.146.91.0/24
45.152.196.0/24
45.154.246.0/23
45.158.185.0/24
45.158.197.0-45.158.198.255
103.91.147.0/24
113.30.154.0/24
193.5.250.0/24
193.39.143.0/24
193.39.209.0/24
193.41.39.0/24
193.41.86.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:59:01:20:b6:e2:3f:3d:c0:72:9a:70:79:2f:14:27:b2:d6:
8b:5a:5d:35:36:8f:6c:ff:f9:b2:f9:bd:a3:8e:64:ee:33:ca:
ae:d2:28:8a:fd:ec:12:7a:19:f4:77:bb:b3:08:ac:9c:18:ee:
f0:b3:bd:7f:a5:a5:ef:19:db:77:b4:38:1c:74:8b:a6:e7:24:
8e:ba:c1:a3:ad:93:f7:97:e5:4b:dd:58:22:03:16:cb:1f:16:
f1:e3:bf:71:1c:11:8c:8f:16:3a:b9:16:b2:2a:2c:f8:df:38:
de:de:82:52:4c:3f:be:ed:f3:48:54:fd:ec:32:0f:2a:0e:bf:
3a:93:ed:50:72:af:95:2e:c0:73:82:33:e9:e9:67:ca:8d:7c:
f2:fc:74:b0:09:f5:44:f8:2a:74:bc:7b:40:bb:98:11:19:15:
02:33:a3:c2:a3:9e:d0:62:3b:90:50:49:9f:ca:76:8d:33:11:
0a:be:57:9a:b4:fa:5b:8f:1b:2e:dc:0d:55:6e:ed:ec:4e:b9:
79:a9:27:20:0a:88:85:09:b7:b0:d0:e6:3b:00:58:b1:42:de:
90:17:4d:34:8e:a0:9f:18:da:b4:12:56:5c:e1:4c:32:f9:dc:
93:6d:b3:c9:69:a1:d3:84:74:3d:1d:9a:0b:48:53:dd:c0:2c:
9e:07:8b:ce
-----BEGIN CERTIFICATE-----
MIIFZjCCBE6gAwIBAgISAZ97zsDGhLHu3N/2JLzv0I+CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYwNzE5MTkxNjE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTU0ODMzNjQyOWU2NTE2M2JlY2U3OTFmMzU5MDg2MGE4MTFlYzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaUjdYJXsxF2oUyisH92RMyr6d8F
rK6dQjkVQWQll327ls/vDd7+qnZU210OaHKI6qfTM/BTkhVVjp9aZeHMyF+qpHVb
YNKxSEP+2ihtrzVEINCh6/7BojNwAj1O6YxY9hNnZta9k+HQ05AtXOo3mpCl67ve
8q6paomdR2BV0t1PnspY3u6WFEsgeMX8h9Aq/ebuoZBvqKsI1oUGFnQljCA3aG0P
HOkvlkGD4FRmAXQ2t5n7zobMpaIyWMFPn0zZRH1Abd6eU1dM0UP5CLuCyKY4sdTf
rkRUi8OKv9YDrVfsEgg5pgtzMHFVlC1y2mW+UVron49ULrzK3nUaEbvs4QIDAQAB
o4ICcjCCAm4wHQYDVR0OBBYEFBVUgzZCnmUWO+znkfNZCGCoEexnMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvRlZTRE5rS2VaUlk3N09lUjgxa0lZS2dSN0djLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGHBggrBgEFBQcBBwEB/wR4MHYwdAQCAAEwbgMEAC0JdgME
AC1WDwMEAC2ATgMEAC2GugMEAC2HJgMEAC2SWwMEAC2YxAMEAS2a9gMEAC2euTAM
AwQALZ7FAwQALZ7GAwQAZ1uTAwQAcR6aAwQAwQX6AwQAwSePAwQAwSfRAwQAwSkn
AwQAwSlWMA0GCSqGSIb3DQEBCwUAA4IBAQCMWQEgtuI/PcBymnB5LxQnstaLWl01
No9s//my+b2jjmTuM8qu0iiK/ewSehn0d7uzCKycGO7ws71/paXvGdt3tDgcdIum
5ySOusGjrZP3l+VL3VgiAxbLHxbx479xHBGMjxY6uRayKiz43zje3oJSTD++7fNI
VP3sMg8qDr86k+1Qcq+VLsBzgjPp6WfKjXzy/HSwCfVE+Cp0vHtAu5gRGRUCM6PC
o57QYjuQUEmfynaNMxEKvleatPpbjxsu3A1Vbu3sTrl5qScgCoiFCbew0OY7AFix
Qt6QF000jqCfGNq0ElZc4Uwy+dyTbbPJaaHThHQ9HZoLSFPdwCyeB4vO
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:39 2026 by rpki-client