Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/OouYPUSZpSnj0FDvyjsLapJQV58.roa
File: OouYPUSZpSnj0FDvyjsLapJQV58.roa (raw, json)
Hash identifier: 2QKJxGMLErAJRxcUJ7ebJWJTWN7jPCH8GvCobzR+xog=
Subject key identifier: 3A:8B:98:3D:44:99:A5:29:E3:D0:50:EF:CA:3B:0B:6A:92:50:57:9F
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A143588F0FE8B51D238A5BFBF73F3BBE97
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/OouYPUSZpSnj0FDvyjsLapJQV58.roa
Signing time: Fri 16 Oct 2026 06:13:59 +0000
ROA not before: Fri 16 Oct 2026 06:13:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216246
IP address blocks: 45.12.63.0/24 maxlen: 24
45.129.125.0/24 maxlen: 24
45.146.131.0/24 maxlen: 24
45.147.31.0/24 maxlen: 24
45.151.101.0/24 maxlen: 24
45.151.102.0/24 maxlen: 24
45.152.196.0/24 maxlen: 24
45.152.198.0/24 maxlen: 24
84.21.191.0/24 maxlen: 24
193.5.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 20:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:58:8f:0f:e8:b5:1d:23:8a:5b:fb:f7:3f:3b:be:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 16 06:13:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a8b983d4499a529e3d050efca3b0b6a9250579f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9d:fc:1d:b0:ea:fa:5b:af:ec:95:06:c2:50:
01:9a:2c:7f:34:54:3b:1b:e3:db:1c:49:0c:a3:7c:
62:c1:0a:6c:59:dc:d6:ab:51:b0:aa:4a:85:4c:e5:
99:c2:e4:21:05:ab:93:29:48:c1:2a:27:1d:4f:85:
b5:3c:ad:dd:e9:d6:54:52:3f:dd:22:13:fb:cd:fe:
9f:cc:64:13:d1:42:aa:21:f3:51:22:da:df:62:3c:
27:8a:65:46:3c:dc:60:3d:e6:5f:45:bc:9d:25:19:
b0:11:97:4d:78:6d:4b:e3:2c:ab:ae:10:79:22:f7:
47:3c:e5:2f:12:ea:59:c1:eb:7b:1c:0c:4a:6f:36:
29:cb:2b:1e:f3:16:37:b7:98:16:96:49:08:88:dd:
63:f9:d4:58:84:d4:9d:06:11:19:30:47:99:c6:eb:
94:81:1d:a2:e1:1f:41:57:8c:dc:73:c0:9f:7d:49:
33:d5:10:59:df:22:c8:e4:34:43:00:10:3b:73:91:
a9:7e:2d:25:d3:cb:20:f7:da:91:d4:a4:22:1c:69:
59:31:3b:59:57:4b:ea:e5:de:2c:77:3f:26:6b:ef:
e4:0f:4d:ff:5e:46:3e:71:cf:11:31:56:34:69:52:
c4:1f:93:e3:8f:70:ab:90:3e:c5:4a:4e:8f:6d:b8:
cf:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8B:98:3D:44:99:A5:29:E3:D0:50:EF:CA:3B:0B:6A:92:50:57:9F
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/OouYPUSZpSnj0FDvyjsLapJQV58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.63.0/24
45.129.125.0/24
45.146.131.0/24
45.147.31.0/24
45.151.101.0-45.151.102.255
45.152.196.0/24
45.152.198.0/24
84.21.191.0/24
193.5.250.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:57:46:39:7c:d6:af:40:3c:58:ce:97:ef:4a:57:2f:03:d2:
ea:73:54:2e:68:9a:d7:37:73:eb:a2:c5:76:8d:70:05:7d:6e:
0d:59:50:4f:d3:d8:15:24:ce:9a:3f:e2:1c:ae:16:03:9e:8f:
f4:e6:89:05:99:ad:7d:bc:3c:78:26:53:2f:2e:73:5f:fb:37:
3a:8e:27:0d:b4:a3:c2:3b:cb:3b:a3:8e:d8:89:d0:7b:ab:3e:
9b:c4:b2:26:00:d4:1d:75:49:60:70:bd:83:19:b8:5d:74:ff:
b0:6a:e6:3a:3e:21:aa:58:43:36:97:a9:83:b8:3d:7e:36:c3:
a0:cc:34:28:55:eb:7b:eb:02:7e:bd:0c:ce:cd:a4:a6:c0:cc:
a4:80:37:7f:68:ad:72:8b:86:8e:82:ad:1b:da:00:3d:1a:e2:
cd:21:a9:93:0a:b7:4a:24:a2:be:bb:b5:e1:70:1c:a7:13:b8:
01:4b:a4:e9:8d:fc:85:52:74:4c:e3:20:64:bc:e3:dc:58:49:
b0:25:df:1b:77:0f:25:a1:1e:1b:d0:a4:bf:81:d7:d4:af:68:
b9:77:e8:9b:59:3c:27:9d:ba:ee:91:dc:6e:67:13:34:c0:c6:
c1:be:31:6f:53:ce:19:dc:85:c9:ef:42:34:fe:af:c2:1f:7a:
86:fa:c9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:36:27 2026 by rpki-client