Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TsaeUYvbKPb4puu86jmi404ByaM.roa
File: TsaeUYvbKPb4puu86jmi404ByaM.roa (raw, json)
Hash identifier: rCyTJorDMNThzcDQ9luulEMup1rF2hYnNMEBdEp7fPM=
Subject key identifier: 4E:C6:9E:51:8B:DB:28:F6:F8:A6:EB:BC:EA:39:A2:E3:4E:01:C9:A3
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A153F358F4AAD4C547F1BB28728535C5A2
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TsaeUYvbKPb4puu86jmi404ByaM.roa
Signing time: Mon 19 Oct 2026 11:36:59 +0000
ROA not before: Mon 19 Oct 2026 11:36:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199899
IP address blocks: 5.181.43.0/24 maxlen: 24
45.118.250.0/24 maxlen: 24
45.137.84.0/24 maxlen: 24
45.139.86.0/24 maxlen: 24
45.146.89.0/24 maxlen: 24
45.151.104.0/24 maxlen: 24
85.209.128.0/24 maxlen: 24
103.91.146.0/24 maxlen: 24
103.229.28.0/24 maxlen: 24
185.9.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 20:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:f3:58:f4:aa:d4:c5:47:f1:bb:28:72:85:35:c5:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 19 11:36:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ec69e518bdb28f6f8a6ebbcea39a2e34e01c9a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:80:52:dd:8e:da:d1:b7:d0:43:01:e8:4f:ee:
a7:7a:e0:33:20:11:07:43:d3:a4:75:a9:41:dd:15:
be:90:69:67:dd:8d:54:95:55:32:e7:c3:d3:d1:fe:
8c:ff:17:9f:10:b2:80:63:f7:2b:20:ff:fb:ca:7b:
2f:f4:77:74:c4:2c:f8:c6:3a:dd:6d:2b:52:23:50:
44:c4:c0:d3:24:a9:46:bb:26:ac:01:4a:45:88:1e:
3f:a9:75:47:99:bb:37:74:ae:e6:39:a1:2e:1b:af:
fc:10:38:db:f5:7f:34:9d:82:16:db:0b:59:06:3c:
2d:45:23:34:8f:a9:86:8e:b1:ee:9d:81:88:fb:da:
08:ea:b9:3a:b5:f2:c8:96:85:0f:af:48:96:00:f5:
ea:54:42:4c:56:e5:b2:6c:b1:e5:c7:35:ef:d7:43:
fb:21:d9:30:c8:52:41:9f:5c:85:6b:0f:77:1f:65:
1d:13:6b:01:2a:15:14:e4:22:85:c6:26:39:28:64:
75:d8:c6:8a:78:16:03:46:d8:ec:bf:ca:8e:0d:a5:
71:11:df:80:97:f3:a1:33:9c:5b:41:ff:36:75:27:
3d:5e:de:bd:d6:3e:88:87:e5:b6:19:97:a8:11:ca:
aa:b1:e4:75:f4:f5:34:1a:88:4a:2f:e1:8f:49:20:
5d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C6:9E:51:8B:DB:28:F6:F8:A6:EB:BC:EA:39:A2:E3:4E:01:C9:A3
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TsaeUYvbKPb4puu86jmi404ByaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.43.0/24
45.118.250.0/24
45.137.84.0/24
45.139.86.0/24
45.146.89.0/24
45.151.104.0/24
85.209.128.0/24
103.91.146.0/24
103.229.28.0/24
185.9.52.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:af:7d:9a:eb:6c:b8:69:92:b8:f2:8c:7a:99:13:e4:89:5f:
ee:79:05:ba:1e:d6:db:69:3a:1f:e8:65:cb:4a:43:36:d6:e7:
0a:b2:85:12:76:d8:94:b0:60:b7:21:b2:d0:77:8f:52:3c:26:
87:c0:b0:35:68:0e:6e:77:b9:98:28:8f:8c:c5:41:b8:47:5f:
f3:a0:7a:c5:d5:8f:4a:30:30:ec:ae:d0:17:44:2b:2d:3b:2d:
ef:9d:4f:26:37:8e:d6:ff:fb:58:50:12:d8:65:2d:93:1c:82:
db:e5:cc:fd:2a:21:4d:25:0b:c5:29:01:2c:a5:97:90:96:e8:
2c:ee:d8:02:cc:f2:b3:3b:ba:7d:ff:ac:be:12:fb:1e:c9:0a:
ff:8f:52:4c:a0:54:b4:d8:27:fc:db:18:a2:41:85:a7:07:dd:
d8:73:a9:70:9e:23:73:19:e4:b4:06:be:c8:d0:9c:dd:b4:25:
f7:f6:91:94:21:25:5e:ee:2b:70:0f:fb:8a:07:ea:0c:63:7a:
e7:b9:08:4c:b1:aa:59:66:79:10:85:4c:87:1e:04:8c:97:a7:
2a:98:20:81:d2:28:6c:e6:41:f2:b9:17:b3:0c:dd:c0:b7:6b:
f1:fb:f6:4e:30:92:9d:64:2b:20:c2:2f:2d:14:d2:15:88:cb:
e3:b8:45:16
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAaFT81j0qtTFR/G7KHKFNcWiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYxMDE5MTEzNjU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZWM2OWU1MThiZGIyOGY2ZjhhNmViYmNlYTM5YTJlMzRlMDFjOWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoBS3Y7a0bfQQwHoT+6neuAzIBEH
Q9OkdalB3RW+kGln3Y1UlVUy58PT0f6M/xefELKAY/crIP/7ynsv9Hd0xCz4xjrd
bStSI1BExMDTJKlGuyasAUpFiB4/qXVHmbs3dK7mOaEuG6/8EDjb9X80nYIW2wtZ
BjwtRSM0j6mGjrHunYGI+9oI6rk6tfLIloUPr0iWAPXqVEJMVuWybLHlxzXv10P7
IdkwyFJBn1yFaw93H2UdE2sBKhUU5CKFxiY5KGR12MaKeBYDRtjsv8qODaVxEd+A
l/OhM5xbQf82dSc9Xt691j6Ih+W2GZeoEcqqseR19PU0GohKL+GPSSBd4wIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFE7GnlGL2yj2+KbrvOo5ouNOAcmjMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvVHNhZVVZdmJLUGI0cHV1ODZqbWk0MDRCeWFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQABbUrAwQA
LXb6AwQALYlUAwQALYtWAwQALZJZAwQALZdoAwQAVdGAAwQAZ1uSAwQAZ+UcAwQA
uQk0MA0GCSqGSIb3DQEBCwUAA4IBAQCOr32a62y4aZK48ox6mRPkiV/ueQW6Htbb
aTof6GXLSkM21ucKsoUSdtiUsGC3IbLQd49SPCaHwLA1aA5ud7mYKI+MxUG4R1/z
oHrF1Y9KMDDsrtAXRCstOy3vnU8mN47W//tYUBLYZS2THILb5cz9KiFNJQvFKQEs
pZeQlugs7tgCzPKzO7p9/6y+EvseyQr/j1JMoFS02Cf82xiiQYWnB93Yc6lwniNz
GeS0Br7I0JzdtCX39pGUISVe7itwD/uKB+oMY3rnuQhMsapZZnkQhUyHHgSMl6cq
mCCB0ihs5kHyuRezDN3At2vx+/ZOMJKdZCsgwi8tFNIViMvjuEUW
-----END CERTIFICATE-----
Generated at Tue Oct 20 06:36:23 2026 by rpki-client