Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Vq3CiMWcEPIzg-nKEqWShfXb4a4.roa
File: Vq3CiMWcEPIzg-nKEqWShfXb4a4.roa (raw, json)
Hash identifier: Ee/8chRcaBI/HvIk3BAwkeibyzzHmu4bP/dVRDQYDyQ=
Subject key identifier: 56:AD:C2:88:C5:9C:10:F2:33:83:E9:CA:12:A5:92:85:F5:DB:E1:AE
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019D3E09BC21978EB192EC3B679E46118EC7
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Vq3CiMWcEPIzg-nKEqWShfXb4a4.roa
Signing time: Mon 30 Mar 2026 09:18:38 +0000
ROA not before: Mon 30 Mar 2026 09:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 45.87.243.0/24 maxlen: 24
45.146.128.0/24 maxlen: 24
2a09:17c0:1000::/48 maxlen: 48
2a0e:c785:1::/48 maxlen: 48
2a0f:e6c7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 01:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3e:09:bc:21:97:8e:b1:92:ec:3b:67:9e:46:11:8e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 30 09:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56adc288c59c10f23383e9ca12a59285f5dbe1ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:77:d0:ff:b1:b7:d8:b5:96:9b:b5:3b:8e:b6:
0c:f0:b6:28:0e:fa:e6:99:af:8e:2f:18:ec:e5:63:
c3:bb:ab:88:8a:7d:47:4b:d2:a6:b2:18:b9:f1:9f:
6d:ae:0b:6a:e7:0a:e2:87:a5:62:ad:7e:a6:fb:94:
99:3d:be:65:0a:05:ba:ad:f5:0f:32:5d:5f:48:fc:
27:dd:5b:38:7d:22:e0:09:28:c6:d3:9e:57:08:0e:
1d:6f:3a:a0:5d:b3:8c:1e:75:0a:41:40:bb:c2:9e:
fd:f3:40:b6:c8:76:c5:f7:58:dc:c3:46:c1:2d:02:
49:98:2c:21:90:d9:ba:eb:2a:52:94:b3:95:bf:dd:
ec:39:cd:fd:09:4e:68:7a:72:57:10:a4:87:a2:02:
ed:21:fb:29:a8:1e:7a:a8:22:e2:36:59:64:da:e1:
9a:18:3c:cb:3c:72:c0:b9:ad:77:cb:91:2f:f9:11:
3c:8c:b6:ed:d0:db:71:03:9f:12:8d:13:c7:e6:45:
10:17:12:e2:85:6a:ea:a3:b1:42:23:68:1c:6b:66:
f4:3b:07:17:01:8c:8f:0a:13:ad:fd:76:f0:2e:6f:
c0:9a:73:8f:5e:fb:7f:d9:d3:e4:8b:c6:2d:d7:48:
08:2e:e1:29:a9:e0:37:d5:59:84:b7:77:44:81:de:
46:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AD:C2:88:C5:9C:10:F2:33:83:E9:CA:12:A5:92:85:F5:DB:E1:AE
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Vq3CiMWcEPIzg-nKEqWShfXb4a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.243.0/24
45.146.128.0/24
IPv6:
2a09:17c0:1000::/48
2a0e:c785:1::/48
2a0f:e6c7::/32
Signature Algorithm: sha256WithRSAEncryption
08:b7:b5:aa:34:51:16:02:1a:13:55:2b:7f:3f:4f:4d:de:78:
1a:d8:f7:8c:86:0a:1e:f6:d9:56:0a:bc:fb:31:fa:c4:ca:db:
40:5c:3b:69:9b:15:dc:16:82:70:58:ed:0c:2d:82:25:57:78:
ff:53:56:10:7b:7c:09:53:4b:f4:b5:63:03:96:1a:2b:27:be:
07:67:9b:f7:31:10:99:8f:ec:d5:74:f8:13:28:bc:4b:5a:50:
eb:b2:12:4f:fd:3c:41:fa:bf:f4:37:16:1d:d4:78:bc:62:77:
35:6c:53:c3:46:87:f5:b7:aa:9c:91:ce:33:c4:21:5d:57:81:
1a:f3:af:8c:bc:6a:a8:1a:c5:ef:b1:27:df:d1:a0:cf:4c:f0:
5d:37:e2:e2:bf:2f:52:c5:a5:e4:e4:71:37:ca:04:e1:d2:66:
68:68:07:0b:be:b0:13:3b:08:f4:ba:83:c4:89:a1:ee:81:b1:
4e:2f:ec:9a:0c:d2:3f:e7:5a:18:1d:5f:50:16:3a:cb:dd:e8:
ff:24:f5:2a:1a:49:15:14:6c:db:15:2a:a1:29:fa:56:76:87:
ea:97:5c:ea:c8:e9:db:ca:21:d3:52:c2:02:86:36:ea:bb:88:
4f:ed:af:49:ee:b0:02:b1:d0:97:66:35:e6:2f:8b:4e:06:6f:
45:b7:02:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 10:31:20 2026 by rpki-client