Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/cy9qwOXq5Vs5iF1StfIy5DXyJxU.roa
File: cy9qwOXq5Vs5iF1StfIy5DXyJxU.roa (raw, json)
Hash identifier: xkx2TTD7ELkHNEFkG2YE6Qt6EU6zrTvH3z92ZUaf5S8=
Subject key identifier: 73:2F:6A:C0:E5:EA:E5:5B:39:88:5D:52:B5:F2:32:E4:35:F2:27:15
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019F3C2FF7AE6DD0E3619B4F334F1BDDB77A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/cy9qwOXq5Vs5iF1StfIy5DXyJxU.roa
Signing time: Tue 07 Jul 2026 10:46:44 +0000
ROA not before: Tue 07 Jul 2026 10:46:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 394380
IP address blocks: 45.130.126.0/24 maxlen: 24
45.154.59.0/24 maxlen: 24
192.166.81.0/24 maxlen: 24
193.8.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3c:2f:f7:ae:6d:d0:e3:61:9b:4f:33:4f:1b:dd:b7:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 7 10:46:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=732f6ac0e5eae55b39885d52b5f232e435f22715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:50:98:15:9d:6f:53:2a:c3:0d:c3:56:f1:16:
69:fe:f6:c6:9c:81:14:6f:81:42:b9:cc:ce:f2:91:
c7:4b:be:c1:d2:34:52:bf:4e:98:f8:e0:d5:4f:a5:
be:b7:bd:39:bd:40:de:f7:11:9f:53:67:2c:47:84:
7f:69:01:64:67:c2:93:9a:08:00:6f:cd:4c:2d:94:
0a:b8:01:0b:a5:12:6b:4e:6d:fd:e1:83:a4:91:d9:
b4:c0:52:21:e2:9f:e9:38:04:1f:ef:e2:3e:89:69:
08:d1:e8:82:d2:ec:ae:60:74:42:47:1f:9c:d2:88:
09:cb:5d:47:08:e2:6c:40:80:f8:80:fb:ff:16:a3:
1e:d3:6d:b0:41:e5:b1:d8:88:b0:be:dc:33:f4:2e:
6d:3b:36:eb:39:28:e0:15:fc:79:3d:63:94:16:2d:
e2:d7:fa:e7:db:a1:43:20:4b:d2:7c:c5:f2:fc:53:
a5:e5:46:11:c5:84:b8:e0:79:3c:4b:1d:ae:1c:27:
e0:8e:f9:81:54:80:c3:43:26:fe:57:f6:8f:47:95:
f2:d8:ae:b8:88:b8:1f:79:e7:88:e8:c7:ea:fd:7d:
b7:0e:6e:97:72:b6:87:a6:0e:6c:30:33:b2:12:cc:
93:72:bc:67:e6:cb:af:83:b3:98:9f:b9:3f:e2:53:
81:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:2F:6A:C0:E5:EA:E5:5B:39:88:5D:52:B5:F2:32:E4:35:F2:27:15
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/cy9qwOXq5Vs5iF1StfIy5DXyJxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.126.0/24
45.154.59.0/24
192.166.81.0/24
193.8.234.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:e8:d0:b7:89:4d:0d:f8:82:e3:c4:a4:51:4b:ec:08:86:3c:
88:44:9c:42:2d:22:19:89:d5:6f:fd:5e:54:a8:96:9d:19:a4:
74:b9:89:85:29:e8:2b:a1:31:66:2f:0e:6a:89:c1:55:b0:12:
a4:ae:99:73:80:e4:d5:79:a7:e7:39:12:fe:0f:34:75:6d:7a:
52:13:a9:6e:4d:ab:fc:a5:af:83:2a:be:56:b4:c0:ce:ec:c4:
00:12:88:86:48:58:83:16:6f:c8:bb:44:a6:64:e4:d0:00:88:
d5:3b:28:3e:04:d6:ad:ce:52:06:fe:7c:28:e7:33:4f:b5:ba:
82:a6:30:5b:01:cf:b5:f9:ef:cc:73:ca:74:21:0f:b2:d3:eb:
51:9e:20:b4:47:13:6f:b5:4d:83:a4:f9:67:6f:ab:d8:3a:23:
c9:9c:0e:b8:f5:c0:7f:34:63:29:99:41:5b:d3:f6:ef:f6:c8:
9e:bb:50:5c:84:7d:ce:9e:99:45:00:16:ce:be:a9:c2:86:1f:
60:51:ce:21:b8:64:09:e8:97:24:37:da:ef:05:b9:f0:8c:63:
3e:3f:d2:ee:21:67:91:de:79:45:6f:e2:9d:93:cc:ea:c8:8a:
8c:bc:50:d1:1a:d5:15:cf:78:fd:de:af:a3:63:1b:77:bf:e4:
1b:de:0e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:39 2026 by rpki-client