Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gpF7aPcbm58Fx0BS0k57gEebs68.roa
File: gpF7aPcbm58Fx0BS0k57gEebs68.roa (raw, json)
Hash identifier: +qj6XgU9R4FzHlEi5O681b/CM+mmGHReCRgZ5MrKsX0=
Subject key identifier: 82:91:7B:68:F7:1B:9B:9F:05:C7:40:52:D2:4E:7B:80:47:9B:B3:AF
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A12C2B93966050D323F7B4696F3DDA5441
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gpF7aPcbm58Fx0BS0k57gEebs68.roa
Signing time: Sun 11 Oct 2026 18:13:35 +0000
ROA not before: Sun 11 Oct 2026 18:13:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200823
IP address blocks: 45.12.62.0/24 maxlen: 24
45.95.99.0/24 maxlen: 24
45.131.214.0/24 maxlen: 24
45.139.84.0/24 maxlen: 24
45.151.106.0/24 maxlen: 24
45.153.219.0/24 maxlen: 24
93.190.247.0/24 maxlen: 24
103.114.43.0/24 maxlen: 24
103.139.48.0/24 maxlen: 24
103.227.84.0/24 maxlen: 24
193.41.68.0/24 maxlen: 24
194.33.61.0/24 maxlen: 24
194.35.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 20:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:2b:93:96:60:50:d3:23:f7:b4:69:6f:3d:da:54:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 11 18:13:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82917b68f71b9b9f05c74052d24e7b80479bb3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0c:0f:7f:8c:7e:e4:58:5b:47:e5:34:2f:bc:
b7:c5:d4:20:88:18:92:02:92:b8:4c:78:35:a4:af:
f2:23:cc:8b:e9:64:2f:93:41:83:78:dc:67:b7:11:
de:4b:22:8b:e2:8b:53:ab:0b:e2:60:59:f2:36:16:
f9:aa:fe:64:8f:eb:b1:4d:eb:53:c2:69:71:cb:60:
4a:81:ea:fd:cd:a0:66:e6:20:d4:fd:fe:ae:ff:64:
cb:91:94:0b:c9:eb:93:b4:f5:87:fd:6f:29:4d:93:
d9:eb:13:09:e6:1d:60:7b:60:0b:5c:33:d1:ff:93:
cf:a8:de:d6:b5:24:63:e4:be:a9:0a:fe:bb:ac:9c:
64:60:77:3d:d5:60:58:2c:1d:ce:12:7f:24:6f:2b:
33:be:83:09:a1:9a:7f:28:27:ed:52:a9:36:e8:18:
c7:f4:63:4e:5f:a8:78:64:3f:f1:b6:0e:11:24:78:
e4:8a:56:16:d9:d6:44:1f:fe:a2:55:f5:d8:54:a5:
cd:3e:55:4a:5b:32:7e:69:8e:a7:82:88:36:06:0a:
45:ce:b0:ec:27:bb:98:38:55:80:50:91:f2:0c:90:
09:e9:df:a5:a4:5e:0d:fc:1e:ac:22:0b:d3:09:28:
27:92:ac:80:80:0c:7f:fe:37:90:4d:7d:af:3f:17:
8e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:91:7B:68:F7:1B:9B:9F:05:C7:40:52:D2:4E:7B:80:47:9B:B3:AF
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gpF7aPcbm58Fx0BS0k57gEebs68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.62.0/24
45.95.99.0/24
45.131.214.0/24
45.139.84.0/24
45.151.106.0/24
45.153.219.0/24
93.190.247.0/24
103.114.43.0/24
103.139.48.0/24
103.227.84.0/24
193.41.68.0/24
194.33.61.0/24
194.35.226.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:b2:a5:e6:d6:ce:9d:98:b5:74:05:38:b1:00:ff:fb:3d:0c:
a1:af:d7:fa:89:61:e7:19:c4:ce:86:b8:e6:fb:12:2d:22:34:
0f:f0:d5:89:8f:5e:c1:c6:11:f4:ff:49:c9:e4:3a:99:f6:f7:
27:a7:47:ef:87:85:27:93:84:48:50:c9:4c:eb:56:8e:b8:e2:
d1:98:55:5e:7a:80:33:52:96:10:88:86:0c:75:1d:f4:de:b1:
54:28:f2:f1:70:82:45:71:1b:a6:ec:36:fe:08:51:b3:06:c7:
f3:e3:e0:68:b3:da:29:b4:5d:e3:fc:56:dd:1d:64:f0:61:99:
bf:ef:de:2b:f5:f6:ec:71:38:01:8b:a7:ee:a5:10:5d:d7:4f:
a1:8d:7a:7b:4f:f3:a6:81:53:7e:b3:29:09:08:18:be:e1:bc:
7f:4e:71:6d:bc:f9:4a:e9:dc:fd:46:b2:b9:a8:63:31:89:63:
6c:84:04:18:16:9e:60:19:d7:34:29:6b:4e:09:c5:59:5a:c6:
4a:ec:1c:74:6f:a8:7a:7b:9e:3d:bd:64:25:d1:b8:7e:3e:11:
e3:45:63:69:42:ef:aa:bb:60:4f:e2:73:df:b0:a2:b1:12:09:
46:88:41:7c:2b:3a:2f:ed:a3:ff:13:65:e2:2d:e3:3b:1d:ef:
83:83:78:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:36:26 2026 by rpki-client