Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ilG-u9SJqgtf_wKJI-apb09_G-w.roa
File: ilG-u9SJqgtf_wKJI-apb09_G-w.roa (raw, json)
Hash identifier: bZ+IAoR2msnPFIlmvMCPNyrL37YLZHiPylHYPShQEHo=
Subject key identifier: 8A:51:BE:BB:D4:89:AA:0B:5F:FF:02:89:23:E6:A9:6F:4F:7F:1B:EC
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A0F761890832AD50148A5C8BB2B25101F0
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ilG-u9SJqgtf_wKJI-apb09_G-w.roa
Signing time: Thu 01 Oct 2026 12:12:39 +0000
ROA not before: Thu 01 Oct 2026 12:12:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205544
IP address blocks: 45.153.20.0/24 maxlen: 24
2a09:17c0:b19a::/48 maxlen: 48
2a0e:1a83:88::/48 maxlen: 48
2a0f:1206:77::/48 maxlen: 48
2a0f:1540::/29 maxlen: 29
2a0f:1640::/29 maxlen: 29
2a0f:1940::/29 maxlen: 29
2a0f:2840::/29 maxlen: 29
2a0f:2940::/29 maxlen: 29
2a0f:2a40::/29 maxlen: 29
2a0f:2dc0::/29 maxlen: 29
2a0f:2e40::/29 maxlen: 29
2a0f:30c0::/29 maxlen: 29
2a0f:3140::/29 maxlen: 29
2a0f:3540::/29 maxlen: 29
2a0f:3740::/29 maxlen: 29
2a0f:e1c7:100::/48 maxlen: 48
2a0f:e202:97::/48 maxlen: 48
2a0f:e440::/29 maxlen: 29
2a11:3240::/29 maxlen: 29
2a11:4800::/29 maxlen: 29
2a11:8700::/29 maxlen: 29
2a11:e580::/29 maxlen: 29
2a12:3f00::/29 maxlen: 29
2a12:4b00::/29 maxlen: 29
2a12:5900::/29 maxlen: 29
2a12:cd00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:61:89:08:32:ad:50:14:8a:5c:8b:b2:b2:51:01:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 1 12:12:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a51bebbd489aa0b5fff028923e6a96f4f7f1bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8a:f2:c1:43:6d:76:b0:6b:ea:a3:d9:0d:18:
c7:98:26:13:ec:57:50:fb:32:8b:2d:aa:9e:b7:cc:
59:a0:7e:be:97:fa:05:ae:41:8f:be:6d:15:9f:f0:
43:6d:4b:e8:1d:ed:12:c3:59:11:cf:cc:5b:3c:10:
9e:63:42:94:2f:1f:e4:81:01:51:d5:e4:ef:46:c9:
27:a5:be:df:38:32:ef:e9:bb:d0:63:51:39:52:93:
9a:3a:25:2a:60:33:cd:3e:1d:07:38:0f:7d:94:e4:
d4:b7:c9:c0:11:60:64:52:bc:a1:e9:50:62:6d:d4:
af:43:16:ac:a9:14:16:26:d9:3c:0c:d1:d3:76:13:
48:4e:66:c4:5c:7e:3f:52:4f:ac:2d:eb:95:bf:1a:
8b:28:ca:ec:d3:d3:f3:5a:b9:2f:0c:be:94:81:0f:
f9:95:4a:0b:8d:f2:1d:ac:a5:57:41:cc:2a:5d:ea:
78:cf:c6:f2:28:9a:8e:11:0b:28:bf:e0:de:8f:25:
7d:5f:73:1e:49:3f:e7:b6:9f:35:e1:b2:72:ac:ed:
91:fa:31:15:00:64:1c:cd:9c:e1:83:c3:8c:65:22:
b5:25:49:dd:57:6a:e6:0b:87:a7:c7:eb:b9:14:f4:
95:30:03:8d:aa:50:06:0a:61:ad:61:c2:f3:e9:2b:
09:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:51:BE:BB:D4:89:AA:0B:5F:FF:02:89:23:E6:A9:6F:4F:7F:1B:EC
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ilG-u9SJqgtf_wKJI-apb09_G-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.20.0/24
IPv6:
2a09:17c0:b19a::/48
2a0e:1a83:88::/48
2a0f:1206:77::/48
2a0f:1540::/29
2a0f:1640::/29
2a0f:1940::/29
2a0f:2840::/29
2a0f:2940::/29
2a0f:2a40::/29
2a0f:2dc0::/29
2a0f:2e40::/29
2a0f:30c0::/29
2a0f:3140::/29
2a0f:3540::/29
2a0f:3740::/29
2a0f:e1c7:100::/48
2a0f:e202:97::/48
2a0f:e440::/29
2a11:3240::/29
2a11:4800::/29
2a11:8700::/29
2a11:e580::/29
2a12:3f00::/29
2a12:4b00::/29
2a12:5900::/29
2a12:cd00::/29
Signature Algorithm: sha256WithRSAEncryption
9e:89:6c:7e:e6:9d:1b:b4:e5:a1:cd:ad:d5:27:bb:2c:0c:a9:
ce:dd:dd:27:7f:72:04:2e:b3:01:23:00:d2:cc:07:99:2c:9a:
25:0b:c4:c9:a0:71:af:35:42:c1:df:7f:84:76:01:c3:73:6f:
ae:39:e3:c4:10:c9:56:5f:5d:c1:ce:55:2e:72:68:a6:13:0a:
54:dd:04:17:cc:94:b7:03:5d:7e:5c:2a:92:aa:e8:eb:0a:72:
6f:d4:2a:d9:e3:94:34:f8:f7:3e:09:52:ac:4f:b6:0a:ef:97:
8a:e9:1f:1c:f7:8f:88:ab:5a:40:59:f0:29:83:70:a1:59:a3:
a3:36:0c:cc:8d:7a:a8:03:b8:f9:a5:e5:2e:a3:c0:23:ef:c2:
fb:16:d0:41:d1:ac:54:b1:47:82:5d:c7:ab:c3:7e:b0:83:4d:
99:ec:ff:7a:06:bf:e6:1d:32:a4:60:57:a5:e7:ff:48:74:6b:
1d:d0:cc:cb:b6:e0:1c:74:43:2e:7d:6f:24:c8:8f:79:39:06:
56:c7:5f:e9:c2:78:57:a6:3e:4f:e5:01:04:f9:73:6a:e2:8a:
75:62:10:c3:75:3b:c2:15:7f:1f:37:f8:66:b0:34:2a:2e:19:
15:83:99:2a:88:e4:6e:c7:45:14:54:15:2f:fd:d8:83:2b:22:
1f:92:87:33
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Oct 27 00:16:34 2026 by rpki-client