Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/n3dOfZ0Csm-wCzz5eORspXkyKpQ.roa
File: n3dOfZ0Csm-wCzz5eORspXkyKpQ.roa (raw, json)
Hash identifier: 4MbyLQIRAgoqTTNt8GECJ5mkoGVy4f9uLBt9glkW3WA=
Subject key identifier: 9F:77:4E:7D:9D:02:B2:6F:B0:0B:3C:F9:78:E4:6C:A5:79:32:2A:94
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019F5C2C715CAA67D8AC3900AB8B09D45B6D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/n3dOfZ0Csm-wCzz5eORspXkyKpQ.roa
Signing time: Mon 13 Jul 2026 15:50:44 +0000
ROA not before: Mon 13 Jul 2026 15:50:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207461
IP address blocks: 45.92.171.0/24 maxlen: 24
45.94.46.0/24 maxlen: 24
45.94.47.0/24 maxlen: 24
45.95.98.0/23 maxlen: 23
45.95.99.0/24 maxlen: 24
45.128.24.0/24 maxlen: 24
45.129.125.0/24 maxlen: 24
45.131.213.0/24 maxlen: 24
45.137.42.0/23 maxlen: 23
45.137.62.0/24 maxlen: 24
45.140.14.0/24 maxlen: 24
45.146.88.0/24 maxlen: 24
45.146.181.0/24 maxlen: 24
45.147.28.0/24 maxlen: 24
45.154.58.0/24 maxlen: 24
45.158.196.0/24 maxlen: 24
45.158.199.0/24 maxlen: 24
103.229.28.0/24 maxlen: 24
141.193.20.0/24 maxlen: 24
185.155.203.0/24 maxlen: 24
185.164.56.0/24 maxlen: 24
185.164.57.0/24 maxlen: 24
193.5.65.0/24 maxlen: 24
194.62.67.0/24 maxlen: 24
2a0a:2d06:10::/48 maxlen: 48
2a0a:2d07:e5::/48 maxlen: 48
2a0f:3d86:44::/48 maxlen: 48
2a0f:3d86:100::/48 maxlen: 48
2a0f:3d86:101::/48 maxlen: 48
2a0f:e1c0:37a::/48 maxlen: 48
2a0f:e1c0:a8b9::/48 maxlen: 48
2a0f:ea44:66::/48 maxlen: 48
2a13:8c86:120::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5c:2c:71:5c:aa:67:d8:ac:39:00:ab:8b:09:d4:5b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 13 15:50:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f774e7d9d02b26fb00b3cf978e46ca579322a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c5:56:36:57:0f:58:16:e4:61:cb:82:b5:0d:
1c:83:4c:51:94:a4:78:02:ce:3e:7c:ce:48:1a:d2:
f0:84:ca:f7:d5:41:e2:8e:d7:46:df:cd:e6:b8:94:
41:40:c0:22:4f:fa:41:67:f3:57:3a:01:18:9e:cb:
26:fb:40:b9:b1:e5:49:b5:eb:0e:dc:80:36:09:94:
dc:9c:ee:13:22:d2:01:6d:8d:32:22:97:4b:f9:a8:
26:6b:25:14:a7:7f:59:d3:9d:47:e4:08:2d:39:f5:
36:14:7c:0e:de:df:5a:fa:33:98:40:c4:4c:09:2a:
99:8a:b6:5e:51:68:92:a6:12:d9:d3:3f:c6:d1:52:
b7:57:10:47:dd:bd:a2:59:e2:aa:81:85:a2:9f:a9:
24:4d:b7:1d:52:27:5d:8e:bc:f5:fe:51:ea:d4:ef:
4f:27:67:87:8c:49:48:a6:d2:c2:8c:41:0d:e3:27:
e1:00:7e:6a:96:fe:25:4e:18:78:44:ec:4c:c7:38:
99:94:bc:b7:3e:73:ac:9b:13:97:26:ba:7e:f1:17:
9a:ed:de:17:c9:77:47:ed:a6:b7:b9:e9:7d:f3:b0:
16:ec:63:69:5d:21:4f:1f:1d:cc:d2:fc:a1:c0:4f:
48:98:41:bb:c8:2d:4d:ee:4a:ba:fe:37:8f:68:f9:
d4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:77:4E:7D:9D:02:B2:6F:B0:0B:3C:F9:78:E4:6C:A5:79:32:2A:94
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/n3dOfZ0Csm-wCzz5eORspXkyKpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.171.0/24
45.94.46.0/23
45.95.98.0/23
45.128.24.0/24
45.129.125.0/24
45.131.213.0/24
45.137.42.0/23
45.137.62.0/24
45.140.14.0/24
45.146.88.0/24
45.146.181.0/24
45.147.28.0/24
45.154.58.0/24
45.158.196.0/24
45.158.199.0/24
103.229.28.0/24
141.193.20.0/24
185.155.203.0/24
185.164.56.0/23
193.5.65.0/24
194.62.67.0/24
IPv6:
2a0a:2d06:10::/48
2a0a:2d07:e5::/48
2a0f:3d86:44::/48
2a0f:3d86:100::/47
2a0f:e1c0:37a::/48
2a0f:e1c0:a8b9::/48
2a0f:ea44:66::/48
2a13:8c86:120::/48
Signature Algorithm: sha256WithRSAEncryption
bb:67:57:a8:ab:3f:74:77:c6:78:c9:c5:41:7e:f7:33:ed:01:
6a:ff:d6:be:04:32:59:81:2a:a6:ca:58:85:9b:4b:5d:57:af:
84:fd:2b:29:06:70:c8:bb:f0:97:0b:24:85:cd:30:ff:10:6e:
fa:17:bc:1f:da:9f:5f:1d:37:1c:1e:23:bd:b8:86:c6:44:af:
26:d7:28:f5:7b:3d:73:6b:0f:09:d4:27:75:a2:91:d6:c1:c7:
7e:24:46:42:39:92:a9:14:a7:34:35:3d:25:1c:54:b2:da:31:
32:dc:9d:fa:c2:4e:35:83:0f:05:07:e2:84:88:9a:d0:26:07:
37:61:f6:5b:d5:81:79:45:94:24:13:7d:b2:c4:c3:d0:58:5d:
86:84:20:ff:15:10:18:c6:b7:ec:70:37:4a:2e:05:42:34:37:
6f:71:48:cf:78:97:98:02:0e:c0:25:26:dc:bb:b6:3d:98:b3:
9e:cb:44:5b:8c:8b:17:b6:bf:ad:41:c5:1c:80:bf:bb:0f:7e:
a6:bc:f0:fd:45:66:11:ac:8f:96:31:d5:cd:72:a9:9c:c3:69:
96:d9:ef:99:a0:39:89:0a:b5:c6:9a:bd:41:b7:ba:b8:62:97:
77:fe:0c:d2:f1:4c:ae:5f:6e:82:19:fa:43:db:1b:f8:2d:bc:
c8:4f:bc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:19 2026 by rpki-client