Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/oIZmz7ncFWpjmXmqRnoEIt-cHPc.roa
File: oIZmz7ncFWpjmXmqRnoEIt-cHPc.roa (raw, json)
Hash identifier: aJ7+k4TZsgzWcNjDstxJwTyAw+a0zOhl2QQip3uXI94=
Subject key identifier: A0:86:66:CF:B9:DC:15:6A:63:99:79:AA:46:7A:04:22:DF:9C:1C:F7
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019F375B5D7C7F6DCAC1AC5E83CD6142A67D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/oIZmz7ncFWpjmXmqRnoEIt-cHPc.roa
Signing time: Mon 06 Jul 2026 12:16:02 +0000
ROA not before: Mon 06 Jul 2026 12:16:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142019
IP address blocks: 45.135.39.0/24 maxlen: 24
45.142.28.0/24 maxlen: 24
45.153.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:5b:5d:7c:7f:6d:ca:c1:ac:5e:83:cd:61:42:a6:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 6 12:16:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a08666cfb9dc156a639979aa467a0422df9c1cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a3:d4:6d:49:5d:c4:23:92:e2:74:d8:4e:1c:
62:59:1c:5c:c6:58:3c:48:9a:14:c9:dd:0e:8d:c5:
a6:00:d0:f9:54:37:fc:de:f5:10:a7:52:32:d6:9f:
d8:49:e8:b5:27:7d:b7:61:ab:c2:b1:97:d0:7c:7b:
44:df:16:77:9f:4d:a2:fb:65:14:b3:16:e0:1b:60:
c6:0d:0e:0e:2d:83:87:c9:4a:c0:2c:d1:d5:60:ac:
b0:b8:73:2b:b0:ba:12:2d:a0:f6:38:14:be:10:9e:
e1:ba:a4:af:fc:63:dd:60:e7:45:7e:56:f2:2b:0e:
3e:e9:8e:34:14:11:79:23:c9:5f:d8:45:32:1c:f2:
c5:ad:37:c5:c3:60:01:bd:cb:e5:7b:c5:59:43:fa:
b6:4f:36:d1:c7:f3:98:d1:9b:4c:c8:68:10:db:6c:
b9:a4:76:a5:0e:1a:5b:57:21:67:1b:b4:07:bc:43:
d5:47:73:fd:dc:9a:f7:fb:60:16:b5:0b:d0:2e:38:
e1:11:7b:d0:0d:10:b3:74:f3:10:dd:2a:43:18:de:
b6:90:a2:0d:8c:ee:a3:50:65:93:70:a8:ef:0c:6b:
3b:7e:1e:47:7e:55:15:6d:90:0a:9e:88:0a:63:b6:
29:24:4e:5d:90:bc:db:cb:7b:6c:f4:60:c4:d1:dc:
aa:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:86:66:CF:B9:DC:15:6A:63:99:79:AA:46:7A:04:22:DF:9C:1C:F7
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/oIZmz7ncFWpjmXmqRnoEIt-cHPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.39.0/24
45.142.28.0/24
45.153.22.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:dc:44:d8:10:9d:02:1a:dd:c8:d7:26:45:85:98:ae:62:a0:
20:75:86:61:91:f4:95:1b:a7:85:84:f6:a7:ea:0c:17:5d:00:
34:5d:f8:9b:d7:27:99:c5:dd:0d:c2:65:ac:4c:c8:48:e3:b6:
6f:e0:fd:fd:02:94:f0:bb:2e:98:ee:77:2b:f6:b6:10:61:cc:
ab:01:f6:79:cb:f3:3f:e7:b2:fc:08:92:06:a5:06:86:2f:f2:
5b:3d:08:e0:4f:d3:37:ea:f4:0a:75:45:5e:87:ba:4c:0a:dc:
85:0f:22:07:66:1e:e7:cd:c6:0d:7c:4c:28:87:1b:1d:bd:ca:
57:21:51:fa:87:1a:45:1d:a7:98:ec:37:9c:37:b0:28:7b:f0:
cb:0f:ef:21:98:12:66:4d:d9:7e:69:83:c0:61:3e:60:69:a5:
37:47:b9:88:2c:7e:61:16:7c:c8:13:22:5f:23:66:de:e8:f0:
3f:d4:44:3d:38:8c:39:c7:e5:62:71:33:11:b9:12:00:4f:a1:
16:f3:8c:22:bb:5f:61:b5:58:0c:62:9b:ec:64:1c:ad:cc:f8:
4d:e1:65:d0:b9:5d:c9:8d:f2:3f:93:92:7b:f9:0e:fd:7a:f9:
82:a5:0a:32:fb:8c:3c:e6:7c:e5:a5:28:3d:d9:76:cb:8e:ff:
fd:ee:70:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:44 2026 by rpki-client