Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/p0CDC8ecbb2WPTziMibDrUvYU0M.roa
File: p0CDC8ecbb2WPTziMibDrUvYU0M.roa (raw, json)
Hash identifier: cnF3FYDzESuIRuD4I+Q61RGRhpa/H/Q+vR74LxewxEY=
Subject key identifier: A7:40:83:0B:C7:9C:6D:BD:96:3D:3C:E2:32:26:C3:AD:4B:D8:53:43
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A1532AD7B60FBD4B6FAD488E1CF8FBD113
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/p0CDC8ecbb2WPTziMibDrUvYU0M.roa
Signing time: Mon 19 Oct 2026 07:57:59 +0000
ROA not before: Mon 19 Oct 2026 07:57:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 27411
IP address blocks: 45.137.87.0/24 maxlen: 24
45.152.197.0/24 maxlen: 24
2a0c:7886:b4::/48 maxlen: 48
2a13:9280::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 20:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:2a:d7:b6:0f:bd:4b:6f:ad:48:8e:1c:f8:fb:d1:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 19 07:57:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a740830bc79c6dbd963d3ce23226c3ad4bd85343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b9:e9:1e:8f:31:f9:7a:df:fd:b0:c0:96:5c:
10:2b:6b:c5:d7:ab:93:a4:1a:c2:77:df:20:c6:9b:
35:8d:cf:96:a0:cd:1b:a2:fc:43:79:59:dd:d9:b9:
9d:4f:e6:68:4b:58:54:7d:f9:8e:d8:c9:c4:13:b5:
ae:94:b8:d7:e9:59:c8:2a:0d:6e:c0:9f:62:f3:05:
07:e1:0e:8b:3f:c0:62:32:1d:00:dd:7b:b9:9e:a9:
43:52:2e:ff:27:50:d7:f1:c2:ce:30:00:8d:19:1c:
f2:44:61:5b:2c:b4:82:c3:9a:fe:a2:ac:93:5d:e9:
18:2c:90:b4:da:7a:da:b1:83:20:d6:60:55:d7:07:
fc:12:2f:da:94:64:e5:15:de:08:f8:e3:76:4d:fe:
21:86:66:75:cc:8f:19:a8:3a:dd:35:53:25:6b:a6:
37:ad:a0:93:e5:8b:21:24:34:f1:9c:27:ee:f7:e7:
c5:01:51:93:17:10:96:af:27:96:43:bd:21:cc:fe:
51:4d:70:83:29:1d:d1:51:46:3a:5f:a5:cf:66:85:
02:4a:83:94:f0:c4:71:9f:ef:60:75:9d:b5:2c:3b:
62:3a:f7:6b:3a:cc:65:d9:fd:8f:14:0a:d3:ca:4f:
fc:a6:36:f2:f1:1a:d9:a6:bb:40:a0:96:a5:b2:19:
d9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:40:83:0B:C7:9C:6D:BD:96:3D:3C:E2:32:26:C3:AD:4B:D8:53:43
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/p0CDC8ecbb2WPTziMibDrUvYU0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.87.0/24
45.152.197.0/24
IPv6:
2a0c:7886:b4::/48
2a13:9280::/32
Signature Algorithm: sha256WithRSAEncryption
b8:52:cb:9e:e4:b4:d0:d1:24:ad:24:97:a2:5e:7a:e9:d6:87:
dc:ee:16:63:07:ee:b3:8d:c5:43:de:d3:d3:c3:c2:d3:b4:4e:
97:80:9c:33:bd:ee:3d:37:d4:62:a7:6d:bd:38:16:a7:16:ba:
76:7f:2b:63:fa:02:2a:c4:51:4e:6c:17:f2:8b:af:7a:f5:ad:
df:71:d9:1d:e9:9c:ca:ca:3a:8e:fb:83:ad:66:de:8f:63:63:
de:c3:f6:ae:b9:ae:24:36:c9:e8:78:19:e7:6f:e6:41:3c:27:
57:9c:9d:0a:06:cc:b9:24:5d:e9:88:45:05:d2:a5:a8:fd:6c:
a0:f9:46:c5:d3:02:4c:6b:22:05:f2:79:7a:1b:9b:1e:b7:b5:
93:21:b8:c5:10:be:51:56:d4:2e:ca:70:f8:99:e9:fc:b6:90:
cb:b2:7e:94:dd:bb:bf:13:32:b0:20:a8:e5:05:b7:8a:9e:43:
58:41:f0:93:2f:6a:d4:50:16:6c:91:e5:0b:d3:44:47:e5:bd:
0d:23:f4:d9:30:19:52:37:cd:2e:95:cd:19:3d:99:f4:58:ae:
13:41:76:0f:bf:7f:a6:03:aa:a9:cf:33:ef:17:a5:a8:ee:f0:
22:b8:53:31:95:a5:77:a7:9f:17:6d:8d:88:f7:0c:8f:45:dd:
84:92:0e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:32:09 2026 by rpki-client