Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/s7-_V8eq9nAcgWqdA7t-cVwfIEc.roa
File: s7-_V8eq9nAcgWqdA7t-cVwfIEc.roa (raw, json)
Hash identifier: 5/QMVsojDieKIpEs2xm/oPOQCJ4H/DTFqoL87t2mzT0=
Subject key identifier: B3:BF:BF:57:C7:AA:F6:70:1C:81:6A:9D:03:BB:7E:71:5C:1F:20:47
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A12F08F759642D423A07E0A0AEC96C074E
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/s7-_V8eq9nAcgWqdA7t-cVwfIEc.roa
Signing time: Mon 12 Oct 2026 07:34:39 +0000
ROA not before: Mon 12 Oct 2026 07:34:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197622
IP address blocks: 45.94.38.0/24 maxlen: 24
113.30.155.0/24 maxlen: 24
213.139.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:08:f7:59:64:2d:42:3a:07:e0:a0:ae:c9:6c:07:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 12 07:34:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3bfbf57c7aaf6701c816a9d03bb7e715c1f2047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f2:25:a8:79:2a:6b:ac:b1:44:b5:4b:24:04:
d7:eb:cc:ba:db:f6:70:09:a4:b4:14:1b:9d:66:1f:
24:33:9f:a5:84:04:e3:df:fe:f2:93:70:cf:d8:70:
f6:b7:48:aa:61:28:12:27:86:76:db:35:c3:1a:14:
d6:4a:9c:3f:87:e5:ba:30:f7:3a:71:65:85:1d:13:
73:0b:40:55:d2:20:ea:6d:ca:a8:c6:f6:9d:bc:9e:
ae:b2:d5:d3:8c:c6:b3:88:14:76:a2:f2:c2:b7:52:
d4:d1:ea:99:37:00:b0:4c:3c:4a:92:61:3c:e8:df:
85:bc:05:57:78:36:40:5d:cf:2f:a0:ef:2e:3e:25:
b3:99:f6:28:8f:07:9f:d3:3d:af:91:b7:c9:19:65:
06:7a:1c:48:bc:b6:b9:fb:9a:01:9b:af:0e:83:25:
0c:58:36:a0:9a:64:e8:63:00:ff:14:25:91:d4:71:
e0:30:cb:bd:b4:4b:e2:b9:4c:7c:6c:1b:ce:3d:27:
65:2e:fd:d6:5e:3d:b7:c2:2e:de:44:8a:e4:17:4d:
d8:d7:66:d9:4f:4c:9a:38:1e:00:1f:3f:76:c3:e5:
a7:5f:56:69:ff:ae:35:0f:bf:4d:71:c6:fd:59:d6:
6a:59:09:97:c9:d4:1e:cf:5d:e7:12:c3:43:da:b2:
78:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BF:BF:57:C7:AA:F6:70:1C:81:6A:9D:03:BB:7E:71:5C:1F:20:47
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/s7-_V8eq9nAcgWqdA7t-cVwfIEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.38.0/24
113.30.155.0/24
213.139.219.0/24
Signature Algorithm: sha256WithRSAEncryption
40:02:d9:83:ce:2c:a6:6e:f9:c8:a9:5d:89:ae:26:75:f6:ee:
4a:40:6c:84:8a:7b:2f:65:06:49:6a:df:1a:a5:ee:af:41:f5:
b2:aa:db:a4:8b:2a:7d:37:07:6c:a6:30:78:50:98:7e:47:ef:
28:20:ab:79:f2:96:1d:c1:27:b6:ba:84:9b:d2:ab:3a:11:1f:
e8:1c:83:06:83:da:21:20:03:4a:45:d5:62:3e:fc:4b:74:75:
08:d1:98:02:d7:99:59:ab:3e:ae:72:39:f2:cd:1c:5e:1b:89:
70:d6:88:3f:07:e1:b8:ce:90:81:66:7e:c7:42:7d:49:90:6f:
d7:29:15:fe:a8:37:76:64:0c:2d:be:f4:fb:76:4c:04:c1:f0:
db:5d:37:2e:43:f7:72:b5:56:34:a4:1e:3d:b7:ea:5f:ac:2a:
95:74:dd:98:31:52:59:9d:e1:04:21:d8:13:5e:e6:cc:85:4f:
93:28:27:b7:96:3a:62:98:27:9b:3d:84:31:a6:d7:86:e2:37:
4a:e1:45:fa:1e:71:78:13:09:d1:d7:4e:b4:8d:1f:fe:cc:ca:
5f:0b:4f:bb:cb:3c:d8:ac:fe:54:33:db:c2:d4:f3:6d:1b:87:
f7:6e:66:3b:55:b1:4c:2b:de:50:61:65:e9:cb:d2:ba:ae:bd:
32:e3:d1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:21:58 2026 by rpki-client