Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sImBQTnYSdxSR8BgNtDKlTIS6zM.roa
File: sImBQTnYSdxSR8BgNtDKlTIS6zM.roa (raw, json)
Hash identifier: oOPizOdDRo/PuvUTdqd38L+0bxANDTQ4FFiGjCrFdt4=
Subject key identifier: B0:89:81:41:39:D8:49:DC:52:47:C0:60:36:D0:CA:95:32:12:EB:33
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019F248C556A30DE7144D067A00266C0D583
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sImBQTnYSdxSR8BgNtDKlTIS6zM.roa
Signing time: Thu 02 Jul 2026 20:36:44 +0000
ROA not before: Thu 02 Jul 2026 20:36:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203273
IP address blocks: 45.9.117.0/24 maxlen: 24
45.86.245.0/24 maxlen: 24
45.94.37.0/24 maxlen: 24
45.129.124.0/24 maxlen: 24
45.129.126.0/24 maxlen: 24
45.131.215.0/24 maxlen: 24
45.133.209.0/24 maxlen: 24
45.133.210.0/24 maxlen: 24
45.137.42.0/24 maxlen: 24
45.137.43.0/24 maxlen: 24
185.99.98.0/24 maxlen: 24
185.126.64.0/24 maxlen: 24
194.62.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:24:8c:55:6a:30:de:71:44:d0:67:a0:02:66:c0:d5:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 2 20:36:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b089814139d849dc5247c06036d0ca953212eb33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9f:75:bf:02:53:05:30:d7:00:a7:75:79:af:
b8:a9:f9:d4:0f:57:4d:11:0f:ee:76:bc:ad:71:70:
00:dd:61:f9:9f:ae:97:6c:fc:aa:cf:dd:dd:b5:f6:
ba:3d:82:fa:ec:f6:1b:88:98:a0:3f:ed:42:13:24:
c4:a9:d1:30:e9:84:34:bf:41:7d:ba:e9:ec:6c:a0:
1f:d6:e3:e4:a6:2d:82:d1:2f:2a:2b:3e:6f:78:cb:
d1:d0:8d:3a:51:e3:80:f6:3a:96:ca:58:bd:88:09:
82:bf:e3:35:32:05:0c:cc:c5:e1:31:77:c6:fe:fe:
7a:66:48:64:cc:e0:e4:b9:81:14:b1:91:ef:d4:13:
03:9f:59:3a:0a:45:2b:85:b4:58:0f:40:b6:08:1b:
fd:95:54:62:d7:87:14:8b:4e:c2:9f:4e:16:73:83:
55:6e:ec:8e:4e:1c:7c:95:fd:10:79:ce:cf:39:5e:
e2:21:07:78:39:9e:65:dd:9f:f2:bb:cc:4e:67:1e:
3a:16:b6:76:ca:27:30:e3:d9:fa:46:71:64:ce:f0:
c1:de:d4:1a:57:58:50:d6:e1:89:35:33:87:34:72:
a6:56:92:d7:73:f3:64:68:a0:2a:6f:b2:99:7a:30:
ed:3d:b7:dd:76:9b:4b:b4:0d:ce:3f:05:ba:19:37:
21:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:89:81:41:39:D8:49:DC:52:47:C0:60:36:D0:CA:95:32:12:EB:33
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sImBQTnYSdxSR8BgNtDKlTIS6zM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.117.0/24
45.86.245.0/24
45.94.37.0/24
45.129.124.0/24
45.129.126.0/24
45.131.215.0/24
45.133.209.0-45.133.210.255
45.137.42.0/23
185.99.98.0/24
185.126.64.0/24
194.62.66.0/24
Signature Algorithm: sha256WithRSAEncryption
98:69:61:43:4b:d1:6a:8c:0d:e6:fb:2b:38:a2:1b:15:ea:63:
71:f5:cf:46:a7:32:02:ef:52:7b:27:15:50:cc:ae:23:72:63:
02:06:6e:fb:24:e6:3b:15:46:e6:20:03:5c:cb:59:ee:7b:7d:
18:90:49:3a:c8:ec:88:ae:b6:81:74:ae:23:53:25:6b:2d:e4:
7d:9e:fd:91:18:de:6f:79:9f:13:87:cc:7d:7a:8d:1d:7a:a6:
7e:ed:e2:87:b8:7b:8d:0f:af:d4:78:aa:29:ba:3e:d6:08:c0:
b5:3d:6e:dd:12:30:3e:d0:96:49:55:84:e4:b6:93:b4:af:86:
56:ec:6e:36:09:6d:17:fe:cf:58:ff:1b:81:89:60:45:d4:06:
05:ae:48:8d:d2:4a:bf:ea:b0:46:36:70:69:95:e1:dd:c1:ae:
df:6a:f5:23:9c:64:c0:ff:7a:8d:c2:78:d5:78:76:3f:65:29:
d9:dd:b3:80:c0:5a:fb:c8:61:bc:18:11:96:8c:4d:1a:1a:9d:
76:b6:5a:e2:38:0e:31:f5:f3:40:37:86:4f:61:3e:79:fe:40:
e3:5f:7b:00:02:59:c6:a9:02:49:6f:49:6b:e6:ba:0c:02:02:
b2:0d:0d:92:70:3a:c4:e6:bf:60:0e:77:b3:6c:74:ae:60:66:
a8:26:2f:53
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgISAZ8kjFVqMN5xRNBnoAJmwNWDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYwNzAyMjAzNjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDg5ODE0MTM5ZDg0OWRjNTI0N2MwNjAzNmQwY2E5NTMyMTJlYjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkp91vwJTBTDXAKd1ea+4qfnUD1dN
EQ/udrytcXAA3WH5n66XbPyqz93dtfa6PYL67PYbiJigP+1CEyTEqdEw6YQ0v0F9
uunsbKAf1uPkpi2C0S8qKz5veMvR0I06UeOA9jqWyli9iAmCv+M1MgUMzMXhMXfG
/v56ZkhkzODkuYEUsZHv1BMDn1k6CkUrhbRYD0C2CBv9lVRi14cUi07Cn04Wc4NV
buyOThx8lf0Qec7POV7iIQd4OZ5l3Z/yu8xOZx46FrZ2yicw49n6RnFkzvDB3tQa
V1hQ1uGJNTOHNHKmVpLXc/NkaKAqb7KZejDtPbfddptLtA3OPwW6GTchYwIDAQAB
o4ICTTCCAkkwHQYDVR0OBBYEFLCJgUE52EncUkfAYDbQypUyEuszMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvc0ltQlFUbllTZHhTUjhCZ050REtsVElTNnpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQALQl1AwQA
LVb1AwQALV4lAwQALYF8AwQALYF+AwQALYPXMAwDBAAthdEDBAAthdIDBAEtiSoD
BAC5Y2IDBAC5fkADBADCPkIwDQYJKoZIhvcNAQELBQADggEBAJhpYUNL0WqMDeb7
KziiGxXqY3H1z0anMgLvUnsnFVDMriNyYwIGbvsk5jsVRuYgA1zLWe57fRiQSTrI
7IiutoF0riNTJWst5H2e/ZEY3m95nxOHzH16jR16pn7t4oe4e40Pr9R4qim6PtYI
wLU9bt0SMD7QlklVhOS2k7SvhlbsbjYJbRf+z1j/G4GJYEXUBgWuSI3SSr/qsEY2
cGmV4d3Brt9q9SOcZMD/eo3CeNV4dj9lKdnds4DAWvvIYbwYEZaMTRoanXa2WuI4
DjH180A3hk9hPnn+QONfewACWcapAklvSWvmugwCArINDZJwOsTmv2AOd7NsdK5g
ZqgmL1M=
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:43 2026 by rpki-client