Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xbEh5P88Qo0whvtRbnU5qT1Xd6s.roa
File: xbEh5P88Qo0whvtRbnU5qT1Xd6s.roa (raw, json)
Hash identifier: r22QIG6bSuXRWAWbw6n3qAXFtihsrWoJpZMupE3DS3o=
Subject key identifier: C5:B1:21:E4:FF:3C:42:8D:30:86:FB:51:6E:75:39:A9:3D:57:77:AB
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A12041F4A041102464D1FC953FC72891A6
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xbEh5P88Qo0whvtRbnU5qT1Xd6s.roa
Signing time: Fri 09 Oct 2026 10:42:35 +0000
ROA not before: Fri 09 Oct 2026 10:42:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207461
IP address blocks: 45.94.46.0/24 maxlen: 24
45.94.47.0/24 maxlen: 24
45.137.42.0/23 maxlen: 23
45.137.62.0/24 maxlen: 24
45.140.14.0/24 maxlen: 24
45.146.181.0/24 maxlen: 24
45.147.28.0/24 maxlen: 24
45.158.196.0/24 maxlen: 24
185.164.57.0/24 maxlen: 24
193.5.65.0/24 maxlen: 24
194.62.67.0/24 maxlen: 24
2a0a:2d06:10::/48 maxlen: 48
2a0a:2d07:e5::/48 maxlen: 48
2a0f:3d86:44::/48 maxlen: 48
2a0f:3d86:100::/48 maxlen: 48
2a0f:3d86:101::/48 maxlen: 48
2a0f:e1c0:37a::/48 maxlen: 48
2a13:8c86:120::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:41:f4:a0:41:10:24:64:d1:fc:95:3f:c7:28:91:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 9 10:42:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5b121e4ff3c428d3086fb516e7539a93d5777ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ac:0b:b7:10:3e:84:79:85:9e:f4:87:bf:fd:
34:31:81:b2:27:9a:85:3b:b7:bd:f4:6d:1c:16:1e:
da:01:be:50:8d:18:21:7c:80:9b:4a:34:3a:f3:d6:
08:0c:13:8f:03:9b:37:bc:17:04:20:fa:e7:85:49:
6f:3b:17:db:06:5c:d8:4e:65:4a:35:a9:a0:b9:69:
24:24:bb:8d:f7:67:61:2f:36:3f:39:a4:2f:34:e8:
76:e8:e9:30:c7:5f:dc:67:07:f9:e8:b5:ca:62:c8:
03:1f:b8:d2:b5:f5:1b:d3:8a:c1:3d:b0:f1:15:5d:
24:b1:03:b1:a6:cc:8f:e7:96:a3:8c:8a:a0:14:66:
92:a4:ca:1b:36:f8:81:a6:b9:2e:77:cf:4f:52:d0:
32:a9:d4:06:00:ab:57:57:d3:ae:39:57:98:34:33:
76:5f:85:2c:43:57:42:14:1f:bc:07:cd:43:43:d3:
29:75:e1:5c:dc:d2:96:e8:ae:7d:77:e4:96:d4:1b:
46:38:a2:34:f1:99:49:2e:ec:78:9c:aa:b6:e7:0e:
61:d0:ae:fc:6c:df:fc:e0:1d:77:d0:31:16:0b:02:
bf:fd:f9:4b:cb:1d:4c:8d:45:26:aa:64:71:d3:50:
8f:ee:46:3f:d7:97:09:70:5c:22:35:c8:b9:76:87:
89:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B1:21:E4:FF:3C:42:8D:30:86:FB:51:6E:75:39:A9:3D:57:77:AB
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xbEh5P88Qo0whvtRbnU5qT1Xd6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.46.0/23
45.137.42.0/23
45.137.62.0/24
45.140.14.0/24
45.146.181.0/24
45.147.28.0/24
45.158.196.0/24
185.164.57.0/24
193.5.65.0/24
194.62.67.0/24
IPv6:
2a0a:2d06:10::/48
2a0a:2d07:e5::/48
2a0f:3d86:44::/48
2a0f:3d86:100::/47
2a0f:e1c0:37a::/48
2a13:8c86:120::/48
Signature Algorithm: sha256WithRSAEncryption
6b:86:48:67:57:9c:76:80:08:28:ea:88:06:f3:9e:83:0d:ac:
34:b8:d4:41:50:dd:0f:5c:50:2c:57:ae:a3:82:07:50:29:37:
d2:f5:d6:c4:0c:dc:35:9b:6f:63:50:bf:a2:4c:b3:57:99:51:
b7:78:19:c9:04:a0:69:e5:16:35:0c:c0:4c:9d:6d:6c:1f:69:
39:ce:84:5e:8e:58:ce:cc:a9:77:bb:37:ce:a8:95:82:6a:6e:
6c:6d:68:33:c0:6a:9e:e4:f8:91:9f:48:be:95:f0:2c:c3:8d:
00:c9:64:68:d2:ad:a9:e4:0c:ff:3e:56:68:06:f5:0b:6c:ec:
43:e7:6d:97:a0:4c:e6:eb:3e:d4:2a:08:38:31:ac:74:20:44:
42:ac:fc:d2:3d:bf:61:78:a2:59:2b:72:76:bb:3c:25:b6:12:
30:3a:e6:72:16:a8:c1:98:4c:2e:71:60:d8:59:b8:af:7c:d2:
a7:c8:40:c6:96:40:c7:09:93:4b:ae:e2:a0:4c:4d:a4:a5:7d:
02:93:69:16:2e:a8:54:1b:83:2f:fb:2b:9b:63:55:4b:dd:d7:
fa:20:5e:9d:88:f9:ae:bc:c8:a1:8b:3c:af:32:5f:73:38:4a:
ae:86:bc:fd:aa:c4:75:ff:3a:27:36:3f:a8:a3:a2:89:76:24:
c3:5a:d6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:16:50 2026 by rpki-client