Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/yxWycfqrwpUgzvle9U9ADUufixo.roa
File: yxWycfqrwpUgzvle9U9ADUufixo.roa (raw, json)
Hash identifier: Wsylt5E7+31n6JZIVEq/t4XcOgv/HaDys3BrOLXarmo=
Subject key identifier: CB:15:B2:71:FA:AB:C2:95:20:CE:F9:5E:F5:4F:40:0D:4B:9F:8B:1A
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A11A78309E767C7A4B99CAC5FCB7F53FD5
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/yxWycfqrwpUgzvle9U9ADUufixo.roa
Signing time: Thu 08 Oct 2026 07:44:06 +0000
ROA not before: Thu 08 Oct 2026 07:44:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29066
IP address blocks: 2.56.102.0/24 maxlen: 24
2.59.23.0/24 maxlen: 24
45.86.14.0/24 maxlen: 24
45.133.220.0/24 maxlen: 24
45.133.221.0/24 maxlen: 24
45.133.222.0/24 maxlen: 24
45.133.223.0/24 maxlen: 24
45.152.203.0/24 maxlen: 24
64.226.54.0/24 maxlen: 24
193.39.244.0/24 maxlen: 24
193.58.109.0/24 maxlen: 24
193.58.110.0/24 maxlen: 24
193.58.111.0/24 maxlen: 24
2a0f:2d84::/32 maxlen: 32
2a0f:4a00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 11:36:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:78:30:9e:76:7c:7a:4b:99:ca:c5:fc:b7:f5:3f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 8 07:44:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb15b271faabc29520cef95ef54f400d4b9f8b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2f:6a:47:d0:96:46:cd:27:d0:e7:a3:f4:05:
83:a9:ac:f5:e6:58:e8:bf:da:43:77:e9:85:89:6c:
ce:8a:a0:69:ff:fa:ce:2e:d7:e0:1e:66:e6:66:32:
d2:95:a1:2c:8d:05:50:6b:e9:49:b9:23:13:93:1a:
df:dc:8a:a6:57:13:d8:c5:f1:0e:b4:0a:01:44:c6:
5d:a3:2e:54:f1:03:a2:e7:cc:ca:86:9e:07:e9:0a:
32:8a:bd:73:b3:ee:01:d9:58:2b:d4:e2:ca:fd:6e:
b1:75:92:12:71:c9:40:23:c0:4a:2e:ce:55:66:1c:
7d:e4:ea:22:db:5a:67:c8:36:25:92:a9:06:f2:36:
e9:a1:a1:a5:7a:53:a3:2b:f4:1b:1c:53:c2:ec:9c:
35:bf:88:9f:82:ac:fc:5b:e2:48:8d:8b:10:d8:b0:
74:23:d5:fd:c4:b3:e4:f9:90:11:e6:68:eb:58:1f:
ba:ec:fa:dd:49:25:94:fc:23:2d:30:ab:53:e6:68:
e7:8b:f6:47:d4:fb:9b:9e:04:b4:3a:3a:84:14:92:
ae:50:27:07:0b:83:b8:64:67:a1:1d:66:a3:20:78:
93:c4:d5:c6:d3:3e:a4:cb:db:6d:a9:5b:57:83:6d:
d5:53:81:fb:f6:42:58:a5:02:b4:c8:df:3f:ad:3c:
99:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:15:B2:71:FA:AB:C2:95:20:CE:F9:5E:F5:4F:40:0D:4B:9F:8B:1A
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/yxWycfqrwpUgzvle9U9ADUufixo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.102.0/24
2.59.23.0/24
45.86.14.0/24
45.133.220.0/22
45.152.203.0/24
64.226.54.0/24
193.39.244.0/24
193.58.109.0-193.58.111.255
IPv6:
2a0f:2d84::/32
2a0f:4a00::/29
Signature Algorithm: sha256WithRSAEncryption
26:76:c2:87:03:ec:aa:d7:f2:d1:2c:c2:1c:8a:97:49:de:d4:
5e:9a:56:23:4c:83:db:5c:45:f3:84:d9:c7:38:b1:a5:68:ef:
a1:ec:a7:a6:cf:94:05:8c:12:53:36:21:e7:3c:58:35:65:03:
13:ee:42:a7:5f:eb:c5:ff:6f:f5:a6:7d:d3:1b:fd:64:0f:89:
7a:6e:42:d0:13:7e:53:93:0e:3c:dd:4f:84:d8:5d:b0:04:85:
6e:7a:8d:6a:13:ee:68:93:3d:e2:0f:6e:1c:c2:b3:b7:9f:f1:
8e:d5:13:74:d8:f8:0e:6f:d6:a1:0c:74:61:2b:ab:36:18:02:
24:05:f5:a5:3c:0d:df:2f:ba:5d:35:a1:9c:c3:95:ec:ab:bd:
6a:ad:67:2d:35:f4:9a:e7:a4:a0:97:17:c7:02:ce:a6:4c:c3:
0f:c9:59:08:6a:1a:e4:01:a2:45:53:10:29:90:78:18:b1:1d:
f6:d4:58:50:d8:bc:91:2d:ab:50:b0:9b:4c:cd:1b:93:62:a3:
ee:5d:c8:5b:6c:79:a3:d1:f8:f1:10:14:39:cc:e4:13:1e:9d:
63:ec:82:f7:38:ff:13:44:d0:47:64:f7:4e:f4:07:10:42:29:
5e:29:3d:92:14:6d:b9:b2:84:27:f8:d4:92:dc:36:3a:b7:c3:
7f:1d:db:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:20:32 2026 by rpki-client