Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/fiGvZ5iRYAGe9IljNtsDjDBTDYc.roa
File: fiGvZ5iRYAGe9IljNtsDjDBTDYc.roa (raw, json)
Hash identifier: aaRVicEbOlMikpHi5OVNMASHhIL9+XPNkt0leAgpXao=
Subject key identifier: 7E:21:AF:67:98:91:60:01:9E:F4:89:63:36:DB:03:8C:30:53:0D:87
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 019EF92EBB4C513D49198105D005D5EB5A4E
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/fiGvZ5iRYAGe9IljNtsDjDBTDYc.roa
Signing time: Wed 24 Jun 2026 10:30:49 +0000
ROA not before: Wed 24 Jun 2026 10:30:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203020
IP address blocks: 45.74.148.0/22 maxlen: 32
45.142.24.0/24 maxlen: 24
45.142.25.0/24 maxlen: 32
45.142.27.0/24 maxlen: 32
103.93.40.0/24 maxlen: 32
103.93.41.0/24 maxlen: 32
103.93.42.0/24 maxlen: 32
103.93.43.0/24 maxlen: 32
103.111.0.0/22 maxlen: 32
103.124.164.0/24 maxlen: 32
103.124.166.0/24 maxlen: 32
103.204.120.0/24 maxlen: 32
103.204.122.0/24 maxlen: 32
103.204.123.0/24 maxlen: 32
109.104.132.0/24 maxlen: 32
109.104.133.0/24 maxlen: 32
109.104.156.0/24 maxlen: 32
109.104.158.0/24 maxlen: 32
109.104.159.0/24 maxlen: 32
144.48.52.0/24 maxlen: 32
144.48.53.0/24 maxlen: 32
185.153.124.0/22 maxlen: 32
185.233.124.0/22 maxlen: 32
199.168.120.0/24 maxlen: 32
199.168.121.0/24 maxlen: 32
199.168.122.0/24 maxlen: 32
199.168.123.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 10:10:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:2e:bb:4c:51:3d:49:19:81:05:d0:05:d5:eb:5a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Jun 24 10:30:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e21af67989160019ef4896336db038c30530d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:79:89:84:47:a2:85:a1:d6:19:d7:72:6b:d1:
55:e8:f9:dd:7d:be:0b:26:5e:80:d4:89:99:14:05:
5b:43:b5:1d:cb:0c:3e:ad:54:bc:4d:3e:2d:0f:63:
7c:5b:97:ac:a4:82:34:4a:55:01:2c:d8:a6:e2:64:
36:4e:a0:dc:bc:a3:29:98:36:c6:e1:ed:c1:8e:fe:
ff:8a:99:a8:3d:af:89:45:da:a9:7d:c3:a0:49:bd:
b1:62:39:f1:49:11:35:8e:b0:f1:7c:f3:19:24:cf:
61:65:1f:b4:7b:4a:e0:46:27:f0:b4:dd:e7:98:4a:
79:32:18:61:4f:4c:d0:0d:b1:52:24:cc:5b:74:92:
4d:bd:44:0c:fc:28:b4:ba:b5:97:97:35:fa:1c:ee:
bd:d1:4f:88:88:03:54:3b:09:b6:be:cb:69:1b:29:
4d:84:58:dd:47:1c:93:d1:a2:ea:96:0e:10:d1:7b:
d5:57:bf:f0:ff:ba:fb:f9:c6:7d:33:66:2c:fc:bf:
08:45:28:33:b7:7f:90:91:de:8f:2e:95:5c:45:62:
0c:ce:1a:4c:42:70:28:35:eb:06:c5:d7:fe:a9:71:
bc:17:cb:8c:e9:d8:76:ae:f7:d4:37:65:fa:a4:30:
bb:e1:75:b3:bb:09:1c:7c:44:cb:b7:a9:12:b0:56:
26:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:21:AF:67:98:91:60:01:9E:F4:89:63:36:DB:03:8C:30:53:0D:87
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/fiGvZ5iRYAGe9IljNtsDjDBTDYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.74.148.0/22
45.142.24.0/23
45.142.27.0/24
103.93.40.0/22
103.111.0.0/22
103.124.164.0/24
103.124.166.0/24
103.204.120.0/24
103.204.122.0/23
109.104.132.0/23
109.104.156.0/24
109.104.158.0/23
144.48.52.0/23
185.153.124.0/22
185.233.124.0/22
199.168.120.0/22
Signature Algorithm: sha256WithRSAEncryption
76:a7:4d:b7:5f:7d:29:8d:14:ac:04:60:00:57:a7:72:e0:3f:
46:89:35:6d:47:e8:21:63:6f:47:bb:d3:44:2c:b7:11:66:72:
91:e9:f6:bb:09:3e:21:0f:f8:96:b3:d4:58:4a:ab:0d:c2:ae:
36:a9:4d:27:f6:81:67:2c:05:c4:1f:46:07:c6:45:f6:24:f9:
e6:73:c5:fb:1b:f4:47:86:80:93:88:ac:20:3a:90:1f:ec:3d:
a3:ca:79:23:3b:f0:a0:16:1e:c5:73:23:dd:87:85:66:3a:e7:
65:60:52:f9:6f:07:eb:50:13:c7:51:98:7a:5f:f0:69:29:3d:
da:b0:59:b3:d2:18:9d:89:35:d0:f6:5a:7e:95:ad:5a:3a:e7:
ca:0a:28:e7:ae:ca:64:b9:84:c0:36:51:41:b4:97:8a:be:75:
65:f1:cf:fe:b9:c6:ed:3c:7f:3c:7b:d4:6b:66:e6:65:5c:3c:
f6:98:87:1a:fe:1a:d3:97:de:e0:c3:7f:7b:46:32:4d:1d:c1:
01:48:0e:23:7e:68:80:da:32:e4:5f:f5:84:e1:76:90:55:33:
72:06:13:21:ac:cc:f1:ac:21:61:4e:26:67:e3:fa:31:4c:38:
7d:bc:f4:17:b8:7f:e4:e0:25:f9:07:e1:00:ef:62:19:a1:34:
49:a8:86:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 16:30:52 2026 by rpki-client