Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/raD7wvr0TvKrEvtYxhgDhDykZL0.roa
File: raD7wvr0TvKrEvtYxhgDhDykZL0.roa (raw, json)
Hash identifier: ZH0H7QhGDMc2MvPc+MJKw1tOd2Aq2f2jOpFxkwLqpAI=
Subject key identifier: AD:A0:FB:C2:FA:F4:4E:F2:AB:12:FB:58:C6:18:03:84:3C:A4:64:BD
Certificate issuer: /CN=644ca1f90518d4253f325947d7f32db78721647c
Certificate serial: 019FF4E9CDFDACBEF35568B911069D10C71A
Authority key identifier: 64:4C:A1:F9:05:18:D4:25:3F:32:59:47:D7:F3:2D:B7:87:21:64:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/raD7wvr0TvKrEvtYxhgDhDykZL0.roa
Signing time: Wed 12 Aug 2026 07:39:51 +0000
ROA not before: Wed 12 Aug 2026 07:39:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15830
IP address blocks: 185.245.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f4:e9:cd:fd:ac:be:f3:55:68:b9:11:06:9d:10:c7:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644ca1f90518d4253f325947d7f32db78721647c
Validity
Not Before: Aug 12 07:39:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ada0fbc2faf44ef2ab12fb58c61803843ca464bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:15:c7:e5:ae:62:48:de:a0:73:e5:d8:d5:82:
07:01:4a:0f:ac:97:61:ec:bb:a6:48:af:e8:b6:3c:
fa:2e:5f:8e:01:36:b0:b5:e2:5e:2f:a0:ed:f6:c4:
eb:a1:ac:a5:5e:48:ac:b3:b9:35:5d:31:b6:ee:3a:
22:0c:9a:c8:a6:f1:97:52:97:ae:19:4c:a4:e0:62:
e2:d6:ca:16:e4:a4:e7:a3:b9:ec:49:0a:17:2f:6f:
6d:c1:ea:ef:88:30:76:ec:8e:f4:59:89:f5:16:22:
99:be:93:e3:0a:25:0d:2c:68:00:f9:36:e5:12:89:
08:c0:87:7d:a3:6a:8b:c8:24:3f:69:bf:74:7f:49:
1b:5a:96:72:13:1a:39:22:15:18:13:28:61:03:ec:
24:00:2a:45:57:f4:6f:d0:f0:83:ea:c3:55:16:34:
85:2d:87:e2:0d:a9:3d:4a:ca:fb:86:5b:4e:dc:5c:
a7:6d:68:29:f9:6e:f0:d4:1f:96:ee:29:13:3f:82:
93:fb:22:0f:0e:3d:ae:ae:b4:18:6c:4b:d3:b3:a2:
a9:ec:6f:83:d2:58:c5:50:15:c3:ef:b0:9f:58:23:
54:f9:f9:2e:48:8a:37:e3:5a:e6:0a:e8:40:8d:78:
34:fe:98:46:e4:65:5f:fe:54:83:81:f4:4a:b1:15:
a9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A0:FB:C2:FA:F4:4E:F2:AB:12:FB:58:C6:18:03:84:3C:A4:64:BD
X509v3 Authority Key Identifier:
keyid:64:4C:A1:F9:05:18:D4:25:3F:32:59:47:D7:F3:2D:B7:87:21:64:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/raD7wvr0TvKrEvtYxhgDhDykZL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.49.0/24
Signature Algorithm: sha256WithRSAEncryption
57:a6:84:b4:f5:f2:57:ce:96:af:87:1d:2e:15:df:3e:42:a2:
4e:f9:a1:d2:5a:3a:3a:a2:31:18:e1:04:d3:c6:c9:91:ef:13:
88:fd:d0:2b:8f:a8:b0:58:bf:3e:33:f1:fb:c6:e2:b4:20:13:
eb:69:fe:08:36:5e:9a:21:60:f8:48:f9:c0:4a:f4:65:f8:96:
31:bb:48:74:41:68:2b:98:94:3e:5d:e2:fa:e9:ea:eb:42:28:
54:45:b8:0a:9a:9c:ef:96:08:02:c8:8b:a7:ab:45:90:d4:65:
28:ef:f9:4e:b9:3a:6a:61:5c:84:87:b8:39:c2:a4:29:6b:5a:
42:08:7d:fd:25:b5:8c:a0:ab:a6:97:2b:24:73:50:ae:3e:23:
d1:2f:a6:49:08:5b:07:88:80:d6:c2:75:d1:1a:a9:c9:30:4c:
c3:3c:e8:16:9c:15:71:3b:1d:4b:d8:93:a1:a6:4a:81:fd:45:
27:88:ab:27:6d:26:07:8b:65:3f:e9:4e:c6:b5:d3:0e:e4:58:
a4:5c:e0:cc:35:30:94:f9:53:90:91:87:e6:93:d3:24:8f:dc:
ff:4e:b4:5c:95:2b:08:52:a0:bb:bc:af:23:e3:c3:00:ec:8a:
2f:5c:eb:80:d5:02:bf:f7:ca:3d:68:c1:19:5f:97:5d:a5:04:
a3:0f:c3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 10:10:24 2026 by rpki-client