Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7-LAUmqRYSPhgpPWA9g2trJarzg.roa
File: 7-LAUmqRYSPhgpPWA9g2trJarzg.roa (raw, json)
Hash identifier: sE/yWJoic199GC6SMfgZptxKZeUId7xlWtFaEXU5vpA=
Subject key identifier: EF:E2:C0:52:6A:91:61:23:E1:82:93:D6:03:D8:36:B6:B2:5A:AF:38
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A044B8B311FAC4D8BAECD85B3675013F9E
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7-LAUmqRYSPhgpPWA9g2trJarzg.roa
Signing time: Thu 27 Aug 2026 19:35:50 +0000
ROA not before: Thu 27 Aug 2026 19:35:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197646
IP address blocks: 45.152.200.0/24 maxlen: 24
176.96.142.0/24 maxlen: 24
176.96.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:44:b8:b3:11:fa:c4:d8:ba:ec:d8:5b:36:75:01:3f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 27 19:35:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=efe2c0526a916123e18293d603d836b6b25aaf38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cb:b0:dd:44:8d:26:cd:2c:82:0a:d0:ec:d0:
34:fc:48:fd:c9:40:a8:5d:db:a4:75:2c:7b:21:c7:
28:ca:9b:e5:e1:51:4e:4c:41:74:ef:0f:d1:8b:74:
b6:c3:56:dc:c4:48:6b:06:d5:c3:3d:fd:e4:ae:01:
dc:40:01:0f:96:b8:f2:e7:70:77:23:c9:94:5a:00:
3a:0f:66:8f:d2:2a:ab:e8:6c:4e:fb:81:8d:f8:ff:
cb:8d:00:0f:67:2e:1c:b2:4d:ec:16:c0:3b:fd:81:
cd:c9:ed:7a:1a:f4:3a:75:21:3d:2f:54:04:04:c0:
e8:ec:c2:42:a9:87:3b:3c:64:e7:ab:92:72:b0:22:
0e:9c:7c:42:65:1b:b4:82:5f:c8:a5:c3:e1:bb:c5:
b3:ab:78:86:bd:ac:8d:0b:34:26:cc:84:64:ee:dd:
8d:7e:99:73:94:88:26:21:97:da:23:6c:ad:b5:10:
09:84:9e:ed:ef:f3:1b:21:28:65:6a:ae:7d:4a:68:
b4:7e:8d:e1:ab:28:74:d1:24:85:ab:04:7d:0d:4a:
eb:08:76:88:75:86:33:e2:ab:c1:64:c7:cc:77:9a:
08:e2:9f:1e:b5:bc:c0:3a:3a:f1:6f:38:06:57:d6:
1f:40:bd:11:63:a8:06:05:ea:7b:50:81:91:51:ab:
98:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E2:C0:52:6A:91:61:23:E1:82:93:D6:03:D8:36:B6:B2:5A:AF:38
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7-LAUmqRYSPhgpPWA9g2trJarzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.200.0/24
176.96.142.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:b4:43:6c:15:f9:2a:c8:fd:c0:9e:cf:14:50:07:27:2d:53:
c3:94:9d:4d:65:0c:4a:98:b5:f5:b6:48:db:0d:85:9c:89:60:
85:ef:19:c1:e9:8e:ba:07:b1:86:48:ea:28:7c:86:28:4a:03:
40:7a:eb:57:96:b9:2f:cf:3a:d7:83:e3:f7:58:42:9f:50:9a:
13:60:05:a4:7d:5d:4a:39:ae:d6:8d:05:81:d3:03:e9:c3:54:
57:a6:4b:f7:56:fe:b5:a4:4c:7d:fb:91:e3:d0:08:6f:4b:fa:
34:d2:87:99:0c:f4:f2:e0:e1:a5:8a:4d:d0:1a:5e:6c:23:50:
95:33:57:e5:86:2c:ab:31:f5:af:3e:61:67:2c:aa:1f:99:cb:
df:a4:96:16:bf:4b:b4:fa:a0:ae:f7:2a:ad:5c:be:cc:a1:f0:
ac:e2:3f:75:af:2e:00:4f:79:81:1f:07:d8:12:9d:92:d6:46:
c4:64:04:96:a1:c7:8c:04:4e:85:dd:0e:4d:6c:88:56:2f:a8:
c4:d9:03:c0:65:94:45:41:d5:5c:20:87:6a:e8:22:a0:1d:aa:
ea:c0:60:79:86:36:56:ca:25:96:cf:9c:e7:70:23:92:b4:20:
de:a6:01:1b:82:4a:15:5c:74:31:de:4b:86:5d:c5:44:9a:fe:
b5:d5:6a:36
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaBEuLMR+sTYuuzYWzZ1AT+eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYwODI3MTkzNTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZmUyYzA1MjZhOTE2MTIzZTE4MjkzZDYwM2Q4MzZiNmIyNWFhZjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsuw3USNJs0sggrQ7NA0/Ej9yUCo
XdukdSx7Iccoypvl4VFOTEF07w/Ri3S2w1bcxEhrBtXDPf3krgHcQAEPlrjy53B3
I8mUWgA6D2aP0iqr6GxO+4GN+P/LjQAPZy4csk3sFsA7/YHNye16GvQ6dSE9L1QE
BMDo7MJCqYc7PGTnq5JysCIOnHxCZRu0gl/IpcPhu8Wzq3iGvayNCzQmzIRk7t2N
fplzlIgmIZfaI2yttRAJhJ7t7/MbIShlaq59Smi0fo3hqyh00SSFqwR9DUrrCHaI
dYYz4qvBZMfMd5oI4p8etbzAOjrxbzgGV9YfQL0RY6gGBep7UIGRUauYawIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFO/iwFJqkWEj4YKT1gPYNrayWq84MB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvNy1MQVVtcVJZU1BoZ3BQV0E5ZzJ0ckphcnpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZjIAwQB
sGCOMA0GCSqGSIb3DQEBCwUAA4IBAQCitENsFfkqyP3Ans8UUAcnLVPDlJ1NZQxK
mLX1tkjbDYWciWCF7xnB6Y66B7GGSOoofIYoSgNAeutXlrkvzzrXg+P3WEKfUJoT
YAWkfV1KOa7WjQWB0wPpw1RXpkv3Vv61pEx9+5Hj0AhvS/o00oeZDPTy4OGlik3Q
Gl5sI1CVM1flhiyrMfWvPmFnLKofmcvfpJYWv0u0+qCu9yqtXL7MofCs4j91ry4A
T3mBHwfYEp2S1kbEZASWoceMBE6F3Q5NbIhWL6jE2QPAZZRFQdVcIIdq6CKgHarq
wGB5hjZWyiWWz5zncCOStCDepgEbgkoVXHQx3kuGXcVEmv611Wo2
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:42 2026 by rpki-client