Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7moDZE6LoABE0ALHQmciFemM8lg.roa
File: 7moDZE6LoABE0ALHQmciFemM8lg.roa (raw, json)
Hash identifier: ZlxkYOZglAHnx4PS+D8MS4kC+rHTQj6lXZGuim+jbWs=
Subject key identifier: EE:6A:03:64:4E:8B:A0:00:44:D0:02:C7:42:67:22:15:E9:8C:F2:58
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A086E8EFC98F7007CB5F49C65CB8AEA45F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7moDZE6LoABE0ALHQmciFemM8lg.roa
Signing time: Wed 09 Sep 2026 16:03:27 +0000
ROA not before: Wed 09 Sep 2026 16:03:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216332
IP address blocks: 45.130.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:e8:ef:c9:8f:70:07:cb:5f:49:c6:5c:b8:ae:a4:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 9 16:03:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee6a03644e8ba00044d002c742672215e98cf258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2d:66:33:a5:b5:e3:63:e4:74:d6:81:0d:da:
22:98:a8:b2:05:88:32:0e:9e:f6:b3:38:81:75:37:
39:e6:af:63:da:57:ab:e2:45:ea:c2:56:44:a7:2b:
87:92:60:dc:99:eb:48:49:7f:20:01:9a:66:b8:d9:
ab:09:3b:7c:72:ea:dc:fd:62:6b:4f:64:41:cd:ab:
7a:c2:df:1f:6c:21:65:cf:b1:de:62:36:72:32:e8:
76:fa:68:9a:14:0f:37:4f:c7:12:8c:20:57:22:0f:
32:3f:23:e6:81:88:31:34:2b:d6:8f:bd:7e:96:ac:
fb:70:28:e5:7e:e9:b5:21:66:e6:d1:7b:53:1c:e2:
18:ee:4b:35:b8:8a:cb:98:fc:51:a7:02:ea:fd:8a:
c4:1c:e5:02:41:80:8a:17:65:4e:dc:3c:f4:6c:34:
db:ed:7e:d7:55:13:59:16:aa:20:ec:e7:15:1f:cc:
44:c5:6d:e9:f1:65:c4:9f:b6:52:43:80:25:b8:80:
ba:7a:06:da:92:a3:57:d6:eb:b3:a9:48:ee:ba:d9:
06:c9:5a:0b:a1:8b:d5:1d:ae:eb:3d:f1:66:36:b0:
35:50:cb:13:41:d7:4c:f7:e8:47:47:c8:3c:91:c0:
3f:2d:7b:a0:39:3a:36:67:fb:be:23:82:98:bb:35:
62:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6A:03:64:4E:8B:A0:00:44:D0:02:C7:42:67:22:15:E9:8C:F2:58
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7moDZE6LoABE0ALHQmciFemM8lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.254.0/24
Signature Algorithm: sha256WithRSAEncryption
82:60:25:65:cb:90:3b:d2:93:91:3b:05:a9:32:d5:d8:cb:7d:
85:9f:eb:cf:ea:7c:f4:b2:b1:fa:dd:1b:29:b4:98:58:b7:92:
23:3c:10:8b:a0:40:73:2e:49:96:e7:89:ec:e2:0e:4d:11:34:
50:89:88:cb:c1:e1:48:61:62:1b:d3:43:dc:53:3f:fd:b8:0a:
d2:4b:e3:c9:83:32:17:ee:88:d6:f5:42:42:d5:66:cc:8a:2c:
4b:1c:fc:59:aa:11:a4:80:5a:dd:c2:bb:e0:f5:ed:74:1b:e8:
62:3b:0c:46:db:3b:d7:ae:b9:63:1f:c8:97:fb:c3:a5:0a:41:
22:e1:80:b1:05:4e:be:69:cf:70:2f:f2:45:64:e9:c0:2d:bb:
99:2e:5a:96:71:28:cd:99:7e:56:f6:af:a6:07:b9:c6:39:ae:
5d:7a:25:ce:de:9b:e6:a0:5e:49:25:98:66:ef:db:bc:e6:41:
19:98:64:79:97:43:28:97:27:46:ef:23:04:3d:87:1d:7d:f9:
39:8c:42:18:cb:97:5b:5b:5f:66:db:c3:23:13:b2:66:b7:ef:
00:8f:29:8a:41:77:2b:23:da:89:c0:a2:e4:81:56:c1:61:78:
a7:1e:e7:6b:d3:31:c7:49:85:b2:35:f3:80:bb:55:47:62:4f:
34:e1:22:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:25:03 2026 by rpki-client