Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9JzQh5iWNqqhL20WuSSDuyQDQ4E.roa
File: 9JzQh5iWNqqhL20WuSSDuyQDQ4E.roa (raw, json)
Hash identifier: YU33+WrfZwfHdpgKEcg7JS/xN9S40h5V6UQq1VAFfKA=
Subject key identifier: F4:9C:D0:87:98:96:36:AA:A1:2F:6D:16:B9:24:83:BB:24:03:43:81
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A11CA3E9BFAA973D536BCE89BBAF172C8C
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9JzQh5iWNqqhL20WuSSDuyQDQ4E.roa
Signing time: Thu 08 Oct 2026 17:51:06 +0000
ROA not before: Thu 08 Oct 2026 17:51:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 27411
IP address blocks: 45.137.87.0/24 maxlen: 24
45.152.197.0/24 maxlen: 24
2a0c:7886:b4::/48 maxlen: 48
2a10:68c6::/32 maxlen: 32
2a13:9280::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:a3:e9:bf:aa:97:3d:53:6b:ce:89:bb:af:17:2c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 8 17:51:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f49cd087989636aaa12f6d16b92483bb24034381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:60:dd:6f:b3:5e:fe:c6:c4:cf:3f:48:81:77:
3c:86:07:0c:08:b0:45:ea:90:9c:9d:0d:e8:fa:3b:
66:47:87:26:3c:ac:40:b5:d8:a2:d0:40:2a:e7:04:
c8:b2:36:b3:47:5a:31:7d:43:dc:64:21:86:f6:4c:
04:fb:8a:83:da:81:71:d3:11:f5:2a:22:b8:a9:9a:
70:5b:ac:c6:67:c8:7f:e2:fd:51:bb:f4:b4:31:e2:
2e:05:33:ad:a2:7c:6e:9d:69:1b:ab:86:76:63:9c:
8c:f2:a9:74:e6:cd:f3:67:c7:b8:e4:cc:95:f0:2e:
f6:2b:2a:2c:1c:68:f3:e2:d5:6b:82:a6:b6:b1:10:
c6:de:c5:65:6c:76:78:18:1c:df:b3:d7:9a:2f:32:
3c:b6:53:22:74:45:7f:ff:18:de:f7:9b:23:5f:f7:
9f:87:43:d8:7c:f0:a2:6f:9d:ca:fb:d3:13:55:97:
4b:05:ae:92:87:28:80:96:50:c7:9a:56:a5:78:fe:
65:9e:00:c6:5d:67:05:f5:79:f0:46:e3:87:25:aa:
31:d9:3a:1a:33:f2:31:18:7e:1b:82:a3:1b:4e:06:
40:ca:de:f8:46:e5:c0:3a:ac:51:c1:10:e2:67:7a:
c0:dc:7e:c6:d3:30:76:86:eb:0c:0b:6f:cb:14:6f:
f0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9C:D0:87:98:96:36:AA:A1:2F:6D:16:B9:24:83:BB:24:03:43:81
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9JzQh5iWNqqhL20WuSSDuyQDQ4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.87.0/24
45.152.197.0/24
IPv6:
2a0c:7886:b4::/48
2a10:68c6::/32
2a13:9280::/32
Signature Algorithm: sha256WithRSAEncryption
9b:e0:6c:33:2d:c7:40:77:25:2a:1a:1a:e4:bf:f8:8d:6e:4d:
0f:5d:65:02:49:ac:a4:a5:9b:fb:75:54:b4:15:96:45:8d:de:
43:dc:8b:5f:b3:13:97:08:a9:47:10:e7:2f:20:62:b2:38:4d:
dd:1b:d0:86:d8:cc:31:b2:05:bb:4b:19:aa:2e:67:bf:42:2a:
b1:b0:33:36:86:c4:d5:c3:ca:8b:9d:4b:49:df:d0:ba:ab:c9:
7b:53:9e:f0:a6:35:7e:4b:a0:f2:5d:59:f3:92:84:01:36:70:
85:d7:f5:36:ce:f3:3f:9e:b4:0f:82:87:27:99:98:1b:40:ec:
0b:1a:ae:b6:94:3d:4b:53:58:cb:52:a1:1a:8b:a9:a7:4c:36:
1a:ba:6c:d6:3f:30:d6:59:16:e4:2a:11:78:c9:67:7e:e6:a4:
cb:26:72:4f:69:f1:44:ff:f5:ec:bd:c7:c4:96:fb:da:3d:67:
3a:b0:cc:f1:5d:35:ce:d8:4d:bf:54:68:c6:bc:1f:73:87:26:
38:5b:f6:d8:01:3e:41:d2:19:25:47:76:4c:a3:df:ab:45:c1:
d7:b4:55:4c:99:02:4b:87:94:29:2e:32:99:1d:76:50:43:2a:
d9:05:55:0d:dc:00:ec:da:bb:2f:08:82:66:8c:88:c9:3f:80:
c5:75:54:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:47:20 2026 by rpki-client