Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9jCqfuFnigFyf2d8JgNnJKw8aPk.roa
File: 9jCqfuFnigFyf2d8JgNnJKw8aPk.roa (raw, json)
Hash identifier: 9y01+hM0C8pjs2P5rluxa8zYehAx47dgRltKykT5TbM=
Subject key identifier: F6:30:AA:7E:E1:67:8A:01:72:7F:67:7C:26:03:67:24:AC:3C:68:F9
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A0540212548FCE88F23FEEC4B8820A23AF
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9jCqfuFnigFyf2d8JgNnJKw8aPk.roa
Signing time: Sun 30 Aug 2026 18:50:16 +0000
ROA not before: Sun 30 Aug 2026 18:50:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214927
IP address blocks: 45.155.69.0/24 maxlen: 24
185.122.171.0/24 maxlen: 24
185.242.245.0/24 maxlen: 24
2a0c:7886:105::/48 maxlen: 48
2a0f:e7c6:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:54:02:12:54:8f:ce:88:f2:3f:ee:c4:b8:82:0a:23:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 30 18:50:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f630aa7ee1678a01727f677c26036724ac3c68f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ab:3c:e7:79:ff:78:23:d0:3d:a9:c0:af:c1:
2f:c8:1d:24:9f:38:ae:06:35:11:d5:aa:5c:fc:99:
f8:05:f9:4d:3b:68:e3:ee:29:e5:58:d2:ec:12:d4:
1e:91:84:da:d3:f2:94:6c:ee:68:5e:45:9c:bd:2d:
fb:d1:d4:91:66:42:a0:b6:9e:3a:56:80:b6:ef:2f:
4f:28:cf:dc:95:b3:bb:82:ab:26:55:76:88:aa:60:
b1:00:27:57:d8:03:2d:b1:ec:82:19:cd:3e:0a:a0:
57:5a:9a:f2:a7:cb:9a:a8:de:4a:4b:b4:4e:db:0c:
8c:42:4d:a6:67:2f:35:1a:c7:a7:64:c6:6f:2d:fe:
82:aa:28:17:d4:d0:fc:d4:d6:cf:7a:52:77:79:72:
9a:88:3a:f9:2a:fe:a6:d2:4c:ef:10:ef:f0:db:9b:
f1:ee:a0:5b:38:d2:73:9d:ad:f6:4f:98:41:af:a8:
4c:73:0f:64:07:ec:ab:7a:2f:9a:e5:7c:f6:a0:fe:
f9:d3:fc:3b:f8:74:e4:77:a8:2b:72:ca:60:34:76:
15:b6:39:4f:5c:dc:b9:dd:d0:02:68:c2:3d:cf:e3:
c2:85:53:c7:94:55:e6:59:40:91:05:90:45:63:1d:
91:dc:cb:e5:f1:f5:f5:10:63:97:d9:d1:13:10:05:
ae:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:30:AA:7E:E1:67:8A:01:72:7F:67:7C:26:03:67:24:AC:3C:68:F9
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9jCqfuFnigFyf2d8JgNnJKw8aPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.69.0/24
185.122.171.0/24
185.242.245.0/24
IPv6:
2a0c:7886:105::/48
2a0f:e7c6:1000::/48
Signature Algorithm: sha256WithRSAEncryption
0f:ad:98:c2:27:b0:ef:c9:39:51:87:e5:d7:c4:3b:c0:eb:60:
e3:8c:96:5e:4a:6a:98:7a:1f:89:15:f7:d6:03:53:2f:03:d8:
7b:9e:32:9f:17:28:f1:39:2f:7c:67:6c:df:9e:c0:d4:cc:8b:
95:8d:f1:35:b2:37:43:95:6d:78:08:48:7a:e1:e6:64:2b:05:
73:6b:3a:d4:be:71:84:3b:89:b7:98:46:a1:83:41:7b:be:bf:
a9:ce:1c:cd:0d:06:25:59:82:83:6c:c0:3b:ea:27:6f:69:c7:
27:19:57:4b:9f:ef:32:66:b8:06:43:a8:b8:17:5d:ac:ea:8a:
a9:88:ee:4b:69:63:c4:05:57:f8:ff:66:29:41:c8:dd:86:67:
ec:3c:38:6b:96:c2:66:fe:b8:c2:12:88:a3:7e:ca:2d:a4:9b:
7d:c0:7a:18:e4:75:7b:79:0b:6c:41:66:4a:7e:e9:fd:71:86:
90:01:f3:72:43:87:3e:10:40:b5:28:60:56:e6:50:06:e1:6f:
b2:cc:d9:3f:49:16:68:fb:e7:ea:8c:d7:92:ed:50:cc:69:d7:
75:f2:6b:08:55:90:99:38:64:7a:82:a9:01:b0:5d:28:d7:70:
08:af:a5:79:59:0c:28:71:b7:fe:d0:d0:71:50:88:45:41:cb:
63:12:b9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:55 2026 by rpki-client