Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9jk5soJBzPZqfBJx2ejj4fPZ_v0.roa
File: 9jk5soJBzPZqfBJx2ejj4fPZ_v0.roa (raw, json)
Hash identifier: IYPD2azjlP/i3NOZeHG+jsiD5RyZZ1MbqZwZKGFjLAQ=
Subject key identifier: F6:39:39:B2:82:41:CC:F6:6A:7C:12:71:D9:E8:E3:E1:F3:D9:FE:FD
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A086E8F05940541FA9F4162B7877CD0DEF
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9jk5soJBzPZqfBJx2ejj4fPZ_v0.roa
Signing time: Wed 09 Sep 2026 16:03:27 +0000
ROA not before: Wed 09 Sep 2026 16:03:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216334
IP address blocks: 45.152.196.0/24 maxlen: 24
45.154.246.0/24 maxlen: 24
45.154.247.0/24 maxlen: 24
45.158.197.0/24 maxlen: 24
45.158.198.0/24 maxlen: 24
103.91.147.0/24 maxlen: 24
193.5.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 20:53:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:e8:f0:59:40:54:1f:a9:f4:16:2b:78:77:cd:0d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 9 16:03:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f63939b28241ccf66a7c1271d9e8e3e1f3d9fefd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:88:3d:e2:1c:96:52:31:eb:18:60:ba:2f:1b:
07:c3:b4:e3:97:b7:89:74:0e:ad:2c:06:83:cf:6d:
44:22:1c:26:a2:13:16:7d:56:87:d0:57:a4:0a:c4:
a4:b2:ba:54:6b:7c:4b:a5:4e:af:39:88:3c:26:db:
26:bf:2a:79:90:a6:7e:6e:37:5a:09:93:a2:96:1b:
27:c5:b5:ba:9f:11:1b:84:a5:f0:22:5b:f7:cb:87:
d4:b5:66:14:f7:4a:21:b7:03:15:ec:89:7c:4d:77:
ee:63:c7:25:e8:80:48:8b:aa:b3:d3:69:21:c9:7c:
11:85:5c:51:bd:1e:64:98:96:b4:9b:7a:03:04:2a:
a8:99:a2:d8:3d:a3:b7:2d:e7:bc:ad:05:e0:cc:fb:
78:60:9f:e1:d0:b8:06:4c:fc:2f:de:69:f2:f6:bd:
c8:40:31:3b:d6:25:76:0f:52:7c:44:3f:99:c7:78:
84:15:2c:7f:c5:de:af:80:33:d5:b7:10:4e:ea:35:
7a:07:50:cb:bf:39:5f:c1:06:90:e7:bc:a6:f0:28:
84:b9:48:dc:ee:00:a7:61:d0:1e:e0:26:e8:f7:50:
e7:8c:07:08:e1:f1:03:33:f2:57:58:d0:90:66:9a:
c2:3b:52:88:8a:c8:0c:13:6b:84:50:f6:3e:d4:47:
a7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:39:39:B2:82:41:CC:F6:6A:7C:12:71:D9:E8:E3:E1:F3:D9:FE:FD
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9jk5soJBzPZqfBJx2ejj4fPZ_v0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.196.0/24
45.154.246.0/23
45.158.197.0-45.158.198.255
103.91.147.0/24
193.5.250.0/24
Signature Algorithm: sha256WithRSAEncryption
20:bb:26:94:80:8b:8e:67:0e:fa:40:24:d8:52:2b:ba:cf:76:
fa:6f:0a:f2:27:42:29:59:83:44:f2:ed:5c:19:06:4c:59:e9:
c8:7b:47:81:41:63:85:0a:7d:3b:c1:ad:95:09:a5:59:81:28:
17:60:66:dd:d1:2a:44:ef:21:d9:bc:bf:fe:21:a5:cf:b7:81:
c9:fc:2d:f1:39:3e:6d:a6:65:f1:78:c8:f1:20:15:fa:dd:38:
dd:79:38:1d:15:0b:84:a5:a3:3e:a4:a2:04:27:d6:b5:a4:ce:
5a:56:ae:ad:c0:b4:40:81:ea:9f:6a:ce:b5:4a:c8:44:1d:a9:
aa:5e:f7:fe:09:ec:1f:85:be:79:f6:73:3e:4e:4c:1d:74:a6:
15:b4:97:87:e0:b4:5f:af:1e:b7:97:93:c7:69:10:2a:37:3d:
a3:70:47:82:17:45:de:df:d2:61:97:c6:02:15:01:cd:32:fa:
9d:2a:7f:2d:d4:81:6f:69:a9:16:4a:90:09:07:2c:43:35:2b:
cc:40:4f:fd:c2:a1:33:fe:77:59:f0:09:d0:41:b6:b9:66:a1:
3f:87:fc:ee:fe:eb:2e:cd:ef:c5:b1:34:3a:fa:93:65:cc:51:
ce:f3:86:2d:56:22:6c:d1:4a:d1:17:d2:e7:96:21:0d:7e:76:
57:d2:d4:cb
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAaCG6PBZQFQfqfQWK3h3zQ3vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYwOTA5MTYwMzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjM5MzliMjgyNDFjY2Y2NmE3YzEyNzFkOWU4ZTNlMWYzZDlmZWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqog94hyWUjHrGGC6LxsHw7Tjl7eJ
dA6tLAaDz21EIhwmohMWfVaH0FekCsSksrpUa3xLpU6vOYg8Jtsmvyp5kKZ+bjda
CZOilhsnxbW6nxEbhKXwIlv3y4fUtWYU90ohtwMV7Il8TXfuY8cl6IBIi6qz02kh
yXwRhVxRvR5kmJa0m3oDBCqomaLYPaO3Lee8rQXgzPt4YJ/h0LgGTPwv3mny9r3I
QDE71iV2D1J8RD+Zx3iEFSx/xd6vgDPVtxBO6jV6B1DLvzlfwQaQ57ym8CiEuUjc
7gCnYdAe4Cbo91DnjAcI4fEDM/JXWNCQZprCO1KIisgME2uEUPY+1EenlwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFPY5ObKCQcz2anwScdno4+Hz2f79MB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvOWprNXNvSkJ6UFpxZkJKeDJlamo0ZlBaX3YwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQALZjEAwQB
LZr2MAwDBAAtnsUDBAAtnsYDBABnW5MDBADBBfowDQYJKoZIhvcNAQELBQADggEB
ACC7JpSAi45nDvpAJNhSK7rPdvpvCvInQilZg0Ty7VwZBkxZ6ch7R4FBY4UKfTvB
rZUJpVmBKBdgZt3RKkTvIdm8v/4hpc+3gcn8LfE5Pm2mZfF4yPEgFfrdON15OB0V
C4Sloz6kogQn1rWkzlpWrq3AtECB6p9qzrVKyEQdqape9/4J7B+Fvnn2cz5OTB10
phW0l4fgtF+vHreXk8dpECo3PaNwR4IXRd7f0mGXxgIVAc0y+p0qfy3UgW9pqRZK
kAkHLEM1K8xAT/3CoTP+d1nwCdBBtrlmoT+H/O7+6y7N78WxNDr6k2XMUc7zhi1W
ImzRStEX0ueWIQ1+dlfS1Ms=
-----END CERTIFICATE-----
Generated at Thu Sep 10 06:01:12 2026 by rpki-client