Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/CAE7fAwmMkiBeK8IUrSozyzY3eU.roa
File: CAE7fAwmMkiBeK8IUrSozyzY3eU.roa (raw, json)
Hash identifier: w48PDPsDzn1Rxnlo0D3q0jYH1y7YEu9/rw/VpnLog5w=
Subject key identifier: 08:01:3B:7C:0C:26:32:48:81:78:AF:08:52:B4:A8:CF:2C:D8:DD:E5
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019E98653798C7BE0BFC4DF576F29F994D7C
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/CAE7fAwmMkiBeK8IUrSozyzY3eU.roa
Signing time: Fri 05 Jun 2026 15:27:10 +0000
ROA not before: Fri 05 Jun 2026 15:27:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197622
IP address blocks: 45.94.38.0/24 maxlen: 24
113.30.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 17:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:98:65:37:98:c7:be:0b:fc:4d:f5:76:f2:9f:99:4d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 5 15:27:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08013b7c0c2632488178af0852b4a8cf2cd8dde5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fc:32:bc:cf:ba:e6:01:3e:30:ea:a9:2b:6d:
8a:b3:fe:f8:5c:2f:6b:86:a6:01:51:ed:4d:7c:fc:
4a:97:d8:d0:d1:30:a2:dd:b6:9c:c7:8f:ce:60:9c:
9f:d6:f8:a0:93:93:d9:9c:50:0f:e3:18:f5:e1:4f:
1c:13:b8:1d:59:f2:ab:88:ff:74:87:39:a7:13:d5:
cc:f4:4a:0e:c3:d0:3b:2c:d4:97:09:38:8e:42:2b:
52:99:c1:21:74:6e:a0:c2:02:3f:3e:d7:9c:f3:ea:
3c:0f:10:0f:d5:33:ef:f1:84:6f:55:2d:13:77:55:
6b:44:67:fc:10:17:c8:68:92:e8:68:f3:0f:5e:31:
15:72:f4:70:50:c8:35:2f:a7:37:97:b2:3c:e6:2d:
33:9b:20:1a:0a:71:15:e3:bf:c0:f1:92:ab:86:fb:
d5:db:24:bb:3d:29:cf:a1:bc:0a:03:81:a2:9d:85:
6b:e4:98:68:a2:bc:5d:90:b4:b0:17:5c:fe:c4:14:
73:f9:66:ea:e8:a6:e2:77:5b:2a:9e:fd:d8:7c:6b:
a6:8e:87:27:84:87:58:14:58:f2:89:2d:07:ac:4b:
c1:16:23:02:c3:b5:9d:df:5f:07:f1:51:24:fc:4d:
66:e7:9b:ff:b6:6e:7a:1f:f2:69:1c:12:cb:37:5f:
c5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:01:3B:7C:0C:26:32:48:81:78:AF:08:52:B4:A8:CF:2C:D8:DD:E5
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/CAE7fAwmMkiBeK8IUrSozyzY3eU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.38.0/24
113.30.155.0/24
Signature Algorithm: sha256WithRSAEncryption
94:19:c0:41:b4:72:2f:6b:a4:1b:9f:ba:72:f9:2e:b4:a5:62:
07:82:49:5f:8f:dd:2e:0d:65:2b:e4:62:0b:7a:ed:1d:4c:50:
05:c0:7c:0b:03:a0:cf:22:92:74:a0:d8:7e:99:da:63:43:2c:
22:7d:25:55:1a:d6:17:71:de:a5:32:83:cd:46:c2:16:ab:6f:
27:c3:e6:1f:e9:0b:65:b1:0f:7e:61:33:e9:10:03:bc:66:99:
df:b1:d3:52:16:01:bc:0e:80:8f:e1:0c:a2:48:a4:39:2f:f4:
2c:b7:1a:c6:1f:80:1c:88:48:bf:1d:2e:92:87:c6:7e:d8:3c:
a3:ed:e1:42:d4:06:a9:77:0d:b4:49:ad:cc:56:3a:a0:15:67:
b8:d3:8d:25:61:72:60:56:e3:c2:a4:b1:52:d5:d4:74:e9:b1:
f4:7f:30:9b:aa:11:c9:f4:80:b7:a7:1f:be:51:0e:77:f5:c6:
d7:8e:03:37:0b:3a:2c:08:21:43:8f:2d:b8:c2:71:38:3a:5b:
f5:96:dd:d7:45:8d:1c:15:15:e3:f3:80:17:de:5f:4f:3b:4b:
db:f9:ea:e6:76:61:9d:f1:3c:13:a7:a3:d8:6e:53:bd:ae:6e:
ad:16:23:f0:41:03:a6:e9:a1:f7:a5:3c:e9:9b:74:6b:37:c8:
e3:05:2c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:28:29 2026 by rpki-client