Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/E4vjBpwfW8eDHu6xWUVdA8TmBFU.roa
File: E4vjBpwfW8eDHu6xWUVdA8TmBFU.roa (raw, json)
Hash identifier: zL1XE0aunLqeLqvS49eKx6Hc5b5FwJ2BqhrmaznndEA=
Subject key identifier: 13:8B:E3:06:9C:1F:5B:C7:83:1E:EE:B1:59:45:5D:03:C4:E6:04:55
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019CB9EC014139CE566600B2CBCE9FF35E8C
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/E4vjBpwfW8eDHu6xWUVdA8TmBFU.roa
Signing time: Wed 04 Mar 2026 17:36:17 +0000
ROA not before: Wed 04 Mar 2026 17:36:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30633
IP address blocks: 45.128.77.0/24 maxlen: 24
45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
80.253.250.0/24 maxlen: 24
103.139.50.0/24 maxlen: 24
193.5.125.0/24 maxlen: 24
193.27.23.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a06:1184:33::/48 maxlen: 48
2a06:35c2::/32 maxlen: 32
2a06:b5c0::/29 maxlen: 29
2a0a:2d06:33::/48 maxlen: 48
2a0a:2d06:55::/48 maxlen: 48
2a0c:7886:33::/48 maxlen: 48
2a0e:f201::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:140::/29 maxlen: 29
2a0f:e00::/29 maxlen: 29
2a0f:1740::/29 maxlen: 29
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2d81::/32 maxlen: 32
2a0f:2e80::/29 maxlen: 29
2a0f:3045::/32 maxlen: 32
2a0f:3046:320::/48 maxlen: 48
2a0f:3240::/29 maxlen: 29
2a0f:3d84::/32 maxlen: 32
2a0f:7d02:1::/48 maxlen: 48
2a0f:8300::/29 maxlen: 29
2a0f:b400::/29 maxlen: 29
2a0f:e1c6::/32 maxlen: 32
2a10:32c0::/29 maxlen: 29
2a10:32c0::/32 maxlen: 32
2a10:32c1::/32 maxlen: 32
2a10:32c2::/32 maxlen: 32
2a10:32c4::/32 maxlen: 32
2a10:32c5::/32 maxlen: 32
2a10:32c6::/32 maxlen: 32
2a10:32c7::/32 maxlen: 32
2a10:3340::/29 maxlen: 29
2a10:35c0::/29 maxlen: 29
2a10:35c0::/32 maxlen: 32
2a10:35c1::/32 maxlen: 32
2a10:35c2::/32 maxlen: 32
2a10:35c3::/32 maxlen: 32
2a10:35c4::/32 maxlen: 32
2a10:35c5::/32 maxlen: 32
2a10:35c6::/32 maxlen: 32
2a10:35c7::/32 maxlen: 32
2a10:4a00::/29 maxlen: 29
2a10:5400::/29 maxlen: 29
2a10:6d40::/29 maxlen: 29
2a10:7100::/29 maxlen: 29
2a10:7900::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a12:f540::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a13:18c6:33::/48 maxlen: 48
2a13:18c6:55::/48 maxlen: 48
2a13:3080::/29 maxlen: 29
2a13:8c82:3::/48 maxlen: 48
2a13:e101:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:ec:01:41:39:ce:56:66:00:b2:cb:ce:9f:f3:5e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 4 17:36:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=138be3069c1f5bc7831eeeb159455d03c4e60455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:62:d6:9c:40:05:dc:81:25:ed:6e:79:68:52:
f9:ff:31:16:12:c2:d9:1c:2d:c3:c0:ab:37:5e:7c:
8b:74:11:69:f4:3c:37:f6:71:f3:86:39:b8:02:dd:
d6:e1:67:01:19:19:f0:73:00:93:e3:7b:e9:44:7b:
9b:9d:79:73:2a:e0:48:25:39:94:7f:4a:db:ea:da:
0d:11:1b:54:79:ab:7d:38:d6:fd:76:f5:5e:0a:c4:
27:2b:5e:ee:8f:03:32:20:af:4f:18:8b:05:bc:12:
02:89:16:91:40:db:c4:15:9d:08:ee:5d:aa:fc:06:
29:fe:12:7d:c4:00:dc:27:ad:d1:6b:2f:6d:c1:93:
5d:70:5e:66:9d:09:99:00:0d:33:84:1d:31:3b:ca:
01:2e:5f:11:98:ec:66:fb:62:7a:d0:26:46:db:36:
40:43:3d:73:f1:28:f9:08:bc:df:79:a5:70:89:e8:
13:3a:e3:03:70:d6:d7:24:d8:8e:21:db:4c:e6:e3:
16:08:34:08:c5:1e:0b:55:79:d6:4e:e0:f2:d6:1d:
bc:ab:9a:01:7d:1d:d6:6d:d0:52:b0:b9:9e:60:04:
26:4b:a6:ae:c5:3e:10:98:99:42:59:1e:89:9b:ba:
ee:be:8b:66:d8:05:24:ac:3a:11:f6:b8:d5:3f:a2:
e5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:8B:E3:06:9C:1F:5B:C7:83:1E:EE:B1:59:45:5D:03:C4:E6:04:55
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/E4vjBpwfW8eDHu6xWUVdA8TmBFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.77.0/24
45.129.127.0/24
45.135.37.0/24
80.253.250.0/24
103.139.50.0/24
193.5.125.0/24
193.27.23.0/24
193.164.199.0/24
IPv6:
2a06:1184:33::/48
2a06:35c2::/32
2a06:b5c0::/29
2a0a:2d06:33::/48
2a0a:2d06:55::/48
2a0c:7886:33::/48
2a0e:f201::/32
2a0f:140::/29
2a0f:e00::/29
2a0f:1740::/29
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2d81::/32
2a0f:2e80::/29
2a0f:3045::/32
2a0f:3046:320::/48
2a0f:3240::/29
2a0f:3d84::/32
2a0f:7d02:1::/48
2a0f:8300::/29
2a0f:b400::/29
2a0f:e1c6::/32
2a10:32c0::/29
2a10:3340::/29
2a10:35c0::/29
2a10:4a00::/29
2a10:5400::/29
2a10:6d40::/29
2a10:7100::/29
2a10:7900::/29
2a11:fd80::/29
2a12:ac40::/31
2a12:f540::/29
2a13:18c0:1::/48
2a13:18c6:33::/48
2a13:18c6:55::/48
2a13:3080::/29
2a13:8c82:3::/48
2a13:e101:2::/48
Signature Algorithm: sha256WithRSAEncryption
05:97:b1:24:8d:93:81:f3:fe:b6:d3:38:41:c7:b9:9d:e4:96:
0e:3e:7d:14:f1:68:37:c4:08:2d:28:de:cf:ee:33:78:24:c6:
f3:c4:b7:ff:54:cf:ae:47:d5:a0:20:82:85:b4:61:1a:54:91:
91:91:3f:4d:08:30:29:6d:9a:39:70:0d:05:55:77:1d:0a:6f:
28:cd:01:bf:31:b7:4d:71:82:18:e4:65:86:54:a8:24:56:2f:
3b:7d:1a:15:ea:7d:ff:6e:fd:83:c9:a2:b5:4b:bd:f0:28:75:
80:4c:a6:73:7a:ba:c0:e0:c8:e9:43:98:67:85:c2:c1:ec:0c:
dc:6b:63:dd:43:e9:f6:0c:b6:76:0e:46:73:b6:f1:78:8a:9f:
17:af:ae:b7:8a:6a:28:46:02:3e:63:c3:31:56:7a:b1:fa:e7:
7f:c9:c5:0b:ff:7f:be:32:ed:ef:6d:d1:b2:6a:58:77:55:e3:
27:19:ee:3f:98:33:8c:36:90:46:74:ca:e2:3b:be:35:f5:45:
62:eb:53:34:c7:91:15:89:65:77:c6:2f:4e:30:11:e9:e4:09:
cd:cc:f5:b9:3b:fb:b5:25:10:05:04:57:ef:59:b0:c1:28:29:
9c:b6:5e:0c:61:0d:bc:4e:8f:a6:e0:40:0e:aa:05:13:66:66:
c2:55:f8:a6
-----BEGIN CERTIFICATE-----
MIIGvjCCBaagAwIBAgISAZy57AFBOc5WZgCyy86f816MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYwMzA0MTczNjE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzhiZTMwNjljMWY1YmM3ODMxZWVlYjE1OTQ1NWQwM2M0ZTYwNDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymLWnEAF3IEl7W55aFL5/zEWEsLZ
HC3DwKs3XnyLdBFp9Dw39nHzhjm4At3W4WcBGRnwcwCT43vpRHubnXlzKuBIJTmU
f0rb6toNERtUeat9ONb9dvVeCsQnK17ujwMyIK9PGIsFvBICiRaRQNvEFZ0I7l2q
/AYp/hJ9xADcJ63Ray9twZNdcF5mnQmZAA0zhB0xO8oBLl8RmOxm+2J60CZG2zZA
Qz1z8Sj5CLzfeaVwiegTOuMDcNbXJNiOIdtM5uMWCDQIxR4LVXnWTuDy1h28q5oB
fR3WbdBSsLmeYAQmS6auxT4QmJlCWR6Jm7ruvotm2AUkrDoR9rjVP6LlGQIDAQAB
o4IDyjCCA8YwHQYDVR0OBBYEFBOL4wacH1vHgx7usVlFXQPE5gRVMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvRTR2akJwd2ZXOGVESHU2eFdVVmRBOFRtQkZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIB3gYIKwYBBQUHAQcBAf8EggHNMIIByTA2BAIAATAwAwQA
LYBNAwQALYF/AwQALYclAwQAUP36AwQAZ4syAwQAwQV9AwQAwRsXAwQAwaTHMIIB
jQQCAAIwggGFAwcAKgYRhAAzAwUAKgY1wgMFAyoGtcADBwAqCi0GADMDBwAqCi0G
AFUDBwAqDHiGADMDBQAqDvIBAwUDKg8BQAMFAyoPDgADBQMqDxdAAwcAKg8eAAEj
AwcAKg8eAARWAwcAKg8eAAmHAwcAKg8eAAq8AwcAKg8eAN75AwcAKg8eAQABAwcA
Kg8egQACAwcAKg8egRKTAwcAKg8egUMZAwcAKg8egZLoAwcAKg8egaPQAwcAKg8e
gc2uAwUAKg8tgQMFAyoPLoADBQAqDzBFAwcAKg8wRgMgAwUDKg8yQAMFACoPPYQD
BwAqD30CAAEDBQMqD4MAAwUDKg+0AAMFACoP4cYDBQMqEDLAAwUDKhAzQAMFAyoQ
NcADBQMqEEoAAwUDKhBUAAMFAyoQbUADBQMqEHEAAwUDKhB5AAMFAyoR/YADBQEq
EqxAAwUDKhL1QAMHACoTGMAAAQMHACoTGMYAMwMHACoTGMYAVQMFAyoTMIADBwAq
E4yCAAMDBwAqE+EBAAIwDQYJKoZIhvcNAQELBQADggEBAAWXsSSNk4Hz/rbTOEHH
uZ3klg4+fRTxaDfECC0o3s/uM3gkxvPEt/9Uz65H1aAggoW0YRpUkZGRP00IMClt
mjlwDQVVdx0KbyjNAb8xt01xghjkZYZUqCRWLzt9GhXqff9u/YPJorVLvfAodYBM
pnN6usDgyOlDmGeFwsHsDNxrY91D6fYMtnYORnO28XiKnxevrreKaihGAj5jwzFW
erH653/JxQv/f74y7e9t0bJqWHdV4ycZ7j+YM4w2kEZ0yuI7vjX1RWLrUzTHkRWJ
ZXfGL04wEenkCc3M9bk7+7UlEAUEV+9ZsMEoKZy2XgxhDbxOj6bgQA6qBRNmZsJV
+KY=
-----END CERTIFICATE-----
Generated at Fri Mar 6 19:08:37 2026 by rpki-client