Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/EKfY4dstwuakLx1lx9YjHNKuXhY.roa
File: EKfY4dstwuakLx1lx9YjHNKuXhY.roa (raw, json)
Hash identifier: NINEkjJ6Dgh6qfdcEGCQGZSN7rnKuqmKLD6jP9rsy9g=
Subject key identifier: 10:A7:D8:E1:DB:2D:C2:E6:A4:2F:1D:65:C7:D6:23:1C:D2:AE:5E:16
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019DF38D7F4AC150A4083559E3E3D1DA3E40
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/EKfY4dstwuakLx1lx9YjHNKuXhY.roa
Signing time: Mon 04 May 2026 15:13:49 +0000
ROA not before: Mon 04 May 2026 15:13:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198082
IP address blocks: 45.142.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 21:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f3:8d:7f:4a:c1:50:a4:08:35:59:e3:e3:d1:da:3e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 4 15:13:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10a7d8e1db2dc2e6a42f1d65c7d6231cd2ae5e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d4:aa:6f:3c:08:26:a2:5f:22:80:f8:6b:27:
bc:b5:61:1a:09:e3:53:0d:4c:13:7d:54:72:23:62:
cb:8b:49:4e:56:82:20:2f:98:ae:0d:6a:6f:c2:ee:
73:ad:dc:5b:95:1c:8b:4b:15:4b:30:96:1c:c9:34:
03:40:69:72:a3:07:18:dc:25:3f:fc:bb:d6:a4:4a:
65:2e:35:3e:7b:3d:41:20:c2:da:57:2b:ed:ee:e8:
1b:03:a2:dc:1c:5a:5b:f9:4c:f0:d1:c2:cd:06:28:
9a:f2:94:c6:ea:a9:c1:fc:da:ec:16:11:c1:ea:c8:
75:d7:f6:1e:98:7e:02:53:57:78:6e:87:c3:ae:b2:
14:e5:2e:39:eb:48:a6:88:ec:e3:03:ca:95:d3:8e:
ac:77:09:e0:58:3a:1b:03:28:f3:e3:06:5a:dd:82:
b6:16:13:dd:3c:b7:4b:84:fe:28:9e:2a:96:f0:02:
3e:d4:3e:44:2b:07:b7:88:ba:f6:54:bb:cf:5e:42:
15:b9:47:12:16:5f:56:66:a3:7c:a7:ed:70:3f:3f:
e6:19:1b:26:38:59:15:18:7b:0b:e9:3d:db:45:bc:
55:de:9a:39:9a:ee:40:ec:1f:78:6e:ba:77:5b:30:
d4:73:b2:2a:34:b9:23:91:1b:9d:f5:ec:cb:27:c2:
1f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A7:D8:E1:DB:2D:C2:E6:A4:2F:1D:65:C7:D6:23:1C:D2:AE:5E:16
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/EKfY4dstwuakLx1lx9YjHNKuXhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.30.0/24
Signature Algorithm: sha256WithRSAEncryption
82:cd:4f:c7:0d:20:b0:7e:94:b5:79:7e:03:9e:55:04:89:87:
d6:b7:b1:ae:a2:05:2b:5b:fc:7a:62:f0:05:b6:cd:c8:ce:f9:
0c:5d:85:71:69:7d:a7:ac:c9:ab:78:d2:1b:5b:34:27:aa:2c:
c5:c3:78:8b:4a:05:9c:d5:fd:b3:2b:db:96:b7:a1:84:27:7b:
42:48:4b:20:b2:a4:45:be:26:73:79:cb:61:c8:7e:f7:a9:5b:
28:60:ab:1c:09:85:4f:2b:40:bd:9a:9c:4a:59:b5:65:25:81:
69:0e:66:9d:9c:88:09:94:a6:48:bb:7d:45:c4:a1:ff:e7:94:
44:04:58:6a:19:99:f2:8f:5f:ef:c0:89:4d:31:3d:d1:85:6b:
0e:91:cb:79:10:19:3b:89:23:4a:38:cf:3c:dc:8e:32:8c:58:
69:7d:4c:b4:2d:3c:20:3e:87:54:85:c0:c1:25:25:04:0a:22:
29:b7:b9:b2:b4:7c:47:2d:5e:40:06:52:00:ca:ae:bd:84:d1:
a3:20:39:db:e4:7d:b7:6f:e6:51:bf:9b:a3:65:c1:c7:28:e8:
05:c3:00:b7:97:d5:9f:60:54:0f:ed:1c:38:58:b1:b8:bf:0e:
b3:9d:e8:24:b4:fc:c1:be:6e:83:56:da:a0:79:e9:2a:94:e1:
70:cf:72:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 06:02:35 2026 by rpki-client