Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FjKA7fTORY3OKSPN-mOQp2R9clc.roa
File: FjKA7fTORY3OKSPN-mOQp2R9clc.roa (raw, json)
Hash identifier: ORFtHtLA20J4USYh8T4EhmUfDuHtbpXnAd+4QQ/QC/o=
Subject key identifier: 16:32:80:ED:F4:CE:45:8D:CE:29:23:CD:FA:63:90:A7:64:7D:72:57
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019E9427662B5EEC44C5EFECB306C2EB2795
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FjKA7fTORY3OKSPN-mOQp2R9clc.roa
Signing time: Thu 04 Jun 2026 19:41:10 +0000
ROA not before: Thu 04 Jun 2026 19:41:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395954
IP address blocks: 45.145.58.0/24 maxlen: 24
45.147.100.0/24 maxlen: 24
45.147.101.0/24 maxlen: 24
45.147.102.0/24 maxlen: 24
45.147.103.0/24 maxlen: 24
45.152.201.0/24 maxlen: 24
45.155.200.0/24 maxlen: 24
45.155.201.0/24 maxlen: 24
45.155.202.0/24 maxlen: 24
45.155.203.0/24 maxlen: 24
193.8.8.0/24 maxlen: 24
194.41.56.0/24 maxlen: 24
2a0f:1740::/29 maxlen: 29
2a13:18c6:33::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 17:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:94:27:66:2b:5e:ec:44:c5:ef:ec:b3:06:c2:eb:27:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 4 19:41:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=163280edf4ce458dce2923cdfa6390a7647d7257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f1:3e:17:6a:91:9e:3e:fa:0f:69:3d:84:b1:
ae:b8:c9:c1:9d:d6:71:60:df:bd:48:7c:8e:b3:0b:
df:1f:60:b0:2c:c4:91:95:5b:08:64:a4:40:8a:f4:
69:2c:b7:50:c6:33:36:8b:82:df:19:53:b8:91:ab:
5a:45:e0:63:09:30:28:3d:9d:ee:42:ce:ba:20:34:
c9:d0:62:c9:e3:13:cd:f9:7e:30:30:9a:1c:e3:e6:
09:bf:df:bb:2f:50:77:d9:fc:e2:30:6b:2b:31:e1:
ef:91:24:a5:e7:77:4f:bb:bc:9f:74:4d:5d:a2:01:
6b:70:6f:44:99:0a:72:f5:ff:da:bd:b4:b2:5d:68:
35:1c:86:d6:1f:07:fd:35:49:c5:9d:12:2f:fa:bf:
fd:ad:1f:d4:95:47:eb:6a:cd:86:84:dc:fb:b8:01:
9b:98:81:c1:46:1c:72:c2:b0:32:98:a1:7f:16:a9:
12:cb:6b:47:4d:76:46:ec:9a:e4:11:27:42:bb:7a:
c5:12:85:70:99:47:d6:91:7d:3e:cf:72:14:07:0a:
77:21:60:cf:38:fd:87:f9:91:d7:6e:2f:f4:f7:a3:
3f:b6:a5:b0:81:5f:b5:59:45:44:28:3e:d1:14:47:
e8:58:09:36:98:c0:6b:73:0c:62:f3:1d:e7:35:cf:
33:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:32:80:ED:F4:CE:45:8D:CE:29:23:CD:FA:63:90:A7:64:7D:72:57
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FjKA7fTORY3OKSPN-mOQp2R9clc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.58.0/24
45.147.100.0/22
45.152.201.0/24
45.155.200.0/22
193.8.8.0/24
194.41.56.0/24
IPv6:
2a0f:1740::/29
2a13:18c6:33::/48
Signature Algorithm: sha256WithRSAEncryption
0b:23:30:c1:23:42:77:ad:dd:87:e8:b3:26:a6:07:45:e9:92:
99:28:c5:91:fa:58:f1:3c:a6:f4:fd:e4:ea:4c:d6:36:2c:76:
48:4e:84:d7:c3:f1:70:ab:ba:d2:71:36:e1:70:c7:5a:60:35:
8c:5d:78:f8:64:e4:b2:f7:f6:6e:9c:ac:56:6a:a1:0b:d4:7e:
39:82:1e:ea:cb:55:16:ba:77:58:b5:0d:eb:45:3c:7c:cc:d3:
87:7d:4f:8e:0f:b2:e5:60:e9:62:05:90:5f:48:8d:a7:ca:84:
78:c6:e5:b5:da:12:56:7b:bd:8f:e2:7c:22:c2:e4:63:53:79:
b6:b8:e5:a1:bb:f2:33:64:dd:49:73:e5:46:3e:00:4e:2d:bf:
6c:38:0c:02:8a:71:bd:b0:98:d4:1b:52:11:72:f6:28:38:20:
64:d0:42:50:3f:ec:ac:d3:b4:57:85:51:2d:f9:0b:4d:bd:f0:
b8:c5:f2:ff:43:e7:28:d0:03:b6:ae:26:8d:36:84:95:db:d4:
7a:e5:d3:8f:e8:80:14:58:d8:b0:92:6f:aa:d9:f8:a8:87:c9:
1d:97:2d:f1:c5:43:80:6a:4c:4e:49:99:bb:bb:e8:76:d6:8c:
99:c5:54:7d:fc:ad:a5:34:24:92:1b:11:74:8d:21:de:39:0c:
8a:b5:8e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:27:51 2026 by rpki-client