Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FlLsRawuyEoWULtBxh5_Tovg7h8.roa
File: FlLsRawuyEoWULtBxh5_Tovg7h8.roa (raw, json)
Hash identifier: +4cibrEa6t52VwBfWvhWaIX7jiMOPsBexxOZqwEZagc=
Subject key identifier: 16:52:EC:45:AC:2E:C8:4A:16:50:BB:41:C6:1E:7F:4E:8B:E0:EE:1F
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019E4ECC11A1153AB2027870982D4FBA43F6
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FlLsRawuyEoWULtBxh5_Tovg7h8.roa
Signing time: Fri 22 May 2026 08:27:37 +0000
ROA not before: Fri 22 May 2026 08:27:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30633
IP address blocks: 45.128.77.0/24 maxlen: 24
45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
80.253.250.0/24 maxlen: 24
103.139.50.0/24 maxlen: 24
193.5.125.0/24 maxlen: 24
193.27.23.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a06:1184:33::/48 maxlen: 48
2a06:35c2::/32 maxlen: 32
2a0a:2d06:55::/48 maxlen: 48
2a0c:7886:33::/48 maxlen: 48
2a0e:f201::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2d81::/32 maxlen: 32
2a0f:2e80::/29 maxlen: 29
2a0f:3d84::/32 maxlen: 32
2a0f:7d02:1::/48 maxlen: 48
2a0f:e1c6::/32 maxlen: 32
2a0f:e7c2::/32 maxlen: 32
2a10:32c0::/29 maxlen: 29
2a10:32c0::/32 maxlen: 32
2a10:32c1::/32 maxlen: 32
2a10:32c2::/32 maxlen: 32
2a10:32c4::/32 maxlen: 32
2a10:32c5::/32 maxlen: 32
2a10:32c6::/32 maxlen: 32
2a10:32c7::/32 maxlen: 32
2a10:35c0::/29 maxlen: 29
2a10:35c0::/32 maxlen: 32
2a10:35c1::/32 maxlen: 32
2a10:35c2::/32 maxlen: 32
2a10:35c3::/32 maxlen: 32
2a10:35c4::/32 maxlen: 32
2a10:35c5::/32 maxlen: 32
2a10:35c6::/32 maxlen: 32
2a10:35c7::/32 maxlen: 32
2a10:68c0::/48 maxlen: 48
2a10:68c0:1::/48 maxlen: 48
2a10:68c0:2::/48 maxlen: 48
2a10:68c0:3::/48 maxlen: 48
2a10:68c0:4::/48 maxlen: 48
2a10:68c0:5::/48 maxlen: 48
2a10:6d40::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a13:18c0:1::/48 maxlen: 48
2a13:18c6:55::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 17:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4e:cc:11:a1:15:3a:b2:02:78:70:98:2d:4f:ba:43:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 22 08:27:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1652ec45ac2ec84a1650bb41c61e7f4e8be0ee1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:50:98:22:be:b4:61:ef:61:90:ec:d1:88:85:
90:e8:42:6c:0e:e2:a1:3c:83:9c:25:dd:3c:19:da:
e2:41:09:a5:87:1a:25:4d:26:b2:24:61:39:fa:ed:
98:77:30:13:52:bb:b1:04:33:36:a4:2b:06:bf:7f:
55:67:76:c1:1f:2b:62:f9:37:ec:03:b5:f2:b3:05:
4b:ce:04:18:53:56:dd:10:5e:78:05:5d:16:48:7f:
57:c0:37:29:fa:af:19:00:ac:bd:33:91:95:a2:f2:
c8:56:d9:8c:86:05:a9:83:12:35:fd:11:25:a1:6a:
9c:0e:25:3f:3b:af:dd:16:c4:50:45:4e:e7:d4:77:
e7:8f:b6:e2:01:99:90:98:82:3d:ab:ca:dd:cc:6f:
f7:bd:53:07:51:3c:51:79:2a:64:2a:fd:db:ef:25:
bb:17:90:f7:56:8f:06:6b:68:62:9e:41:bc:2b:fa:
4d:81:70:fa:63:64:71:5c:5e:af:21:9e:61:ec:c2:
fe:8d:92:33:08:b6:5b:85:88:93:f5:e8:b5:02:ed:
7e:45:7c:d6:f5:a0:5d:55:84:40:af:14:8e:cd:ff:
2a:61:d8:c2:12:95:fb:90:9f:c5:12:7e:1e:f5:ae:
49:42:7c:28:62:59:35:59:78:e3:fc:a1:d0:7d:2a:
52:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:52:EC:45:AC:2E:C8:4A:16:50:BB:41:C6:1E:7F:4E:8B:E0:EE:1F
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FlLsRawuyEoWULtBxh5_Tovg7h8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.77.0/24
45.129.127.0/24
45.135.37.0/24
80.253.250.0/24
103.139.50.0/24
193.5.125.0/24
193.27.23.0/24
193.164.199.0/24
IPv6:
2a06:1184:33::/48
2a06:35c2::/32
2a0a:2d06:55::/48
2a0c:7886:33::/48
2a0e:f201::/32
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2d81::/32
2a0f:2e80::/29
2a0f:3d84::/32
2a0f:7d02:1::/48
2a0f:e1c6::/32
2a0f:e7c2::/32
2a10:32c0::/29
2a10:35c0::/29
2a10:68c0::-2a10:68c0:5:ffff:ffff:ffff:ffff:ffff
2a10:6d40::/29
2a11:fd80::/29
2a12:ac40::/31
2a13:18c0:1::/48
2a13:18c6:55::/48
Signature Algorithm: sha256WithRSAEncryption
01:10:aa:be:de:bd:93:04:90:80:5b:b5:c5:4e:d1:2f:81:d5:
60:6d:f0:ae:7c:74:da:61:c6:88:3b:14:1f:e4:10:0d:a9:14:
44:bc:5b:78:9b:e3:59:6d:05:4d:24:40:33:c4:e3:a5:74:aa:
bc:f9:a8:c6:6a:ab:1b:bb:ad:7f:aa:9d:ad:d4:fb:ae:bc:55:
02:db:b7:ab:4f:f0:78:fe:2b:3b:d0:05:7f:3b:d3:b9:80:21:
09:0c:75:d7:fc:37:48:e2:5a:cd:96:06:ec:bf:64:d5:f7:6e:
b3:4c:73:1d:19:a1:9a:61:1c:8e:b7:a2:1e:fa:d5:84:2c:52:
99:65:1e:13:dd:26:d8:59:12:88:96:be:0c:75:21:ca:5f:34:
d2:08:4f:07:5f:08:7e:58:af:a2:9a:5a:06:08:d7:55:ac:b4:
3f:96:0d:bd:67:1f:b5:28:74:70:ce:d9:8e:10:df:5e:7e:0d:
2b:15:44:5c:19:c5:0c:da:bd:c1:db:67:32:a2:96:27:67:6e:
4c:1c:5a:7d:bc:13:99:80:25:e0:12:61:0d:c5:26:47:aa:cc:
33:8b:ca:9a:d0:16:ba:9b:93:80:4a:c1:db:af:d4:7c:51:ad:
75:59:bf:21:73:ba:de:e0:9f:98:1c:fc:4d:7a:06:3e:81:74:
ad:5a:98:1a
-----BEGIN CERTIFICATE-----
MIIGQTCCBSmgAwIBAgISAZ5OzBGhFTqyAnhwmC1PukP2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYwNTIyMDgyNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjUyZWM0NWFjMmVjODRhMTY1MGJiNDFjNjFlN2Y0ZThiZTBlZTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1CYIr60Ye9hkOzRiIWQ6EJsDuKh
PIOcJd08GdriQQmlhxolTSayJGE5+u2YdzATUruxBDM2pCsGv39VZ3bBHyti+Tfs
A7XyswVLzgQYU1bdEF54BV0WSH9XwDcp+q8ZAKy9M5GVovLIVtmMhgWpgxI1/REl
oWqcDiU/O6/dFsRQRU7n1Hfnj7biAZmQmII9q8rdzG/3vVMHUTxReSpkKv3b7yW7
F5D3Vo8Ga2hinkG8K/pNgXD6Y2RxXF6vIZ5h7ML+jZIzCLZbhYiT9ei1Au1+RXzW
9aBdVYRArxSOzf8qYdjCEpX7kJ/FEn4e9a5JQnwoYlk1WXjj/KHQfSpSyQIDAQAB
o4IDTTCCA0kwHQYDVR0OBBYEFBZS7EWsLshKFlC7QcYef06L4O4fMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvRmxMc1Jhd3V5RW9XVUx0QnhoNV9Ub3ZnN2g4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBYQYIKwYBBQUHAQcBAf8EggFQMIIBTDA2BAIAATAwAwQA
LYBNAwQALYF/AwQALYclAwQAUP36AwQAZ4syAwQAwQV9AwQAwRsXAwQAwaTHMIIB
EAQCAAIwggEIAwcAKgYRhAAzAwUAKgY1wgMHACoKLQYAVQMHACoMeIYAMwMFACoO
8gEDBwAqDx4AASMDBwAqDx4ABFYDBwAqDx4ACYcDBwAqDx4ACrwDBwAqDx4A3vkD
BwAqDx4BAAEDBwAqDx6BAAIDBwAqDx6BEpMDBwAqDx6BQxkDBwAqDx6BkugDBwAq
Dx6Bo9ADBwAqDx6Bza4DBQAqDy2BAwUDKg8ugAMFACoPPYQDBwAqD30CAAEDBQAq
D+HGAwUAKg/nwgMFAyoQMsADBQMqEDXAMBADBQYqEGjAAwcBKhBowAAEAwUDKhBt
QAMFAyoR/YADBQEqEqxAAwcAKhMYwAABAwcAKhMYxgBVMA0GCSqGSIb3DQEBCwUA
A4IBAQABEKq+3r2TBJCAW7XFTtEvgdVgbfCufHTaYcaIOxQf5BANqRREvFt4m+NZ
bQVNJEAzxOOldKq8+ajGaqsbu61/qp2t1PuuvFUC27erT/B4/is70AV/O9O5gCEJ
DHXX/DdI4lrNlgbsv2TV926zTHMdGaGaYRyOt6Ie+tWELFKZZR4T3SbYWRKIlr4M
dSHKXzTSCE8HXwh+WK+imloGCNdVrLQ/lg29Zx+1KHRwztmOEN9efg0rFURcGcUM
2r3B22cyopYnZ25MHFp9vBOZgCXgEmENxSZHqswzi8qa0Ba6m5OASsHbr9R8Ua11
Wb8hc7re4J+YHPxNegY+gXStWpga
-----END CERTIFICATE-----
Generated at Sat Jun 6 02:29:01 2026 by rpki-client