Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Hi-0FZFBmltOEcf805k7hNLCq70.roa
File: Hi-0FZFBmltOEcf805k7hNLCq70.roa (raw, json)
Hash identifier: FZNbJZOzZD0vLUZkmAEregViSMgOU9ekVWxP1xMF/vI=
Subject key identifier: 1E:2F:B4:15:91:41:9A:5B:4E:11:C7:FC:D3:99:3B:84:D2:C2:AB:BD
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A1789619FCEE35D3ADD574DFCAAF4A3F57
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Hi-0FZFBmltOEcf805k7hNLCq70.roa
Signing time: Mon 26 Oct 2026 14:21:05 +0000
ROA not before: Mon 26 Oct 2026 14:21:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49453
IP address blocks: 45.134.186.0/24 maxlen: 24
45.141.179.0/24 maxlen: 24
45.152.200.0/24 maxlen: 24
176.96.142.0/24 maxlen: 24
176.96.143.0/24 maxlen: 24
193.23.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:96:19:fc:ee:35:d3:ad:d5:74:df:ca:af:4a:3f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 26 14:21:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e2fb41591419a5b4e11c7fcd3993b84d2c2abbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:95:3a:bd:64:d9:e6:d0:80:6f:b7:36:ff:3a:
2c:3e:f0:c3:3e:ad:b2:23:60:74:d8:61:fb:00:ea:
9d:9a:22:e9:56:27:8c:80:73:d6:ff:1b:64:06:99:
e3:db:33:4c:3d:cb:42:5e:af:9d:0f:13:02:31:66:
9b:a3:cf:7e:30:7a:90:8c:7a:61:f1:19:0b:2e:0e:
48:28:4f:b5:ce:4c:8b:a1:8f:41:8e:28:72:32:8a:
bb:47:88:30:7e:59:e8:43:a4:00:b5:7d:9c:a3:45:
f7:40:d1:f9:83:64:cd:eb:f3:ec:08:53:28:09:c6:
3c:13:c2:93:7f:1e:17:7a:2e:ca:66:f6:f6:23:d6:
d1:2e:1b:a6:d1:5e:4d:f4:ab:81:f7:2a:a1:1b:dd:
dd:89:0b:4f:ac:a5:70:81:8a:c2:af:c8:f4:2f:d5:
d6:82:8e:3f:a8:92:8a:1b:b8:16:6e:20:6b:a2:78:
82:21:8e:18:77:77:b4:3e:cd:d9:66:34:a6:b1:b2:
02:5c:f5:6d:b6:67:da:bb:32:1f:96:41:db:e9:36:
8b:d2:ce:79:87:6e:35:e1:6b:85:f6:23:ec:fd:52:
77:5a:84:22:9e:67:51:24:1b:c9:da:ae:0d:39:29:
90:be:bf:71:0b:20:b9:17:7c:58:a2:c4:ed:e8:2a:
33:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2F:B4:15:91:41:9A:5B:4E:11:C7:FC:D3:99:3B:84:D2:C2:AB:BD
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Hi-0FZFBmltOEcf805k7hNLCq70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.186.0/24
45.141.179.0/24
45.152.200.0/24
176.96.142.0/23
193.23.245.0/24
Signature Algorithm: sha256WithRSAEncryption
15:c3:d2:73:1d:b9:2c:f4:ef:8b:67:b0:87:b3:e1:3b:02:ac:
b7:6d:e6:81:1c:b5:98:6a:53:e8:3a:76:6f:9c:43:10:73:28:
82:8e:03:fa:71:08:a9:18:6f:29:6e:94:ca:e9:8f:a1:72:b5:
a0:ac:e7:57:00:19:eb:07:78:3b:70:37:01:a1:22:2d:3e:82:
15:0f:24:fb:b1:5e:ea:f6:c1:b0:51:01:09:24:9e:e7:86:de:
72:80:9c:90:bb:4c:73:0a:32:6c:04:0e:68:2f:39:94:13:df:
fd:7b:3f:5b:5b:c0:ad:e2:80:29:62:08:8b:70:23:84:04:1d:
5b:cd:85:36:58:d4:a1:7e:28:bf:8d:6f:ae:f3:94:25:b6:23:
28:55:43:39:75:8d:44:ad:ca:a6:30:d0:e6:7d:a8:6f:59:4a:
1b:4a:63:c2:0a:ca:f5:f1:7e:6e:f8:85:d8:64:86:04:9c:0b:
8e:49:c0:6f:1e:3d:c9:3e:f2:6c:e4:b9:26:19:a1:17:37:97:
86:f7:72:e4:e7:a9:e8:46:70:8c:15:1f:6c:f9:57:65:98:6e:
70:71:e8:11:fd:6d:d2:53:ae:34:dc:a6:7e:d5:f7:63:0e:5b:
b2:05:5d:97:b8:ea:42:b2:b4:4a:56:89:bf:82:51:c1:11:8c:
59:72:2c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:30:35 2026 by rpki-client