Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/IGltTF18FVWsoV2UUVgCbewP9jM.roa
File: IGltTF18FVWsoV2UUVgCbewP9jM.roa (raw, json)
Hash identifier: kVgLGP6bEthjKtMMTKmHmkqFi0gvJ8bwHCxtCdc8nwM=
Subject key identifier: 20:69:6D:4C:5D:7C:15:55:AC:A1:5D:94:51:58:02:6D:EC:0F:F6:33
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019C2DB3F3597EFD4AF51817C3A2D17C95F9
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/IGltTF18FVWsoV2UUVgCbewP9jM.roa
Signing time: Thu 05 Feb 2026 12:08:13 +0000
ROA not before: Thu 05 Feb 2026 12:08:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26666
IP address blocks: 45.128.244.0/24 maxlen: 24
45.128.245.0/24 maxlen: 24
45.128.246.0/24 maxlen: 24
45.128.247.0/24 maxlen: 24
2a0f:1480::/29 maxlen: 29
2a0f:2f80::/29 maxlen: 29
2a0f:35c0::/29 maxlen: 29
2a0f:4f80::/29 maxlen: 29
2a13:8c85::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Feb 2026 15:38:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2d:b3:f3:59:7e:fd:4a:f5:18:17:c3:a2:d1:7c:95:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 5 12:08:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20696d4c5d7c1555aca15d945158026dec0ff633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:48:98:d6:ec:06:00:7c:cc:0a:5a:d5:8f:fb:
b5:a4:62:ec:8e:a3:69:f1:b8:28:c5:b4:d9:6b:a8:
e3:c7:13:de:fc:8e:12:08:f7:bf:61:e4:b2:12:9b:
a7:f1:16:99:3d:cf:c9:9e:32:9a:6e:ed:95:2d:63:
5b:cb:53:cc:5d:7c:82:55:c9:e9:3a:70:03:70:f1:
06:f8:f7:0a:56:e0:6d:0f:36:09:b7:a9:15:5d:ac:
28:1a:11:05:ad:e6:52:b9:63:42:70:86:a6:94:b2:
7b:3d:1d:00:06:0d:65:0b:22:49:71:7b:42:c5:67:
d6:7b:83:8b:9c:af:20:70:11:89:ab:6c:8f:71:9a:
30:94:f3:5a:e4:44:15:64:59:21:8b:7b:cd:a7:30:
84:9e:53:91:f2:58:31:04:cf:de:60:f8:a4:1a:1c:
24:3d:a8:54:c3:71:9c:13:4b:75:49:1e:6b:c1:32:
25:bb:3a:29:e6:7d:b2:80:71:30:9c:e7:1d:9b:84:
24:9f:90:37:80:db:d0:ca:f3:61:a0:c4:56:c1:d9:
51:4f:84:45:ea:06:7a:8a:75:a4:83:ed:21:cf:e8:
28:46:c5:85:e6:e7:f7:5a:d3:44:85:82:cc:30:0e:
d5:27:2a:32:87:3b:ce:0e:61:2b:4e:18:e2:00:c4:
f2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:69:6D:4C:5D:7C:15:55:AC:A1:5D:94:51:58:02:6D:EC:0F:F6:33
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/IGltTF18FVWsoV2UUVgCbewP9jM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.244.0/22
IPv6:
2a0f:1480::/29
2a0f:2f80::/29
2a0f:35c0::/29
2a0f:4f80::/29
2a13:8c85::/32
Signature Algorithm: sha256WithRSAEncryption
96:42:10:69:e6:61:1e:58:89:88:99:bc:bb:1d:e6:85:b3:ed:
23:da:48:79:d0:f4:34:05:29:02:6a:01:d2:24:8e:ba:4b:92:
03:7f:fa:3f:f1:87:6a:4a:a0:9e:df:0a:51:f7:6f:61:b8:8a:
9f:5d:0b:2a:62:22:12:d3:41:cf:15:07:53:56:94:de:c9:7e:
2a:13:de:59:f7:4c:e7:3a:af:8a:ea:2e:ee:f9:49:e8:82:f2:
a4:d5:be:b1:04:95:2d:7a:bd:9e:20:4f:a3:e3:17:f4:56:9f:
55:af:8b:b0:1b:3b:93:05:a4:88:d7:6e:47:0e:6f:1f:b3:75:
0c:d7:b9:de:73:e9:a0:99:0f:46:53:b3:e1:eb:a2:e2:79:9f:
bb:61:01:8e:17:c4:7d:c1:eb:13:f7:85:bd:8a:7f:9a:ae:05:
d6:ee:e7:09:9c:ef:09:f7:ca:a6:f3:8b:72:38:b7:06:72:17:
d5:b8:ba:c1:2b:0b:80:7c:ed:02:5b:44:a6:d9:ef:07:f3:d3:
a7:64:48:21:fd:01:7e:05:f6:70:39:6d:2e:8e:e2:ac:8b:fb:
d2:cb:92:21:a1:70:12:31:ce:1c:eb:ad:2a:3a:3e:04:e6:5f:
5f:3e:12:ef:3c:1b:9d:c0:f4:b1:cc:f1:e5:14:21:ca:4a:a3:
37:23:bf:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 24 01:00:53 2026 by rpki-client