Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JLHpgkpPnzZBDuilTX2GNnNhECw.roa
File: JLHpgkpPnzZBDuilTX2GNnNhECw.roa (raw, json)
Hash identifier: /BtyBysIrdH9BnPfNXOVKxprHMrYj9ZtafYd2zwgrJE=
Subject key identifier: 24:B1:E9:82:4A:4F:9F:36:41:0E:E8:A5:4D:7D:86:36:73:61:10:2C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019E741C8838DB00385791147E4AD5456646
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JLHpgkpPnzZBDuilTX2GNnNhECw.roa
Signing time: Fri 29 May 2026 14:21:27 +0000
ROA not before: Fri 29 May 2026 14:21:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213755
IP address blocks: 45.86.15.0/24 maxlen: 24
45.118.249.0/24 maxlen: 24
45.134.186.0/24 maxlen: 24
45.135.38.0/24 maxlen: 24
45.145.59.0/24 maxlen: 24
45.146.89.0/24 maxlen: 24
45.146.90.0/24 maxlen: 24
45.151.100.0/24 maxlen: 24
45.152.202.0/24 maxlen: 24
45.158.185.0/24 maxlen: 24
103.91.146.0/24 maxlen: 24
193.39.143.0/24 maxlen: 24
193.39.209.0/24 maxlen: 24
193.41.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:74:1c:88:38:db:00:38:57:91:14:7e:4a:d5:45:66:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 29 14:21:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24b1e9824a4f9f36410ee8a54d7d86367361102c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8b:e5:20:99:75:ba:05:27:bc:bf:d3:c1:63:
ce:63:48:ec:9b:81:de:ba:fb:02:ab:28:6f:ef:77:
f4:9f:d2:41:d9:24:7e:d0:58:05:0f:9f:55:f8:eb:
d1:fe:ff:28:21:6d:35:f2:c9:3d:3d:0f:01:2b:02:
2a:2a:41:81:a6:39:8d:c9:0d:8d:fe:f4:15:36:08:
0c:62:1e:9f:d7:9e:ed:72:e0:45:50:04:72:88:b2:
ec:12:df:0d:d2:21:bd:4a:9b:92:b8:e5:86:b9:5b:
41:3c:c4:36:fd:96:48:2d:46:e8:1b:9e:1c:c9:16:
04:23:e7:48:cc:1e:b6:dc:f0:1b:ff:0f:54:2e:43:
9b:1d:79:0a:ab:6f:d6:7f:00:ef:ad:ed:26:46:90:
96:e1:13:9a:fd:4c:4d:56:24:02:ce:31:ff:1b:1c:
24:66:90:10:f9:b4:90:1c:d6:05:59:ef:ed:7f:e9:
02:9a:7e:a7:7d:10:3a:76:16:f5:a1:e4:eb:ac:9a:
06:36:29:e2:0e:19:36:d2:c1:37:be:1f:35:63:43:
da:15:26:0c:82:c5:fa:53:86:df:c8:62:a1:8f:38:
3d:c1:4d:a0:3d:d5:9f:5d:66:8a:a7:95:e9:a5:cd:
49:24:53:a3:b7:b9:af:e6:a8:e7:c5:e5:ee:0c:eb:
04:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B1:E9:82:4A:4F:9F:36:41:0E:E8:A5:4D:7D:86:36:73:61:10:2C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JLHpgkpPnzZBDuilTX2GNnNhECw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.15.0/24
45.118.249.0/24
45.134.186.0/24
45.135.38.0/24
45.145.59.0/24
45.146.89.0-45.146.90.255
45.151.100.0/24
45.152.202.0/24
45.158.185.0/24
103.91.146.0/24
193.39.143.0/24
193.39.209.0/24
193.41.86.0/24
Signature Algorithm: sha256WithRSAEncryption
77:46:20:62:66:5c:97:dd:74:4b:5e:d1:b1:88:96:07:52:70:
5f:b6:17:5f:ee:b7:8d:1f:a9:f8:cf:95:55:a7:81:f2:5d:d6:
4d:b2:e5:57:9d:3d:53:94:92:38:5f:67:01:57:94:53:c3:bb:
6c:d7:de:30:c7:62:bb:9e:1e:d9:54:4a:0f:d6:bf:c1:5f:77:
60:e9:6c:fe:5f:8c:59:f0:72:31:c0:25:58:73:93:8a:27:7d:
c5:44:29:67:33:2f:48:45:5b:f9:b6:28:c2:a5:e3:81:47:7f:
e4:08:70:4d:49:9d:5c:80:bc:58:5d:45:cb:5e:d5:e7:2d:46:
0c:49:6e:3a:1c:9f:4e:8b:d9:39:73:2b:8f:b5:3b:2d:16:33:
76:55:1b:e9:b5:79:90:8d:53:16:31:be:f6:ae:de:b7:39:a9:
81:50:60:61:4e:5c:9a:25:91:33:ac:01:fe:c8:32:38:52:e8:
ab:0f:60:bf:b1:d3:44:0c:9e:95:0a:47:64:56:e3:9b:d1:44:
ca:f6:04:00:88:1e:b9:5a:7e:8f:0b:c9:4d:44:80:56:21:ab:
0f:a8:93:c4:fc:00:d2:25:ea:1c:49:0a:6c:18:14:52:ae:06:
b4:7a:b4:99:73:dd:a7:0c:b5:64:e7:0b:72:13:2c:a6:05:90:
87:75:13:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:32:07 2026 by rpki-client