Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/KXlzefCDTxNf0ijf36oKKjHfmrM.roa
File: KXlzefCDTxNf0ijf36oKKjHfmrM.roa (raw, json)
Hash identifier: wI2pucx0mRQ/n5KAuR0nifAbWphdjdKSOe3ZWTl8K3g=
Subject key identifier: 29:79:73:79:F0:83:4F:13:5F:D2:28:DF:DF:AA:0A:2A:31:DF:9A:B3
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A0ECB0FC18CD7D2C307CC86C47C4F40D3C
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/KXlzefCDTxNf0ijf36oKKjHfmrM.roa
Signing time: Tue 29 Sep 2026 10:23:36 +0000
ROA not before: Tue 29 Sep 2026 10:23:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203273
IP address blocks: 45.9.117.0/24 maxlen: 24
45.9.120.0/24 maxlen: 24
45.86.245.0/24 maxlen: 24
45.94.37.0/24 maxlen: 24
45.118.248.0/24 maxlen: 24
45.118.249.0/24 maxlen: 24
45.129.124.0/24 maxlen: 24
45.129.126.0/24 maxlen: 24
45.130.254.0/24 maxlen: 24
45.131.215.0/24 maxlen: 24
45.133.209.0/24 maxlen: 24
45.133.210.0/24 maxlen: 24
45.135.38.0/24 maxlen: 24
45.137.42.0/24 maxlen: 24
45.137.43.0/24 maxlen: 24
45.139.85.0/24 maxlen: 24
45.146.88.0/24 maxlen: 24
45.146.90.0/24 maxlen: 24
45.146.91.0/24 maxlen: 24
45.151.100.0/24 maxlen: 24
45.152.202.0/24 maxlen: 24
45.154.58.0/24 maxlen: 24
45.158.185.0/24 maxlen: 24
45.158.199.0/24 maxlen: 24
45.159.144.0/24 maxlen: 24
103.229.31.0/24 maxlen: 24
167.94.163.0/24 maxlen: 24
185.99.98.0/24 maxlen: 24
185.126.64.0/24 maxlen: 24
185.164.56.0/24 maxlen: 24
193.5.64.0/24 maxlen: 24
193.39.143.0/24 maxlen: 24
193.39.209.0/24 maxlen: 24
193.39.245.0/24 maxlen: 24
193.41.86.0/24 maxlen: 24
193.58.108.0/24 maxlen: 24
194.62.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:b0:fc:18:cd:7d:2c:30:7c:c8:6c:47:c4:f4:0d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 29 10:23:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=29797379f0834f135fd228dfdfaa0a2a31df9ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a7:fa:f7:1f:34:81:5a:b2:22:fd:e1:a7:4e:
7b:fb:d4:74:8a:3a:db:bb:9d:02:d8:90:09:92:cf:
be:93:19:df:7a:84:76:23:7b:07:7d:7f:e2:ce:aa:
6e:75:da:4f:08:8c:f8:e0:c4:1c:3f:ed:f8:24:a6:
39:9e:25:a7:b2:8f:9e:53:14:1f:d6:db:53:cc:3d:
d1:a3:81:e9:4d:5d:d2:67:96:f7:7e:44:ee:a3:e1:
60:70:26:71:6a:63:8c:02:90:65:76:c2:7e:39:c7:
3c:ec:6a:a2:04:b8:c6:36:2c:ea:eb:d8:93:b7:4b:
81:aa:ce:c5:f1:1d:1c:e0:bf:33:5f:a1:a9:ba:2f:
da:16:7d:21:79:8f:89:6a:7e:fa:11:5b:74:46:c0:
9f:77:f8:bc:93:bf:1e:99:d1:3e:c5:74:a1:97:32:
18:b3:78:9a:e2:b7:b7:eb:e1:34:44:91:f4:7e:3a:
bd:a1:59:fa:93:fc:c4:17:e2:6c:c9:37:66:11:dd:
7c:64:8c:b8:8e:82:b4:aa:f4:dc:bf:b5:23:d0:83:
b8:89:3a:32:6b:3b:73:06:80:fd:bc:d9:7d:88:d9:
51:24:c7:84:b0:45:77:8e:86:69:57:82:2b:71:3e:
da:39:52:e1:aa:37:2e:e0:63:ac:82:e8:31:08:0a:
d9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:79:73:79:F0:83:4F:13:5F:D2:28:DF:DF:AA:0A:2A:31:DF:9A:B3
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/KXlzefCDTxNf0ijf36oKKjHfmrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.117.0/24
45.9.120.0/24
45.86.245.0/24
45.94.37.0/24
45.118.248.0/23
45.129.124.0/24
45.129.126.0/24
45.130.254.0/24
45.131.215.0/24
45.133.209.0-45.133.210.255
45.135.38.0/24
45.137.42.0/23
45.139.85.0/24
45.146.88.0/24
45.146.90.0/23
45.151.100.0/24
45.152.202.0/24
45.154.58.0/24
45.158.185.0/24
45.158.199.0/24
45.159.144.0/24
103.229.31.0/24
167.94.163.0/24
185.99.98.0/24
185.126.64.0/24
185.164.56.0/24
193.5.64.0/24
193.39.143.0/24
193.39.209.0/24
193.39.245.0/24
193.41.86.0/24
193.58.108.0/24
194.62.66.0/24
Signature Algorithm: sha256WithRSAEncryption
46:79:0b:43:64:52:b2:76:be:a6:1b:76:17:4c:42:ee:9a:a0:
a6:7f:c6:95:ea:48:83:04:64:4c:85:9e:76:fc:9e:85:a3:78:
84:53:06:bc:e9:92:49:06:97:45:3f:cb:a5:be:ef:c7:20:96:
5a:b0:8f:12:08:87:fb:60:98:9c:36:0c:99:f5:a3:34:70:b9:
73:83:27:b4:a5:0a:a9:3b:f1:fd:a6:0d:10:b6:11:db:9e:0c:
08:46:a0:ae:a6:26:2e:2b:85:4d:e8:28:2d:c8:71:96:a9:04:
ac:72:49:7f:ad:2c:68:fc:3c:aa:61:b8:d2:1b:85:af:90:0e:
bf:cd:f8:aa:6a:53:1c:83:04:26:04:be:ee:06:1d:55:7a:8a:
27:cf:d1:c4:3f:8e:c0:b2:30:df:54:0a:85:6c:d9:af:53:3d:
b2:54:dd:d3:7d:04:95:0e:db:42:13:c3:65:8b:d6:5c:b6:08:
a0:2a:12:92:e1:f8:79:6b:e8:38:80:1e:a0:ad:52:07:ab:c6:
54:34:8e:b3:5b:99:f6:18:08:df:9e:bb:8a:48:15:f7:1a:0a:
31:95:4d:08:1a:f8:70:45:a3:4d:0d:83:6d:09:4f:0e:ec:ac:
0f:03:86:d3:6d:bb:9e:b6:1b:f3:81:c0:3a:4b:3d:88:e2:00:
4f:24:ed:29
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Oct 7 07:50:35 2026 by rpki-client