Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NdwqZQ-BGs8EYifDjBNJoOLkfzg.roa
File: NdwqZQ-BGs8EYifDjBNJoOLkfzg.roa (raw, json)
Hash identifier: h2V/YZsdeJ5Ft/dgtl/NW7JpOWwUc7qn58zInd6uwI0=
Subject key identifier: 35:DC:2A:65:0F:81:1A:CF:04:62:27:C3:8C:13:49:A0:E2:E4:7F:38
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A12F0BB8BC9447882146E7B0C649C83DAE
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NdwqZQ-BGs8EYifDjBNJoOLkfzg.roa
Signing time: Mon 12 Oct 2026 07:37:39 +0000
ROA not before: Mon 12 Oct 2026 07:37:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28753
IP address blocks: 45.130.124.0/24 maxlen: 24
192.166.153.0/24 maxlen: 24
2a04:9f40::/29 maxlen: 29
2a06:1184:101::/48 maxlen: 48
2a06:3bc0::/29 maxlen: 29
2a07:8a40::/29 maxlen: 29
2a09:7b00::/29 maxlen: 29
2a0a:2d06:102::/48 maxlen: 48
2a0a:7d00::/29 maxlen: 29
2a0c:4880::/29 maxlen: 29
2a0c:7886:99::/48 maxlen: 48
2a0d:2ac0::/29 maxlen: 29
2a0e:5800::/29 maxlen: 29
2a0f:17c0::/29 maxlen: 29
2a0f:2500::/29 maxlen: 29
2a0f:d200::/29 maxlen: 29
2a0f:d9c0::/29 maxlen: 29
2a0f:db40::/29 maxlen: 29
2a11:8880::/29 maxlen: 29
2a13:1380::/29 maxlen: 29
2a13:18c6:66::/48 maxlen: 48
2a13:2cc0::/29 maxlen: 29
2a13:2d40::/29 maxlen: 29
2a13:2dc0::/29 maxlen: 29
2a13:2e40::/29 maxlen: 29
2a13:3380::/29 maxlen: 29
2a13:4900::/29 maxlen: 29
2a13:5b80::/29 maxlen: 29
2a13:7900::/29 maxlen: 29
2a13:7d80::/29 maxlen: 29
2a13:8200::/29 maxlen: 29
2a13:d100::/29 maxlen: 29
2a13:d700::/29 maxlen: 29
2a13:d900::/29 maxlen: 29
2a13:f900::/29 maxlen: 29
2a13:fb00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:0b:b8:bc:94:47:88:21:46:e7:b0:c6:49:c8:3d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 12 07:37:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=35dc2a650f811acf046227c38c1349a0e2e47f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bf:3a:98:c7:87:19:19:96:e7:5e:9a:3a:20:
b0:36:37:f4:e4:f3:9f:72:41:21:2b:e4:4b:1e:b0:
32:2a:48:b8:20:04:a8:24:31:34:7a:20:ca:30:e9:
27:0c:41:8b:8a:b0:02:0d:68:a5:ab:04:3a:cf:9c:
de:32:31:c6:b1:82:09:1d:9b:b4:a9:82:e2:02:5a:
3c:8d:be:62:13:99:f2:0b:33:31:47:ae:6b:67:fd:
a1:2e:65:a7:1b:5c:4a:5a:40:c1:3d:50:cb:66:25:
6d:e7:3c:7e:26:05:05:97:8e:dc:2a:2d:56:37:ef:
9c:0e:f9:a0:24:46:b2:c9:d5:c7:2f:51:f8:f5:5f:
1a:75:3a:97:d9:f0:49:e5:32:bb:29:8a:ee:c1:13:
95:6d:29:c0:0b:9d:fe:50:8c:e6:74:b2:4f:c5:b8:
7e:d8:0b:60:81:23:eb:0a:41:0c:d5:98:e8:75:d8:
24:e1:7f:36:31:36:3f:df:d9:f0:4c:b2:58:00:95:
fb:d7:c6:86:fc:24:f1:d7:db:43:39:a6:ef:9d:78:
6e:cb:40:1e:15:a8:d8:df:cb:ab:5d:c8:29:ca:9f:
db:a4:e6:8b:4b:1a:b4:8e:2b:04:43:40:22:fa:f8:
e9:37:8f:27:90:23:bd:78:45:77:63:2f:c3:69:69:
d6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DC:2A:65:0F:81:1A:CF:04:62:27:C3:8C:13:49:A0:E2:E4:7F:38
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NdwqZQ-BGs8EYifDjBNJoOLkfzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.124.0/24
192.166.153.0/24
IPv6:
2a04:9f40::/29
2a06:1184:101::/48
2a06:3bc0::/29
2a07:8a40::/29
2a09:7b00::/29
2a0a:2d06:102::/48
2a0a:7d00::/29
2a0c:4880::/29
2a0c:7886:99::/48
2a0d:2ac0::/29
2a0e:5800::/29
2a0f:17c0::/29
2a0f:2500::/29
2a0f:d200::/29
2a0f:d9c0::/29
2a0f:db40::/29
2a11:8880::/29
2a13:1380::/29
2a13:18c6:66::/48
2a13:2cc0::/29
2a13:2d40::/29
2a13:2dc0::/29
2a13:2e40::/29
2a13:3380::/29
2a13:4900::/29
2a13:5b80::/29
2a13:7900::/29
2a13:7d80::/29
2a13:8200::/29
2a13:d100::/29
2a13:d700::/29
2a13:d900::/29
2a13:f900::/29
2a13:fb00::/29
Signature Algorithm: sha256WithRSAEncryption
17:87:20:e4:11:89:65:3a:1c:df:51:97:f8:48:e1:2f:8d:e1:
81:4d:a1:a6:6e:9d:dd:54:19:e1:a4:8f:e9:e7:bb:1e:9c:4c:
45:ed:33:35:10:2f:1d:d1:af:e8:8c:66:8d:be:c1:bc:bf:83:
12:6d:73:73:61:46:ed:a6:6c:b1:0e:e4:04:76:01:28:74:81:
3a:c9:b8:c3:d1:28:d6:47:2d:ad:7b:0d:fc:50:68:7d:b9:bb:
69:57:b1:37:2c:5f:f2:4a:5d:ab:00:2c:2d:a7:71:60:5f:27:
e4:18:16:9f:48:2c:eb:28:eb:a7:76:40:e5:f8:bc:95:46:16:
ac:cc:7c:71:a8:a5:e8:f9:79:c6:a7:5e:2e:fe:4a:ce:bd:65:
13:74:cb:b7:05:5a:d3:bb:67:7b:d7:58:eb:2e:a2:5c:cc:df:
e3:61:b9:43:20:75:65:a2:eb:b9:5e:c1:73:10:a8:43:56:ec:
b5:0f:66:49:96:9b:bc:53:65:ca:be:64:19:96:ad:78:26:ed:
25:34:b2:54:62:b4:ab:32:05:e2:22:3a:76:50:60:3a:08:c0:
5c:bf:c4:cb:e3:59:7d:78:2c:fa:bf:d2:a5:97:1d:0f:2a:48:
3a:90:ec:7f:f7:b0:7f:1a:36:0e:a0:f3:e4:3a:30:66:aa:88:
74:56:79:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:48:58 2026 by rpki-client