Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/O3kq4ZTID3lOdHvDtV5W5U1fTUY.roa
File: O3kq4ZTID3lOdHvDtV5W5U1fTUY.roa (raw, json)
Hash identifier: nYp/xAc5TMuFcbuGqQCKSGDQAOoff0FHg2jmfjzfqWc=
Subject key identifier: 3B:79:2A:E1:94:C8:0F:79:4E:74:7B:C3:B5:5E:56:E5:4D:5F:4D:46
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019DBE8FC816E04DE641E099F59966128348
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/O3kq4ZTID3lOdHvDtV5W5U1fTUY.roa
Signing time: Fri 24 Apr 2026 08:16:27 +0000
ROA not before: Fri 24 Apr 2026 08:16:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216334
IP address blocks: 45.154.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:59:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:be:8f:c8:16:e0:4d:e6:41:e0:99:f5:99:66:12:83:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 24 08:16:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b792ae194c80f794e747bc3b55e56e54d5f4d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f6:89:58:4b:c4:44:6b:24:30:31:85:4c:1b:
1e:08:89:cc:4b:2d:cc:2d:c4:8a:d0:2c:4f:f2:60:
80:29:18:6d:ce:f0:75:25:27:74:6a:fb:68:58:d1:
35:13:bf:ed:c5:dc:d3:68:9b:11:f3:dd:56:03:f2:
35:b4:65:e2:00:dd:e0:9d:18:fd:c9:a9:84:3a:68:
bc:87:df:3b:c7:a5:37:b0:08:9b:2e:c2:00:38:f9:
72:c9:69:81:bd:19:af:b6:c1:b8:3e:54:97:b6:56:
7a:13:cb:f5:86:07:ee:30:da:df:57:45:08:11:2c:
2d:72:f4:81:5f:1a:ae:f0:77:be:2c:8f:eb:cf:11:
84:d8:fa:bd:83:b7:9c:11:ab:3f:9c:05:4e:9a:ce:
ec:66:bf:65:25:72:6e:ad:be:3e:b1:5a:e5:53:c0:
b2:3d:20:e6:28:98:b3:61:db:5e:82:b6:80:72:a7:
a8:c6:3c:22:88:78:24:48:9b:31:ca:98:6e:0a:f7:
6c:1e:30:a1:79:12:f1:81:2a:22:f2:79:db:3a:ba:
6d:63:cb:71:11:c4:9f:37:3f:2f:13:0b:2f:c9:59:
0b:f2:c6:17:75:8b:9b:53:8d:29:ad:cf:73:1e:29:
37:12:ef:d5:54:f9:19:5b:ed:eb:3d:ba:71:e5:cb:
05:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:79:2A:E1:94:C8:0F:79:4E:74:7B:C3:B5:5E:56:E5:4D:5F:4D:46
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/O3kq4ZTID3lOdHvDtV5W5U1fTUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.246.0/24
Signature Algorithm: sha256WithRSAEncryption
87:df:87:2e:aa:24:4f:c5:c0:96:74:83:ec:ef:15:55:20:50:
73:88:73:93:74:11:ef:86:df:c4:78:1d:24:3f:55:19:09:3c:
9c:45:86:55:a9:64:08:db:cf:e4:3d:e7:66:9d:2f:d0:d0:92:
18:98:64:a6:49:05:1c:2b:5c:40:36:28:b1:3a:65:c1:39:94:
ad:30:46:78:a6:b6:43:29:39:fb:0f:eb:c0:55:f5:95:ae:f9:
c7:94:f7:4d:ae:cd:b9:dd:d4:6a:4e:6e:bc:aa:87:83:13:1b:
59:dc:cc:2a:23:9e:e1:83:5b:28:af:e4:79:c6:65:f2:70:4b:
fe:06:24:f6:9b:b7:02:2d:d5:4f:38:2f:9c:c2:40:3d:ba:a0:
68:fa:f1:cc:ea:0f:de:ed:70:43:3e:0d:47:dd:b9:f0:cb:e3:
8b:03:61:ee:00:da:5c:ab:6b:4d:31:9e:ea:17:09:d6:77:20:
76:f2:d1:35:28:03:b5:69:9c:15:16:af:a3:7c:30:dd:86:10:
82:49:22:5b:01:24:d2:3c:d1:4b:5b:6b:c4:de:83:09:c1:f8:
88:4a:a0:a1:92:5a:19:bf:7d:e4:46:d6:de:cb:dc:b9:6f:3a:
a9:88:4a:7d:69:d0:b8:53:d3:36:af:01:ac:a0:8e:14:db:ed:
da:51:e1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:55:32 2026 by rpki-client