Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/OZNwneiBBA3seVHg-hmxoCJspnw.roa
File: OZNwneiBBA3seVHg-hmxoCJspnw.roa (raw, json)
Hash identifier: Llg9X8+tHHTQ/l5R9otSSvITVX/jc4e6qU0c+SCPc4o=
Subject key identifier: 39:93:70:9D:E8:81:04:0D:EC:79:51:E0:FA:19:B1:A0:22:6C:A6:7C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A048FC5B96132A9553DF5B8437BA7E2950
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/OZNwneiBBA3seVHg-hmxoCJspnw.roa
Signing time: Fri 28 Aug 2026 15:28:13 +0000
ROA not before: Fri 28 Aug 2026 15:28:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49981
IP address blocks: 45.91.211.0/24 maxlen: 24
45.146.129.0/24 maxlen: 24
185.99.99.0/24 maxlen: 24
193.8.1.0/24 maxlen: 24
193.8.94.0/24 maxlen: 24
195.85.197.0/24 maxlen: 24
2a06:1180:36af::/48 maxlen: 48
2a0f:3045::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:fc:5b:96:13:2a:95:53:df:5b:84:37:ba:7e:29:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 28 15:28:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3993709de881040dec7951e0fa19b1a0226ca67c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:64:1b:9d:11:39:ef:3c:2e:8e:96:7a:35:c3:
a5:7c:74:52:e5:bf:ae:fb:4b:c0:b5:b9:df:66:5e:
34:9e:0f:99:cd:94:b7:d7:6d:a8:28:e8:43:60:87:
eb:ff:fe:ee:97:1d:ff:30:05:57:83:43:14:24:25:
16:5b:a4:5a:59:61:4c:4c:34:d8:28:4b:65:92:9b:
ca:26:22:1c:5d:73:b1:97:d7:73:59:7b:37:93:c6:
d8:4b:c7:0b:d0:35:14:58:ab:76:7a:7c:fe:7e:8c:
42:80:df:ea:0f:9c:59:0d:7e:20:0b:b0:5c:38:1b:
bb:eb:fe:2a:bb:1f:30:52:b7:33:65:8b:a1:2d:67:
e4:50:7e:26:6e:4b:b1:a3:77:ec:95:15:6a:a7:24:
db:57:73:db:23:e0:b8:a4:08:49:3a:99:76:6b:76:
40:4a:26:e7:5b:50:a6:39:34:7b:7a:08:92:50:76:
96:ef:1c:4c:63:34:5e:e9:03:e0:4f:e5:c7:ae:1c:
e0:73:32:e5:6b:59:c6:bf:48:75:50:35:40:f5:2c:
c6:31:46:c7:dc:51:b7:49:c7:ac:f7:2f:f0:f9:b7:
78:ce:80:9e:47:bf:df:f4:22:f6:28:f2:9d:f3:92:
96:f9:c1:70:de:17:7e:5f:52:c7:e0:c0:73:b7:98:
28:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:93:70:9D:E8:81:04:0D:EC:79:51:E0:FA:19:B1:A0:22:6C:A6:7C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/OZNwneiBBA3seVHg-hmxoCJspnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.211.0/24
45.146.129.0/24
185.99.99.0/24
193.8.1.0/24
193.8.94.0/24
195.85.197.0/24
IPv6:
2a06:1180:36af::/48
2a0f:3045::/32
Signature Algorithm: sha256WithRSAEncryption
5b:3a:58:db:e8:c2:2e:2b:e2:19:da:14:3a:8b:fe:30:56:30:
da:26:89:e2:b0:f9:90:ec:a2:3d:e7:ca:e8:74:f7:4d:de:61:
82:1a:9b:12:94:d0:6f:08:34:74:5c:f2:8e:5a:cd:ee:cb:85:
ca:5c:c3:96:5b:77:19:d1:59:20:a9:07:b8:13:63:f0:f9:82:
85:f4:2b:17:19:c7:c5:f0:9e:ba:5f:50:09:47:3f:af:0f:fe:
ea:8c:d0:74:c6:97:5d:70:47:c1:08:06:66:3e:ff:ce:97:4d:
97:77:89:43:11:e7:92:97:fc:66:2a:63:3a:0f:35:fd:d9:fb:
43:4e:10:22:d3:10:a0:9d:4f:95:fa:cf:cb:2a:dc:0e:48:3b:
a7:d8:7f:0d:42:f5:16:df:18:bb:9e:19:7e:77:0e:dc:14:6c:
83:4b:61:26:de:57:5b:48:99:4a:e0:14:77:fd:ea:19:31:fb:
ef:1a:b9:07:d6:85:40:17:a3:98:88:50:8c:bf:3c:e1:52:4b:
25:61:41:98:dc:98:5e:3f:0d:6d:e2:b5:2e:20:6d:02:e9:0a:
09:31:4e:3c:56:06:e9:28:ea:3d:42:3a:dc:72:7f:bf:f6:c0:
3f:c6:9f:1b:c3:3a:20:eb:fb:30:b4:5a:1b:f2:68:f6:c3:02:
d7:06:4e:65
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAaBI/FuWEyqVU99bhDe6filQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYwODI4MTUyODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTkzNzA5ZGU4ODEwNDBkZWM3OTUxZTBmYTE5YjFhMDIyNmNhNjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2QbnRE57zwujpZ6NcOlfHRS5b+u
+0vAtbnfZl40ng+ZzZS3122oKOhDYIfr//7ulx3/MAVXg0MUJCUWW6RaWWFMTDTY
KEtlkpvKJiIcXXOxl9dzWXs3k8bYS8cL0DUUWKt2enz+foxCgN/qD5xZDX4gC7Bc
OBu76/4qux8wUrczZYuhLWfkUH4mbkuxo3fslRVqpyTbV3PbI+C4pAhJOpl2a3ZA
SibnW1CmOTR7egiSUHaW7xxMYzRe6QPgT+XHrhzgczLla1nGv0h1UDVA9SzGMUbH
3FG3Sces9y/w+bd4zoCeR7/f9CL2KPKd85KW+cFw3hd+X1LH4MBzt5goHwIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFDmTcJ3ogQQN7HlR4PoZsaAibKZ8MB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvT1pOd25laUJCQTNzZVZIZy1obXhvQ0pzcG53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDAqBAIAATAkAwQALVvTAwQA
LZKBAwQAuWNjAwQAwQgBAwQAwQheAwQAw1XFMBYEAgACMBADBwAqBhGANq8DBQAq
DzBFMA0GCSqGSIb3DQEBCwUAA4IBAQBbOljb6MIuK+IZ2hQ6i/4wVjDaJonisPmQ
7KI958rodPdN3mGCGpsSlNBvCDR0XPKOWs3uy4XKXMOWW3cZ0VkgqQe4E2Pw+YKF
9CsXGcfF8J66X1AJRz+vD/7qjNB0xpddcEfBCAZmPv/Ol02Xd4lDEeeSl/xmKmM6
DzX92ftDThAi0xCgnU+V+s/LKtwOSDun2H8NQvUW3xi7nhl+dw7cFGyDS2Em3ldb
SJlK4BR3/eoZMfvvGrkH1oVAF6OYiFCMvzzhUkslYUGY3JhePw1t4rUuIG0C6QoJ
MU48VgbpKOo9Qjrccn+/9sA/xp8bwzog6/swtFob8mj2wwLXBk5l
-----END CERTIFICATE-----
Generated at Thu Sep 3 23:30:46 2026 by rpki-client