Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/QuHK3zLZK5CkV9gPGZ6JXNVfJEo.roa
File: QuHK3zLZK5CkV9gPGZ6JXNVfJEo.roa (raw, json)
Hash identifier: iUHJvUQzLelUzavvNQlUPA7ulaINgglVSrrt9fBO4As=
Subject key identifier: 42:E1:CA:DF:32:D9:2B:90:A4:57:D8:0F:19:9E:89:5C:D5:5F:24:4A
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A04900051BA256DCA8F4A8F211550F7ABD
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/QuHK3zLZK5CkV9gPGZ6JXNVfJEo.roa
Signing time: Fri 28 Aug 2026 15:32:13 +0000
ROA not before: Fri 28 Aug 2026 15:32:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 45.134.184.0/24 maxlen: 24
195.158.192.0/24 maxlen: 24
2a0f:e7c4:10::/48 maxlen: 48
2a11:3500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:49:00:05:1b:a2:56:dc:a8:f4:a8:f2:11:55:0f:7a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 28 15:32:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42e1cadf32d92b90a457d80f199e895cd55f244a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5c:25:bc:d4:83:e5:14:25:c5:c9:ea:4a:8f:
93:85:00:ba:01:09:3b:d1:a0:de:87:4b:3f:25:f2:
58:0f:3a:b8:41:1b:2e:fd:8e:b3:21:c9:3e:b1:23:
24:1e:27:57:bf:db:52:de:06:eb:c9:54:14:2c:d5:
82:73:47:dd:34:66:b2:84:bb:4b:e9:8c:af:43:d1:
cb:bc:5d:13:97:0f:6f:6c:43:8a:3e:bd:9c:5e:77:
40:c3:6e:6e:a0:87:d2:45:bf:f8:89:36:b7:0d:6a:
28:ab:f8:af:3f:11:81:70:f8:4c:02:3e:f4:f9:2a:
5f:4a:ae:6d:17:81:4e:a7:ce:a8:65:55:ef:1e:6f:
fd:12:2e:1a:a3:c5:4c:5b:96:a7:69:fd:0a:1f:2d:
62:3e:c6:62:92:db:6f:73:72:df:2d:28:1e:3e:04:
0d:af:3b:f5:64:3b:27:f9:f7:cc:8c:4d:6e:8c:d5:
3c:d2:23:fd:8b:89:70:31:32:b4:cf:33:2c:8d:95:
27:1e:8e:77:9c:bb:b4:16:f4:13:46:1c:fc:c5:9c:
98:5f:6f:ce:e6:5a:86:36:fd:d0:b5:09:68:3c:e3:
f2:40:45:9d:9e:56:60:45:14:b7:0e:92:ef:05:aa:
4e:46:a1:d7:51:36:5e:c1:50:b3:ec:cc:79:99:e8:
18:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E1:CA:DF:32:D9:2B:90:A4:57:D8:0F:19:9E:89:5C:D5:5F:24:4A
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/QuHK3zLZK5CkV9gPGZ6JXNVfJEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.184.0/24
195.158.192.0/24
IPv6:
2a0f:e7c4:10::/48
2a11:3500::/29
Signature Algorithm: sha256WithRSAEncryption
42:a2:40:e2:c5:ad:27:5c:06:24:e5:be:0b:93:7c:ca:8d:19:
cf:b1:95:1e:c8:7e:1b:87:e1:1f:59:e9:6d:74:26:4c:1a:0e:
19:a4:11:c2:e3:89:b4:37:60:f4:b6:a9:ca:6f:7c:f0:b5:91:
9e:fb:00:f0:17:23:3f:f7:b4:b1:69:98:35:6c:bb:d0:48:e8:
9f:3d:f2:9f:73:46:d0:5a:c6:a9:31:ea:fd:3b:e1:d5:fd:3c:
44:75:78:66:9d:08:f6:ff:20:97:7c:74:8c:34:9d:fa:64:e1:
70:2b:5a:87:83:f1:fc:1e:56:d1:15:c7:ec:a0:e4:81:32:1a:
25:ea:eb:cd:07:be:1b:42:98:6f:bf:37:87:88:5b:d3:e0:12:
d6:5a:f9:36:c3:20:57:85:7d:79:e3:e2:36:c5:49:18:c3:00:
5c:1f:6a:1b:09:39:5a:3d:4b:68:2d:cf:56:aa:e0:bf:ee:58:
87:fc:cd:ef:a9:f5:3b:cc:a2:dc:6f:64:e2:e9:27:0e:3f:8e:
e0:90:53:72:a3:dc:b4:19:f5:28:5e:19:5f:e1:41:a1:78:15:
90:6b:4a:32:48:48:84:63:20:ba:a6:07:ae:c4:15:67:23:fc:
f8:d1:d5:76:94:10:75:7d:8c:e7:98:9e:10:59:cf:c4:d0:42:
87:d1:0e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:45:42 2026 by rpki-client