Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RttH5ULLi1mYF6xjaKppkzdZnjY.roa
File: RttH5ULLi1mYF6xjaKppkzdZnjY.roa (raw, json)
Hash identifier: AGCC/Fe++t71bRbpEBpH7Gj00meXsKAsArfyQwKJdT4=
Subject key identifier: 46:DB:47:E5:42:CB:8B:59:98:17:AC:63:68:AA:69:93:37:59:9E:36
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019CC2E70A2EA7BFB6B74D65CDE05FF1C357
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RttH5ULLi1mYF6xjaKppkzdZnjY.roa
Signing time: Fri 06 Mar 2026 11:27:27 +0000
ROA not before: Fri 06 Mar 2026 11:27:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 45.145.59.0/24 maxlen: 24
45.146.89.0/24 maxlen: 24
45.146.90.0/24 maxlen: 24
45.152.202.0/24 maxlen: 24
193.39.143.0/24 maxlen: 24
2a0a:2d06:104::/48 maxlen: 48
2a0f:2705::/32 maxlen: 32
2a0f:7d05::/32 maxlen: 32
2a0f:e7c2::/32 maxlen: 32
2a10:7500::/29 maxlen: 29
2a11:efc0::/29 maxlen: 29
2a12:ef00::/29 maxlen: 29
2a13:d46::/32 maxlen: 32
2a13:d47::/32 maxlen: 32
2a13:c905::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c2:e7:0a:2e:a7:bf:b6:b7:4d:65:cd:e0:5f:f1:c3:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 6 11:27:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46db47e542cb8b599817ac6368aa699337599e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:49:da:5b:64:06:cd:6d:29:14:fd:e0:db:f7:
1b:ca:db:9f:c6:71:39:81:1f:d5:05:ec:ca:19:bf:
91:8b:a1:1e:87:c6:30:97:ee:1e:35:aa:57:74:a2:
12:b0:fb:04:88:ab:ab:36:23:20:26:ac:d6:fc:85:
ea:2f:4d:4d:62:c2:57:b5:d0:b6:27:db:60:98:92:
c7:34:16:91:cc:d6:60:13:17:9c:a5:c7:73:37:66:
cc:2b:a8:96:5d:4f:b6:dc:98:73:25:d8:a7:6b:ae:
9d:09:59:bc:61:61:74:c0:fa:db:12:fb:53:5e:53:
7b:f3:da:12:96:cb:3a:c5:54:64:c8:5a:93:da:64:
83:42:5b:ad:06:b5:3a:0a:fd:da:95:f4:3e:d8:ba:
0a:d0:c6:2b:67:3e:81:bc:7f:91:23:3f:e8:96:0c:
a3:da:c9:ef:7c:12:78:d0:b5:e4:4b:00:95:a0:b7:
d7:e0:76:53:e9:59:a1:8d:83:4e:d8:1b:18:78:27:
ad:0a:d7:15:77:d0:89:b9:10:57:78:7f:db:fe:90:
f9:0e:8c:77:f0:9a:6a:1c:30:8e:49:c6:1e:78:91:
84:c6:bc:cd:50:9b:e7:82:fd:a9:ce:0b:6e:51:2a:
2e:21:f3:cc:50:4f:32:83:26:0c:6d:fc:f6:03:0b:
5d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DB:47:E5:42:CB:8B:59:98:17:AC:63:68:AA:69:93:37:59:9E:36
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RttH5ULLi1mYF6xjaKppkzdZnjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.59.0/24
45.146.89.0-45.146.90.255
45.152.202.0/24
193.39.143.0/24
IPv6:
2a0a:2d06:104::/48
2a0f:2705::/32
2a0f:7d05::/32
2a0f:e7c2::/32
2a10:7500::/29
2a11:efc0::/29
2a12:ef00::/29
2a13:d46::/31
2a13:c905::/32
Signature Algorithm: sha256WithRSAEncryption
31:34:f4:3e:5c:da:84:6c:cf:1d:e4:8c:9a:78:55:ea:8c:07:
ab:d3:ec:3c:3b:c0:74:ef:aa:2d:9c:c2:14:42:c1:06:ab:53:
4a:cb:be:9e:90:b8:fb:ad:49:5d:bc:3e:c1:e5:f6:f3:24:ff:
e1:67:b9:7d:3e:e3:d1:f9:ab:1e:77:d8:69:29:f8:b0:37:a3:
de:b5:7a:8d:94:d7:43:e5:bc:f5:dd:d3:8c:16:ee:9a:cc:4b:
e1:f4:6a:44:a6:ac:76:fc:01:c3:38:5f:21:6e:48:a1:af:1a:
bc:5b:a3:b1:a4:d4:27:4f:57:59:bf:1b:86:90:01:68:12:d5:
7c:3c:1b:77:b1:b4:ac:0c:60:e7:4e:81:a2:58:f6:79:d7:d5:
e7:86:8e:c8:7b:de:8a:89:ad:89:b5:5b:33:88:52:19:88:31:
ff:66:26:87:a8:93:fc:df:7b:9e:19:00:7a:64:2c:31:da:9e:
80:75:cb:35:3b:61:0b:ca:b8:36:7d:f2:fe:8f:2a:4c:33:f2:
05:86:da:91:6c:12:64:b8:a1:48:80:23:db:f3:e7:c9:e6:39:
84:09:9a:71:1f:71:79:4d:2a:8e:37:fa:a0:0d:bf:64:80:b0:
ba:50:ba:50:2a:1b:50:65:fa:67:c6:50:bb:44:6f:8f:0f:0f:
c2:98:06:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 03:47:47 2026 by rpki-client