Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Svu6bufDhBSZIAkzIWGfGRvZ6q8.roa
File: Svu6bufDhBSZIAkzIWGfGRvZ6q8.roa (raw, json)
Hash identifier: +Ch6Kvc8gOJkL53Z7dflRXU8Bf7hqyvi8+GyXWdZZTk=
Subject key identifier: 4A:FB:BA:6E:E7:C3:84:14:99:20:09:33:21:61:9F:19:1B:D9:EA:AF
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019F0D92DE80B648D7C3D33CE934A39634F0
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Svu6bufDhBSZIAkzIWGfGRvZ6q8.roa
Signing time: Sun 28 Jun 2026 09:32:36 +0000
ROA not before: Sun 28 Jun 2026 09:32:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 45.9.118.0/24 maxlen: 24
45.9.120.0/24 maxlen: 24
45.9.122.0/24 maxlen: 24
45.134.184.0/24 maxlen: 24
45.141.176.0/24 maxlen: 24
45.146.91.0/24 maxlen: 24
45.146.180.0/24 maxlen: 24
45.151.104.0/24 maxlen: 24
192.156.217.0/24 maxlen: 24
193.8.1.0/24 maxlen: 24
193.23.245.0/24 maxlen: 24
193.39.245.0/24 maxlen: 24
193.254.234.0/24 maxlen: 24
193.254.235.0/24 maxlen: 24
195.66.26.0/24 maxlen: 24
195.158.192.0/24 maxlen: 24
2a0f:e7c4:10::/48 maxlen: 48
2a11:3500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0d:92:de:80:b6:48:d7:c3:d3:3c:e9:34:a3:96:34:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 28 09:32:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4afbba6ee7c384149920093321619f191bd9eaaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ba:12:4a:d2:01:80:5d:fd:d9:f2:92:8e:55:
1d:f0:7f:41:00:a9:bd:16:25:cb:c7:d4:00:d3:40:
f7:6d:ac:98:3b:99:1d:93:b9:1f:a2:20:1e:bc:e1:
f5:4e:ed:12:25:27:1f:88:d3:80:d8:db:cd:33:3f:
1c:6e:37:c2:b9:27:54:be:be:16:e1:31:df:89:67:
2a:8b:e5:a6:63:28:4d:95:5a:59:df:48:cc:d1:5d:
31:84:d1:35:5e:d8:24:12:2f:b1:38:75:4f:86:4e:
0e:83:60:ab:b8:1d:53:58:1f:fe:ce:30:7e:c6:fc:
21:ec:b2:14:5c:5a:fb:2b:65:8d:f3:30:1e:98:ab:
ad:b7:c5:28:45:66:fc:98:38:1b:71:8a:dd:3e:a7:
ef:aa:bb:95:d3:95:fd:4e:8c:ff:6e:14:dd:ee:9f:
26:d9:36:5e:e5:ca:26:21:b7:14:15:f8:66:70:93:
7e:00:1d:f1:80:e0:88:5e:41:05:4a:f3:47:90:4c:
ff:9d:51:0c:d8:5c:0e:19:be:90:77:2e:93:5a:ca:
a2:cf:17:68:0b:6d:ce:0a:97:4d:70:ff:c2:8c:41:
4c:a8:0d:92:e3:90:37:74:b0:ec:b9:70:4b:34:0b:
2d:41:b3:77:ce:0c:9a:b9:eb:99:b0:46:81:2a:bc:
3a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FB:BA:6E:E7:C3:84:14:99:20:09:33:21:61:9F:19:1B:D9:EA:AF
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Svu6bufDhBSZIAkzIWGfGRvZ6q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.118.0/24
45.9.120.0/24
45.9.122.0/24
45.134.184.0/24
45.141.176.0/24
45.146.91.0/24
45.146.180.0/24
45.151.104.0/24
192.156.217.0/24
193.8.1.0/24
193.23.245.0/24
193.39.245.0/24
193.254.234.0/23
195.66.26.0/24
195.158.192.0/24
IPv6:
2a0f:e7c4:10::/48
2a11:3500::/29
Signature Algorithm: sha256WithRSAEncryption
a3:f6:8f:4a:fb:70:02:5a:18:5e:5d:ed:56:a5:59:45:36:86:
19:f5:88:49:4f:fe:2c:63:e5:fc:a9:4f:7a:fd:a0:a6:21:c8:
3f:a8:3f:b0:97:95:97:21:dc:9e:89:14:29:08:5c:bc:98:15:
ea:9b:bf:c3:2f:dd:47:dd:5b:a4:b3:a8:e1:17:06:ee:b4:cd:
37:9c:80:1b:15:b9:4a:04:eb:aa:7a:ac:dd:19:74:a2:6d:e7:
43:75:d3:bf:f1:be:98:9f:1d:c3:ce:50:3f:ff:d2:bb:7d:98:
78:7b:6c:b3:9f:62:12:80:a2:89:fa:a7:44:dd:c4:43:c5:ff:
09:6d:5a:5b:5e:84:fc:e8:a2:4e:08:52:42:d7:43:09:b3:26:
ac:de:31:0b:48:75:d9:93:ea:19:96:d1:47:16:87:06:8c:68:
cc:ee:e3:04:43:cc:41:49:9a:90:a9:3c:44:69:0c:7f:62:c1:
ed:95:78:df:ad:1a:29:75:dd:e0:1d:f0:86:43:5e:3e:f2:9d:
b7:9d:99:3d:45:c0:50:b8:2d:d0:84:c0:e8:36:d5:a4:5c:75:
68:51:a3:24:55:09:29:95:50:b0:0a:1c:29:cf:31:2d:46:7b:
f2:da:30:74:a3:01:e7:3c:e2:c1:01:09:2a:33:71:ee:f0:25:
f8:64:b4:e8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 29 12:23:59 2026 by rpki-client