Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/T-rhH2jHGlrmqkNkTblLUQ2gq_8.roa
File: T-rhH2jHGlrmqkNkTblLUQ2gq_8.roa (raw, json)
Hash identifier: jJIQhxvY66HpbRl54YneoolNQ2CTF05tJafeGBPyqRk=
Subject key identifier: 4F:EA:E1:1F:68:C7:1A:5A:E6:AA:43:64:4D:B9:4B:51:0D:A0:AB:FF
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019E4BECE68D1943DCF1CDC0A67B64AA9BF7
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/T-rhH2jHGlrmqkNkTblLUQ2gq_8.roa
Signing time: Thu 21 May 2026 19:04:37 +0000
ROA not before: Thu 21 May 2026 19:04:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200823
IP address blocks: 45.12.62.0/24 maxlen: 24
45.131.214.0/24 maxlen: 24
45.151.106.0/24 maxlen: 24
93.190.247.0/24 maxlen: 24
103.227.84.0/24 maxlen: 24
194.33.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 17:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4b:ec:e6:8d:19:43:dc:f1:cd:c0:a6:7b:64:aa:9b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 21 19:04:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4feae11f68c71a5ae6aa43644db94b510da0abff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b3:4d:1d:9a:44:7d:c0:87:d4:27:96:85:76:
43:32:a1:78:66:44:bb:14:17:2b:ba:b8:f1:cf:89:
fa:86:32:a0:9c:a4:30:98:ba:f7:d8:49:8a:1e:65:
13:6d:8b:0d:37:b8:38:18:1e:22:0a:0d:ae:d1:dd:
30:43:d7:30:e3:69:7f:92:cb:75:bb:72:32:0e:b1:
42:8b:62:a9:71:50:c8:c0:13:0b:8d:d8:ad:23:33:
f6:83:41:a0:89:37:10:aa:83:1c:43:30:7b:ce:f1:
e8:de:e7:4d:7a:9e:0e:5e:20:90:0f:47:45:c1:3c:
ef:58:42:12:a3:37:e2:8a:bf:d6:66:6c:36:6e:68:
e6:15:0e:71:06:9e:43:49:8b:5c:53:05:fc:00:fb:
53:66:6f:64:0f:60:6f:c2:65:99:8d:b9:95:ca:34:
3e:3a:35:0d:b0:0e:23:f8:87:16:8d:a8:60:f6:fb:
1c:e3:48:8e:f7:a3:57:51:22:5e:d0:31:98:35:80:
e1:f3:7b:d8:bb:7a:99:c7:cf:76:d4:57:bd:57:ec:
53:f3:0e:2e:96:84:6c:54:45:6c:c5:30:86:06:5f:
61:56:4e:de:8b:47:2a:61:fb:92:56:17:f9:7b:3e:
ec:f7:7b:d9:56:4c:ad:7d:eb:37:97:4b:10:85:30:
eb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:EA:E1:1F:68:C7:1A:5A:E6:AA:43:64:4D:B9:4B:51:0D:A0:AB:FF
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/T-rhH2jHGlrmqkNkTblLUQ2gq_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.62.0/24
45.131.214.0/24
45.151.106.0/24
93.190.247.0/24
103.227.84.0/24
194.33.61.0/24
Signature Algorithm: sha256WithRSAEncryption
86:a1:35:de:ed:fb:ac:49:03:d3:5c:8b:b9:eb:fb:bb:28:a6:
9f:da:b0:c5:65:7f:be:a5:d0:28:7f:0a:40:34:6c:e7:f4:1c:
ec:ec:dc:3a:65:25:e0:03:e4:b0:a5:3d:b7:69:f8:e7:94:a7:
5f:3d:93:ef:e6:4a:71:bb:72:ff:71:1a:a3:50:51:5d:89:25:
7e:44:08:c4:5c:89:ac:e1:0a:ef:5b:8d:47:db:a4:7b:af:3b:
a6:46:ec:bc:97:45:30:c8:a4:d3:45:50:21:47:4f:01:2f:a9:
cd:29:72:c2:d2:7b:24:fc:5b:e4:1f:7d:2e:9c:9b:0c:79:e1:
07:65:d9:a7:13:90:1c:1e:b7:7c:7e:5a:92:1b:56:27:97:c4:
3f:0f:39:10:5a:fb:fe:72:c2:bd:b0:94:cb:07:8e:2a:ad:ea:
4a:b0:b7:7c:2c:b8:76:97:2a:72:a4:79:7c:99:ad:c6:37:f7:
bf:cc:06:ba:ae:c1:c5:2d:0f:df:f6:1d:79:dd:da:1a:9b:69:
2b:0f:55:d7:af:a0:f3:02:da:06:fd:d8:be:cb:cf:55:c0:f2:
a0:45:2c:fa:00:40:b1:0d:dd:02:b5:fd:a6:9e:9b:37:ef:c4:
54:d7:69:20:b0:15:f4:a8:ea:3d:d2:19:24:28:81:8b:fe:54:
91:c5:cd:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:29:09 2026 by rpki-client