Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TPdWoAawvR4Hl6S_i8VV1dyyL_A.roa
File: TPdWoAawvR4Hl6S_i8VV1dyyL_A.roa (raw, json)
Hash identifier: FnOwO96IixROdWtAbp7/lLhJIBvWDmS0D0CWO9b63mw=
Subject key identifier: 4C:F7:56:A0:06:B0:BD:1E:07:97:A4:BF:8B:C5:55:D5:DC:B2:2F:F0
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019DA62E8A355F1842F9A295061E5006B4E8
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TPdWoAawvR4Hl6S_i8VV1dyyL_A.roa
Signing time: Sun 19 Apr 2026 14:39:20 +0000
ROA not before: Sun 19 Apr 2026 14:39:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207461
IP address blocks: 45.9.119.0/24 maxlen: 24
45.86.247.0/24 maxlen: 24
45.87.240.0/24 maxlen: 24
45.92.168.0/24 maxlen: 24
45.92.169.0/24 maxlen: 24
45.92.170.0/24 maxlen: 24
45.92.171.0/24 maxlen: 24
45.92.247.0/24 maxlen: 24
45.94.36.0/24 maxlen: 24
45.94.37.0/24 maxlen: 24
45.94.38.0/24 maxlen: 24
45.94.39.0/24 maxlen: 24
45.94.46.0/24 maxlen: 24
45.94.47.0/24 maxlen: 24
45.95.98.0/23 maxlen: 23
45.95.99.0/24 maxlen: 24
45.118.249.0/24 maxlen: 24
45.128.24.0/24 maxlen: 24
45.129.124.0/24 maxlen: 24
45.129.125.0/24 maxlen: 24
45.131.213.0/24 maxlen: 24
45.133.209.0/24 maxlen: 24
45.133.210.0/24 maxlen: 24
45.136.175.0/24 maxlen: 24
45.136.228.0/24 maxlen: 24
45.137.42.0/23 maxlen: 23
45.137.60.0/24 maxlen: 24
45.137.62.0/24 maxlen: 24
45.140.14.0/24 maxlen: 24
45.145.12.0/24 maxlen: 24
45.146.88.0/24 maxlen: 24
45.146.181.0/24 maxlen: 24
45.147.28.0/24 maxlen: 24
45.151.101.0/24 maxlen: 24
45.151.102.0/24 maxlen: 24
45.152.198.0/24 maxlen: 24
45.154.56.0/24 maxlen: 24
45.155.70.0/24 maxlen: 24
45.155.71.0/24 maxlen: 24
45.158.196.0/24 maxlen: 24
45.158.199.0/24 maxlen: 24
103.229.28.0/24 maxlen: 24
113.30.153.0/24 maxlen: 24
113.30.155.0/24 maxlen: 24
141.193.20.0/24 maxlen: 24
185.155.200.0/24 maxlen: 24
185.155.203.0/24 maxlen: 24
185.164.56.0/24 maxlen: 24
185.164.57.0/24 maxlen: 24
193.5.65.0/24 maxlen: 24
194.62.67.0/24 maxlen: 24
195.74.90.0/24 maxlen: 24
195.85.194.0/24 maxlen: 24
2a0a:2d06:10::/48 maxlen: 48
2a0a:2d07:e5::/48 maxlen: 48
2a0f:3d86:44::/48 maxlen: 48
2a0f:3d86:100::/48 maxlen: 48
2a0f:3d86:101::/48 maxlen: 48
2a0f:e1c0:37a::/48 maxlen: 48
2a0f:e1c0:a8b9::/48 maxlen: 48
2a13:8c86:120::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 22:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a6:2e:8a:35:5f:18:42:f9:a2:95:06:1e:50:06:b4:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 19 14:39:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4cf756a006b0bd1e0797a4bf8bc555d5dcb22ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f6:02:91:46:64:eb:69:ec:41:b4:0c:8c:21:
d6:c4:39:b7:fe:6f:ea:72:f6:8e:84:1d:1b:74:ff:
be:e7:fa:4a:12:6b:0e:fd:ed:d8:d7:e7:b0:90:5f:
74:c0:9e:1f:f3:c7:5e:8d:a1:f0:6a:bc:34:3d:38:
b8:06:23:39:18:e5:2a:2e:a6:fe:78:c6:e1:00:b1:
d4:3a:cc:47:1b:12:14:99:84:d9:0e:f5:55:56:85:
8f:60:28:05:63:8b:30:04:ce:87:91:6b:1b:dc:aa:
29:ba:05:8b:eb:14:b2:2b:27:d9:b5:7e:28:d0:58:
89:81:51:b6:9f:79:af:c8:a7:8a:9f:ab:fc:0c:6e:
0e:e8:48:cc:df:7b:ed:68:e1:b4:9f:02:92:11:c3:
7e:86:ad:29:6e:4c:2a:5f:3d:c8:6d:90:98:80:ac:
17:ec:6a:9d:54:d7:10:39:0b:5d:d3:f2:25:20:04:
e6:fe:97:dc:0a:44:e1:86:3c:1c:1e:02:f1:2f:c9:
74:47:9b:64:1a:09:5d:67:21:66:44:a9:f9:30:62:
96:d4:7f:bf:1e:93:2f:e9:c1:eb:de:83:d0:a0:7c:
ed:79:3b:37:23:1f:c1:2a:52:36:41:f4:70:08:22:
ea:49:1f:ed:a1:9d:d6:e1:d3:57:0b:92:a7:3a:c9:
cc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F7:56:A0:06:B0:BD:1E:07:97:A4:BF:8B:C5:55:D5:DC:B2:2F:F0
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TPdWoAawvR4Hl6S_i8VV1dyyL_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.119.0/24
45.86.247.0/24
45.87.240.0/24
45.92.168.0/22
45.92.247.0/24
45.94.36.0/22
45.94.46.0/23
45.95.98.0/23
45.118.249.0/24
45.128.24.0/24
45.129.124.0/23
45.131.213.0/24
45.133.209.0-45.133.210.255
45.136.175.0/24
45.136.228.0/24
45.137.42.0/23
45.137.60.0/24
45.137.62.0/24
45.140.14.0/24
45.145.12.0/24
45.146.88.0/24
45.146.181.0/24
45.147.28.0/24
45.151.101.0-45.151.102.255
45.152.198.0/24
45.154.56.0/24
45.155.70.0/23
45.158.196.0/24
45.158.199.0/24
103.229.28.0/24
113.30.153.0/24
113.30.155.0/24
141.193.20.0/24
185.155.200.0/24
185.155.203.0/24
185.164.56.0/23
193.5.65.0/24
194.62.67.0/24
195.74.90.0/24
195.85.194.0/24
IPv6:
2a0a:2d06:10::/48
2a0a:2d07:e5::/48
2a0f:3d86:44::/48
2a0f:3d86:100::/47
2a0f:e1c0:37a::/48
2a0f:e1c0:a8b9::/48
2a13:8c86:120::/48
Signature Algorithm: sha256WithRSAEncryption
c8:44:77:ba:59:95:f2:9c:5b:f5:4c:49:34:15:81:f6:39:cf:
b3:e3:4f:7d:49:0c:57:4f:bf:e6:34:ca:7e:2f:1e:e8:c4:24:
b5:be:ea:82:fa:86:ae:d7:c9:83:7d:e1:9c:23:f9:ee:c8:ea:
98:2f:f4:60:07:f8:4b:d5:8d:87:b2:62:d9:f1:ab:18:8d:e9:
e1:ea:2a:ed:a0:b8:17:d3:83:b6:c1:2c:4c:5b:29:bf:38:ef:
ee:93:eb:1e:fa:d9:69:89:d5:ad:79:0d:71:f1:f9:d9:08:5f:
0c:7f:9e:49:71:4e:23:20:ba:08:ae:bb:44:41:4f:fd:39:e9:
3e:ab:d4:42:3f:c2:90:c6:b8:cd:16:43:8e:ed:0a:fb:0f:06:
e5:81:fb:af:3f:fc:4c:9a:ec:83:17:36:05:a4:22:c6:0e:a4:
a8:aa:2e:e5:f4:00:f9:9d:f0:33:02:6d:d7:33:66:e5:dd:39:
b5:63:48:36:6a:e1:7e:9e:5e:33:ee:66:c8:e3:b2:ba:a5:ab:
3d:bf:9a:b4:51:35:50:d9:c2:2b:76:42:18:99:e1:21:b0:1c:
aa:ae:f7:99:2a:c5:8d:e5:7f:4e:f8:80:9f:bb:1d:7b:6f:2b:
56:56:c9:40:96:c4:85:b5:e6:96:a8:b6:60:70:14:40:26:bb:
a9:a2:27:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 09:25:37 2026 by rpki-client