Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Z46Z8hM2GCKxI70GQ9qUh6ZSmTk.roa
File: Z46Z8hM2GCKxI70GQ9qUh6ZSmTk.roa (raw, json)
Hash identifier: 1iZeTdExNEyPf37HM/hVLrnCWU+onkCPM8rXj5DRRgA=
Subject key identifier: 67:8E:99:F2:13:36:18:22:B1:23:BD:06:43:DA:94:87:A6:52:99:39
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019E6FEC730474D00A24B9A6B13ECEAB3151
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Z46Z8hM2GCKxI70GQ9qUh6ZSmTk.roa
Signing time: Thu 28 May 2026 18:50:27 +0000
ROA not before: Thu 28 May 2026 18:50:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28753
IP address blocks: 45.130.124.0/24 maxlen: 24
192.166.153.0/24 maxlen: 24
2a04:9f40::/29 maxlen: 29
2a06:1184:101::/48 maxlen: 48
2a06:3bc0::/29 maxlen: 29
2a07:8a40::/29 maxlen: 29
2a09:7b00::/29 maxlen: 29
2a0a:2d06:102::/48 maxlen: 48
2a0a:7d00::/29 maxlen: 29
2a0c:4880::/29 maxlen: 29
2a0c:7886:99::/48 maxlen: 48
2a0e:15c7:99::/48 maxlen: 48
2a0f:17c0::/29 maxlen: 29
2a0f:2500::/29 maxlen: 29
2a0f:d200::/29 maxlen: 29
2a0f:db40::/29 maxlen: 29
2a11:8880::/29 maxlen: 29
2a13:1380::/29 maxlen: 29
2a13:18c6:66::/48 maxlen: 48
2a13:2cc0::/29 maxlen: 29
2a13:2d40::/29 maxlen: 29
2a13:2dc0::/29 maxlen: 29
2a13:2e40::/29 maxlen: 29
2a13:3380::/29 maxlen: 29
2a13:4900::/29 maxlen: 29
2a13:5b80::/29 maxlen: 29
2a13:7900::/29 maxlen: 29
2a13:7d80::/29 maxlen: 29
2a13:8200::/29 maxlen: 29
2a13:d100::/29 maxlen: 29
2a13:d700::/29 maxlen: 29
2a13:d900::/29 maxlen: 29
2a13:f900::/29 maxlen: 29
2a13:fb00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 17:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6f:ec:73:04:74:d0:0a:24:b9:a6:b1:3e:ce:ab:31:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 28 18:50:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=678e99f213361822b123bd0643da9487a6529939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7b:f9:37:d6:95:ac:c2:d7:b9:7e:48:b3:e4:
ec:75:79:bd:c0:4b:5d:a1:ff:8a:12:01:c4:c7:65:
00:d4:7e:d2:b0:cc:0d:a9:f9:f5:df:c7:0f:7d:20:
36:d0:fb:bf:23:54:82:1e:11:fb:ee:b7:de:34:20:
22:02:fa:c5:81:da:7d:d6:0e:3a:ae:a0:c3:f6:0b:
27:ec:38:b3:39:6c:dc:6f:a3:09:9d:94:21:7a:da:
a4:37:fc:c0:12:33:6d:18:d4:d1:37:cf:ed:df:e5:
4d:52:4d:1b:a9:b1:56:de:6e:82:a6:90:5e:0d:37:
9d:67:2b:70:bf:00:d9:a4:bb:0f:94:05:20:ea:6d:
2a:19:37:83:0a:3f:b8:52:c4:c8:68:17:63:a8:d4:
66:67:36:84:a1:f1:4b:77:d4:19:1e:05:5d:9a:30:
24:02:5d:95:11:f3:25:9c:1f:c2:e2:0e:af:22:94:
51:69:63:f9:ec:65:52:8a:82:ff:35:66:ab:a1:f7:
3c:55:a6:13:d8:f2:6c:d9:91:06:ca:8c:95:4c:61:
2b:2e:fb:a2:f4:10:59:71:4c:c2:b5:26:dd:6b:8f:
0c:41:c9:43:6b:45:37:e9:66:d8:9b:a4:a1:d0:b0:
2f:cc:73:60:a5:e6:e8:78:82:ad:27:62:cb:57:4e:
91:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8E:99:F2:13:36:18:22:B1:23:BD:06:43:DA:94:87:A6:52:99:39
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Z46Z8hM2GCKxI70GQ9qUh6ZSmTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.124.0/24
192.166.153.0/24
IPv6:
2a04:9f40::/29
2a06:1184:101::/48
2a06:3bc0::/29
2a07:8a40::/29
2a09:7b00::/29
2a0a:2d06:102::/48
2a0a:7d00::/29
2a0c:4880::/29
2a0c:7886:99::/48
2a0e:15c7:99::/48
2a0f:17c0::/29
2a0f:2500::/29
2a0f:d200::/29
2a0f:db40::/29
2a11:8880::/29
2a13:1380::/29
2a13:18c6:66::/48
2a13:2cc0::/29
2a13:2d40::/29
2a13:2dc0::/29
2a13:2e40::/29
2a13:3380::/29
2a13:4900::/29
2a13:5b80::/29
2a13:7900::/29
2a13:7d80::/29
2a13:8200::/29
2a13:d100::/29
2a13:d700::/29
2a13:d900::/29
2a13:f900::/29
2a13:fb00::/29
Signature Algorithm: sha256WithRSAEncryption
29:79:b4:77:56:3a:5d:10:7a:ca:2c:f4:d3:05:ef:57:5e:fe:
0c:5d:4c:99:04:5c:be:db:1e:2f:3b:f9:85:ea:2b:8f:13:cd:
36:58:31:31:8d:20:bc:19:5a:0c:be:33:4b:fc:61:0c:84:df:
00:74:97:c1:43:79:bd:34:27:45:55:9b:b6:1a:f4:c4:42:a8:
e1:7a:9e:2d:ff:f8:50:93:e9:71:ed:06:c6:70:57:4d:de:1f:
bc:a7:30:a4:c0:f6:56:88:54:3d:d9:1c:57:57:74:eb:0f:ff:
0d:76:79:4a:b3:3d:f2:2b:e3:0a:c7:52:b9:82:d4:da:42:da:
10:6d:1b:9c:93:92:f5:25:6b:e3:7e:70:ba:e9:2b:cf:2d:03:
d7:80:92:43:42:c0:2c:74:4a:4f:bd:2c:22:05:34:0c:8d:01:
d2:c9:09:b1:3c:9c:b9:98:08:c8:c8:28:a6:d4:1a:96:20:98:
32:9b:53:ca:42:7d:80:96:22:2c:ba:0a:94:bd:4d:03:6c:b3:
12:4e:41:63:9a:12:29:a9:67:8a:b4:72:5b:a3:cc:e5:d7:ed:
0a:6a:4a:98:c2:e6:69:a4:f7:43:b0:2c:8b:c3:34:7e:09:3e:
cd:a9:80:92:a5:4d:0d:ae:3f:ca:43:13:0e:11:72:5d:b4:22:
1c:58:8d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:29:10 2026 by rpki-client