Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_jz3yrNNNWJ-ghDWWP1BLjSLMZI.roa
File: _jz3yrNNNWJ-ghDWWP1BLjSLMZI.roa (raw, json)
Hash identifier: RWz7Tqi/s0Cf0oSeZDsCmU2K+tyaYBvPpmISMA79IKE=
Subject key identifier: FE:3C:F7:CA:B3:4D:35:62:7E:82:10:D6:58:FD:41:2E:34:8B:31:92
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019FC78345603FC17BF92639ACF2FD7512AE
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_jz3yrNNNWJ-ghDWWP1BLjSLMZI.roa
Signing time: Mon 03 Aug 2026 12:04:56 +0000
ROA not before: Mon 03 Aug 2026 12:04:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142019
IP address blocks: 45.135.39.0/24 maxlen: 24
45.142.28.0/24 maxlen: 24
45.153.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c7:83:45:60:3f:c1:7b:f9:26:39:ac:f2:fd:75:12:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 3 12:04:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe3cf7cab34d35627e8210d658fd412e348b3192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:98:1a:57:5a:7e:80:da:0b:da:69:90:f1:ae:
60:9f:60:69:7c:a0:95:f9:bd:48:fa:dd:2f:4a:dd:
c9:90:74:a2:c9:ed:36:a3:20:fd:0c:ee:01:2d:95:
ee:42:88:18:49:47:a4:01:e2:af:10:9f:46:ea:fc:
9d:a4:83:ae:6c:dc:06:9f:fc:34:1b:7b:46:36:f7:
32:57:42:a6:4d:60:b0:8b:0d:af:5f:21:a6:42:b9:
1f:95:fb:7d:0f:d0:15:65:80:da:85:8f:78:2a:8a:
66:b2:6d:57:2d:f4:f2:c9:e0:c1:69:60:9e:38:60:
34:34:43:ba:7b:e3:49:a5:e7:e2:66:b0:2b:e3:a9:
6e:72:65:f9:a7:43:72:ea:f4:c5:e6:39:4a:26:3a:
18:36:1d:b0:68:3e:73:76:07:09:4b:f9:54:93:ed:
72:d3:86:a1:8b:e2:2f:f3:51:83:a4:f7:95:e8:8f:
1f:61:dd:ff:dc:f1:eb:46:1a:27:bd:54:50:64:0a:
bd:c1:31:fe:93:06:ff:92:9b:e3:a2:1e:ab:a3:03:
59:d4:a6:97:99:88:23:c9:1f:f2:48:56:1d:92:04:
3e:69:6b:b0:bf:97:07:33:88:c8:53:9a:15:af:8f:
43:59:4c:0a:40:e9:73:02:eb:c5:e8:7d:44:57:63:
ad:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3C:F7:CA:B3:4D:35:62:7E:82:10:D6:58:FD:41:2E:34:8B:31:92
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_jz3yrNNNWJ-ghDWWP1BLjSLMZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.39.0/24
45.142.28.0/24
45.153.22.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:ea:75:e5:11:20:55:2e:01:58:5d:ed:31:37:0d:8f:f1:78:
34:c7:fa:20:c1:c6:c3:25:47:83:26:38:68:53:d5:cd:2b:c0:
7a:19:b4:af:e4:fe:cb:59:67:39:bd:42:c9:84:75:80:ab:4c:
4e:ec:74:8b:1d:f9:1d:f7:b1:c2:67:e3:9d:d0:fb:03:57:f5:
12:88:0b:db:e3:b0:ee:14:bb:de:e8:af:10:eb:ce:e7:99:c6:
a6:16:bc:a1:09:94:14:e3:c1:9e:a5:71:5b:63:ef:b1:88:a5:
15:2c:e5:4c:4c:90:a4:19:d6:aa:0e:a2:c9:44:6e:46:b9:3b:
0c:09:a2:f2:34:e9:de:8f:b7:2e:be:31:7f:57:0b:29:71:32:
01:cd:45:b9:54:3f:bc:fd:ac:c4:d7:df:90:e1:45:c4:d2:97:
98:30:81:77:54:69:7a:00:ce:5f:00:c7:13:a5:26:32:89:07:
f5:64:d7:95:5c:02:06:3b:30:04:f5:55:56:dd:5d:14:5d:a0:
87:7c:90:c1:9a:c1:bf:7b:d5:72:ed:58:06:a2:87:90:22:94:
f7:82:7c:ef:ba:db:63:ba:98:2c:2c:09:c1:2a:f1:b4:02:78:
10:1e:b3:e9:e8:5a:e9:98:7e:47:39:b6:6a:19:f8:a0:92:5a:
8a:79:0c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:17:53 2026 by rpki-client