Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/aFaCqegoRrnKydA7cyJqoPccFkU.roa
File: aFaCqegoRrnKydA7cyJqoPccFkU.roa (raw, json)
Hash identifier: 66PRZ5SHbxOjcubpkfuDH8J7r95URrnfUDHYLH8IxVA=
Subject key identifier: 68:56:82:A9:E8:28:46:B9:CA:C9:D0:3B:73:22:6A:A0:F7:1C:16:45
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019FD14C4DC2D0D9AB3BA2D2A42BEF4C36DE
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/aFaCqegoRrnKydA7cyJqoPccFkU.roa
Signing time: Wed 05 Aug 2026 09:41:06 +0000
ROA not before: Wed 05 Aug 2026 09:41:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219202
IP address blocks: 45.9.118.0/24 maxlen: 24
45.128.78.0/24 maxlen: 24
45.131.212.0/24 maxlen: 24
103.91.147.0/24 maxlen: 24
113.30.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:4c:4d:c2:d0:d9:ab:3b:a2:d2:a4:2b:ef:4c:36:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 5 09:41:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=685682a9e82846b9cac9d03b73226aa0f71c1645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5c:69:92:4a:b4:fe:02:83:3d:6d:77:52:02:
23:17:8c:a7:5d:82:d6:81:71:8e:93:fb:be:aa:7d:
4c:0e:05:db:7c:ff:42:4e:78:3c:53:22:d0:65:63:
27:c7:8b:de:9a:71:a8:2e:f6:80:02:d3:7a:39:29:
e8:3d:47:a7:b6:95:bd:c4:d1:32:f2:5d:52:9d:b1:
41:f4:0a:60:65:1d:16:26:04:9d:d7:0d:31:78:f4:
7e:c6:12:d3:f4:87:9d:82:55:97:a3:b7:ef:d7:db:
8a:84:b9:44:ee:95:6b:6f:4d:f7:f0:f5:f2:fc:59:
40:02:19:76:ab:b6:8f:5f:4c:26:7f:26:b0:70:4b:
e1:e3:e3:e0:d0:80:97:1d:95:cd:f8:ba:36:57:39:
42:1f:26:6c:7f:31:bf:9c:e5:5f:f4:88:4e:aa:3d:
a9:54:01:90:e2:61:2b:89:a4:64:fb:80:cb:3c:c5:
e7:46:a9:01:ff:61:07:ad:6f:58:26:b5:87:8f:d2:
07:36:c4:f5:dd:d5:a9:b2:39:2f:87:3c:41:cf:24:
4f:61:d2:e3:01:b6:a2:72:2c:92:85:03:5d:76:19:
b9:e3:ba:30:43:fc:90:03:32:75:29:da:ff:72:84:
c5:de:ca:c0:cb:7f:9f:04:47:84:0c:2a:a9:6b:94:
fc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:56:82:A9:E8:28:46:B9:CA:C9:D0:3B:73:22:6A:A0:F7:1C:16:45
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/aFaCqegoRrnKydA7cyJqoPccFkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.118.0/24
45.128.78.0/24
45.131.212.0/24
103.91.147.0/24
113.30.154.0/24
Signature Algorithm: sha256WithRSAEncryption
38:a0:1c:64:56:9c:06:78:11:f4:fb:38:36:74:2f:f1:6c:cc:
1c:a0:df:26:2c:14:af:f3:44:46:63:15:87:80:98:fe:fb:5f:
7f:5a:c4:ef:c1:46:1d:37:c8:d2:39:c8:7b:95:c3:9c:12:8c:
d6:01:d2:a0:2e:a7:ad:23:f8:37:19:37:9d:b9:b7:90:38:05:
42:e5:19:fc:82:c7:2a:7f:b9:6e:bc:cd:60:7a:97:85:6a:ad:
9b:51:a1:7b:b3:d2:6f:49:4b:cf:b6:e4:71:db:05:d7:a5:89:
14:ee:4c:aa:05:1b:ab:d8:be:ce:e3:12:fb:83:7f:25:d0:3f:
67:1e:4a:a6:da:b2:a5:93:8a:60:fe:62:85:39:d5:63:8b:ab:
30:de:75:6a:34:b1:9b:98:21:de:72:ab:72:91:35:e1:9b:52:
76:5f:b5:c6:46:32:2a:f8:87:70:f9:b7:ce:a8:eb:aa:21:b4:
84:31:7e:0d:6d:1f:0f:b2:5c:e6:68:94:6c:99:ed:23:9d:dc:
e4:23:41:a7:49:78:10:cc:19:6e:f6:68:2c:ec:4c:06:a2:22:
78:d4:7a:c9:d3:dd:81:35:6a:1d:0b:3d:24:da:08:d4:9b:74:
78:04:75:18:78:2d:56:5d:e8:ba:28:88:16:6e:50:16:5e:d1:
7f:d3:e2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:36 2026 by rpki-client