Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/b2unWcbTogeWOIe7ebfkUXDaizg.roa
File: b2unWcbTogeWOIe7ebfkUXDaizg.roa (raw, json)
Hash identifier: gyGxrRADZYOg0Ir2tHOEiOjUCoKbZf3/xuRI+rVyul0=
Subject key identifier: 6F:6B:A7:59:C6:D3:A2:07:96:38:87:BB:79:B7:E4:51:70:DA:8B:38
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019F1EF3885108C55C3602B0B6CC17719B5F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/b2unWcbTogeWOIe7ebfkUXDaizg.roa
Signing time: Wed 01 Jul 2026 18:31:44 +0000
ROA not before: Wed 01 Jul 2026 18:31:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 133847
IP address blocks: 45.86.244.0/24 maxlen: 24
45.95.97.0/24 maxlen: 24
45.130.128.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1e:f3:88:51:08:c5:5c:36:02:b0:b6:cc:17:71:9b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 1 18:31:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f6ba759c6d3a207963887bb79b7e45170da8b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b3:92:1e:61:e7:b9:ea:ea:80:78:a9:56:2e:
a3:c5:c9:12:25:78:9a:65:8a:37:cc:24:f3:53:91:
f4:6b:7c:c3:e2:9a:2f:5d:8d:33:9f:e7:8b:fe:63:
9b:9d:b1:69:9a:9e:a4:a2:b7:00:e0:83:9d:fa:ac:
39:37:d1:37:97:dc:d0:d6:dc:51:a6:63:49:d1:eb:
a6:02:67:92:95:a9:19:8c:5e:00:44:5a:25:d3:3f:
39:54:76:1a:a0:52:1b:40:ae:59:3d:41:2f:c2:44:
db:18:56:b9:23:72:28:8a:8b:30:bc:64:3e:b2:9c:
c0:d8:54:2c:fe:7b:42:bc:ba:fb:3c:f5:b3:e6:e0:
8b:12:18:fd:e5:c7:c8:79:1a:ff:5e:fa:fa:05:75:
29:c3:6b:4c:ac:65:a2:04:91:e8:44:41:97:e8:6c:
9b:e9:92:73:71:f2:3b:0d:e3:7f:f1:e7:14:dd:3a:
d3:7d:af:dc:b8:a5:5d:65:fc:86:2b:6a:11:5a:69:
8b:fd:46:ff:11:25:fd:4e:cc:76:26:09:95:66:d4:
3b:48:1c:20:b2:cd:dd:31:1c:28:f6:0f:27:96:60:
f7:d4:25:47:6b:6c:c2:4e:aa:1b:b8:98:fe:ab:bb:
5e:eb:d0:aa:f2:3b:a8:77:d1:91:ac:67:33:0d:77:
61:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6B:A7:59:C6:D3:A2:07:96:38:87:BB:79:B7:E4:51:70:DA:8B:38
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/b2unWcbTogeWOIe7ebfkUXDaizg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.244.0/24
45.95.97.0/24
45.130.128.0/24
185.164.59.0/24
Signature Algorithm: sha256WithRSAEncryption
75:d1:2e:36:c6:e7:68:35:d7:0f:4e:0c:11:58:7b:4e:17:19:
52:5d:b6:cd:5b:fb:56:72:13:1c:6f:6c:6b:fa:c6:af:e0:31:
d6:d2:54:6a:9f:0d:25:bc:1e:e8:3a:fc:31:de:df:6e:e2:23:
02:33:ac:6b:80:8f:c3:11:5d:72:e7:3a:97:ec:72:52:3f:65:
a3:7e:42:a9:e3:74:89:64:70:7c:73:62:aa:59:4f:f9:71:47:
66:e2:37:bd:ed:07:20:9c:0a:6c:a5:22:86:9f:bd:a2:aa:03:
f4:e6:59:57:84:58:19:3e:71:d9:4e:99:7b:66:c2:a4:8a:5b:
dc:8e:b7:73:51:5f:dc:ba:3e:8d:55:a5:f8:d5:39:94:28:ff:
88:5c:a9:36:d4:4e:a2:f7:1c:e4:9b:a6:ab:21:f3:f5:1f:81:
b3:18:8a:f9:19:d3:1e:fd:8c:3b:f7:d7:25:c6:1b:73:cf:79:
ca:1c:fe:4d:a0:0e:fc:5e:f0:2c:fe:47:6b:1f:38:06:84:c3:
e2:ad:86:5b:2a:55:83:71:1c:fe:8e:79:ea:78:5f:6d:8a:c7:
3d:8e:13:c3:1e:9f:72:57:ea:54:63:36:84:08:49:66:44:c1:
ee:5f:c3:34:72:d0:12:36:b3:86:99:2a:e5:63:46:45:c8:7e:
41:77:77:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:53 2026 by rpki-client