Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/c-B_m-ymtyr-4HbTuE1C7hpP3W4.roa
File: c-B_m-ymtyr-4HbTuE1C7hpP3W4.roa (raw, json)
Hash identifier: 5qPVpIS3EOv5cKFFjWE/p+vCQKr2V6PYqagrTdjy0XA=
Subject key identifier: 73:E0:7F:9B:EC:A6:B7:2A:FE:E0:76:D3:B8:4D:42:EE:1A:4F:DD:6E
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019E98653805A81ED387DB5F99F818E59CD1
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/c-B_m-ymtyr-4HbTuE1C7hpP3W4.roa
Signing time: Fri 05 Jun 2026 15:27:10 +0000
ROA not before: Fri 05 Jun 2026 15:27:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199595
IP address blocks: 45.137.40.0/24 maxlen: 24
45.158.187.0/24 maxlen: 24
113.30.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 17:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:98:65:38:05:a8:1e:d3:87:db:5f:99:f8:18:e5:9c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 5 15:27:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73e07f9beca6b72afee076d3b84d42ee1a4fdd6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:40:93:a1:7c:08:8f:a4:32:ad:3d:3e:b5:6b:
8a:81:53:80:a6:0d:76:cf:89:31:05:b6:2b:27:88:
c7:dd:ac:92:08:20:b2:7a:b9:aa:9b:ba:ca:1e:b0:
bb:5b:76:01:62:fa:64:30:1f:10:ac:a3:98:52:7a:
13:eb:a9:83:6f:2e:d0:35:7f:f0:2e:bc:0f:81:01:
fe:3e:80:69:69:84:eb:2d:84:5c:5c:83:91:ea:7e:
54:62:ac:59:d1:22:3f:b5:31:e3:26:3e:95:d0:f8:
44:59:8a:a3:ab:7b:c1:96:e3:a6:83:ae:53:6a:c9:
7a:ac:44:68:3e:49:c4:e8:05:8a:da:fb:ad:16:27:
ac:a7:d0:79:ed:2b:e2:02:84:8f:a0:e0:5b:9c:8a:
42:42:91:9f:e7:3d:62:90:c8:02:a1:f2:ac:bb:19:
72:2d:b9:4e:6f:0e:3c:e3:78:ed:70:c0:e7:dd:22:
8a:11:95:91:0b:fa:d0:28:9c:44:1e:6c:39:2c:d6:
3b:a2:36:e7:58:c7:d0:ec:d6:05:f5:1e:25:d2:de:
0a:12:29:34:b7:5b:54:9f:e6:45:c0:f6:9b:19:34:
3e:1c:d0:4a:a4:ae:55:27:c1:b8:f4:f0:2a:53:73:
7d:d4:4b:4c:59:f4:8b:af:a0:83:78:81:94:f4:82:
a2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E0:7F:9B:EC:A6:B7:2A:FE:E0:76:D3:B8:4D:42:EE:1A:4F:DD:6E
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/c-B_m-ymtyr-4HbTuE1C7hpP3W4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.40.0/24
45.158.187.0/24
113.30.153.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:09:1e:fd:53:17:b9:ef:c4:a7:25:8b:9a:e5:2d:60:71:97:
be:8c:3c:0a:8c:21:40:e3:13:14:b9:3d:52:ad:1b:e5:0b:bc:
14:ed:b7:dd:87:51:ac:1b:73:13:0c:80:e4:ad:94:b3:2d:57:
48:41:eb:2b:ed:f2:7f:10:c4:66:be:d9:81:9b:1e:fc:35:5a:
a4:b1:38:e6:b4:2f:fd:a4:c7:8a:5b:35:85:b5:7a:af:93:b6:
3c:21:0e:fe:15:e8:8a:0e:d4:8d:75:dc:9e:69:dc:70:83:8d:
13:a2:ce:4a:9b:2f:f4:9c:e6:60:56:23:35:1c:2e:ba:f8:53:
70:f8:ec:5e:cd:8c:cd:a1:d8:18:9c:f7:2d:61:14:d0:ae:a0:
87:47:a0:4e:6b:b8:77:e5:50:bb:07:38:fc:52:e8:96:b4:22:
24:1a:82:3b:55:4f:f1:7f:c4:55:28:4f:49:08:c0:b6:9b:a7:
cf:b4:90:72:bd:df:88:2d:d0:39:4a:22:c1:0e:03:58:b1:f4:
97:50:8b:db:e1:71:2a:05:2e:42:25:9d:59:82:2b:03:e8:39:
55:7d:b3:b3:17:9b:ac:1e:83:0b:17:83:0e:73:1e:5a:02:7d:
1b:ca:f2:c9:5e:8c:c5:a7:c3:95:1d:52:ef:45:b9:c4:d4:c5:
40:18:eb:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:27:48 2026 by rpki-client