Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ccD8fGCO_nRYSgauY-cFLkU05yk.roa
File: ccD8fGCO_nRYSgauY-cFLkU05yk.roa (raw, json)
Hash identifier: Kl53V6qLvr0J0DXmQ5BLWMNSfu1/UOQ2LlmYhjvnTEA=
Subject key identifier: 71:C0:FC:7C:60:8E:FE:74:58:4A:06:AE:63:E7:05:2E:45:34:E7:29
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019FB7F4B831E4EE588904121B09920E565B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ccD8fGCO_nRYSgauY-cFLkU05yk.roa
Signing time: Fri 31 Jul 2026 11:34:56 +0000
ROA not before: Fri 31 Jul 2026 11:34:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 133847
IP address blocks: 45.86.244.0/24 maxlen: 24
45.95.97.0/24 maxlen: 24
45.130.128.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:19:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b7:f4:b8:31:e4:ee:58:89:04:12:1b:09:92:0e:56:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 31 11:34:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71c0fc7c608efe74584a06ae63e7052e4534e729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ac:9c:eb:60:3f:58:48:d4:1b:cb:a0:5e:52:
3a:b0:f4:1e:d2:21:20:c4:05:d3:f8:64:a6:db:2a:
a1:35:e8:84:bf:4b:25:03:19:47:d4:0b:9f:36:33:
69:f5:af:69:c7:bb:1b:3f:57:c5:1d:09:1c:97:06:
4e:eb:61:d9:11:f3:c8:f1:19:09:18:99:ce:3b:66:
67:f6:8d:c8:ca:b8:27:70:1c:cf:c1:b1:01:34:ac:
99:43:64:6b:ef:e3:6a:47:da:e6:15:ab:c3:df:6f:
07:e5:18:0d:c8:ce:fb:bd:a6:c5:d7:df:95:8d:41:
b1:d7:0a:d4:6e:02:46:71:1a:93:16:e7:fa:7b:b1:
36:d3:2b:d3:77:0f:57:78:30:39:40:d2:7e:ae:98:
42:61:9d:7e:e3:66:34:d2:85:7d:89:74:7b:f4:d9:
33:91:80:dd:98:eb:2a:a6:9b:67:ca:90:f5:b1:63:
c6:26:ab:2e:bd:e0:a6:8b:28:bf:9d:9b:1f:38:2b:
76:b7:12:98:6d:50:af:0d:41:1c:d8:11:00:3f:92:
92:3e:93:74:9b:d1:c4:99:37:96:31:35:aa:4f:92:
20:5b:a9:e1:ff:d6:0d:96:84:5c:21:6d:38:16:dd:
55:18:6b:95:ad:96:95:50:c3:ba:23:9e:77:10:88:
c3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C0:FC:7C:60:8E:FE:74:58:4A:06:AE:63:E7:05:2E:45:34:E7:29
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ccD8fGCO_nRYSgauY-cFLkU05yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.244.0/24
45.95.97.0/24
45.130.128.0/24
185.164.59.0/24
Signature Algorithm: sha256WithRSAEncryption
97:0e:e5:23:1f:8a:3a:83:c6:56:25:f1:ec:ce:01:d8:5a:77:
2a:8d:be:de:74:78:69:e7:a5:92:dd:97:2d:c7:62:b2:45:27:
c8:48:15:5d:ea:ef:f3:d3:68:09:32:34:9e:bf:6a:81:67:9f:
f7:7e:42:fe:ad:db:5d:28:07:49:65:86:b9:21:cb:db:b6:39:
4e:b8:45:3b:c1:e6:82:78:01:2b:0a:c8:f6:24:42:5b:43:0d:
ab:9b:e0:0e:8d:46:4e:41:8d:53:31:66:4a:6f:8b:a0:09:8b:
6e:49:28:75:54:f0:89:b9:f4:11:7c:51:30:bd:9b:bf:7d:8b:
f5:40:dc:5d:78:a1:c3:f3:6b:20:1e:f7:41:2f:80:c4:85:be:
06:93:69:07:c2:a3:a3:b4:3b:05:3d:cc:1c:b5:b7:dd:5f:f6:
e8:8e:c3:8e:02:5c:cf:46:78:bb:a0:e6:41:3c:33:bb:a4:7e:
54:03:8b:42:8a:a2:c6:44:7b:d4:75:0a:d6:71:6a:e0:df:b4:
86:f2:36:d2:6a:07:e4:c8:cc:28:d4:54:b6:e2:21:d1:55:5e:
a9:c2:d6:bb:4e:ac:ee:c0:be:1f:46:2d:a2:14:3a:01:43:79:
53:c8:e0:1b:01:bf:33:b6:7b:94:4a:97:8f:7c:dc:ff:a9:43:
c9:a3:8d:53
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ+39Lgx5O5YiQQSGwmSDlZbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYwNzMxMTEzNDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MWMwZmM3YzYwOGVmZTc0NTg0YTA2YWU2M2U3MDUyZTQ1MzRlNzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKyc62A/WEjUG8ugXlI6sPQe0iEg
xAXT+GSm2yqhNeiEv0slAxlH1AufNjNp9a9px7sbP1fFHQkclwZO62HZEfPI8RkJ
GJnOO2Zn9o3IyrgncBzPwbEBNKyZQ2Rr7+NqR9rmFavD328H5RgNyM77vabF19+V
jUGx1wrUbgJGcRqTFuf6e7E20yvTdw9XeDA5QNJ+rphCYZ1+42Y00oV9iXR79Nkz
kYDdmOsqpptnypD1sWPGJqsuveCmiyi/nZsfOCt2txKYbVCvDUEc2BEAP5KSPpN0
m9HEmTeWMTWqT5IgW6nh/9YNloRcIW04Ft1VGGuVrZaVUMO6I553EIjDhQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFHHA/Hxgjv50WEoGrmPnBS5FNOcpMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvY2NEOGZHQ09fblJZU2dhdVktY0ZMa1UwNXlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALVb0AwQA
LV9hAwQALYKAAwQAuaQ7MA0GCSqGSIb3DQEBCwUAA4IBAQCXDuUjH4o6g8ZWJfHs
zgHYWncqjb7edHhp56WS3Zctx2KyRSfISBVd6u/z02gJMjSev2qBZ5/3fkL+rdtd
KAdJZYa5IcvbtjlOuEU7weaCeAErCsj2JEJbQw2rm+AOjUZOQY1TMWZKb4ugCYtu
SSh1VPCJufQRfFEwvZu/fYv1QNxdeKHD82sgHvdBL4DEhb4Gk2kHwqOjtDsFPcwc
tbfdX/bojsOOAlzPRni7oOZBPDO7pH5UA4tCiqLGRHvUdQrWcWrg37SG8jbSagfk
yMwo1FS24iHRVV6pwta7TqzuwL4fRi2iFDoBQ3lTyOAbAb8ztnuUSpePfNz/qUPJ
o41T
-----END CERTIFICATE-----
Generated at Tue Sep 1 03:00:51 2026 by rpki-client