Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/dFd1XG-FidYweeWpVCo7pVE6M1c.roa
File: dFd1XG-FidYweeWpVCo7pVE6M1c.roa (raw, json)
Hash identifier: PJv5lHZ0IczHVu8hINQJwsnfYNCPsUFYz+oHQGO+UeY=
Subject key identifier: 74:57:75:5C:6F:85:89:D6:30:79:E5:A9:54:2A:3B:A5:51:3A:33:57
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019CDC6681FC7D2D2B4A6FE43376DE89B20A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/dFd1XG-FidYweeWpVCo7pVE6M1c.roa
Signing time: Wed 11 Mar 2026 10:17:11 +0000
ROA not before: Wed 11 Mar 2026 10:17:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213861
IP address blocks: 45.137.85.0/24 maxlen: 24
45.149.146.0/24 maxlen: 24
103.114.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:dc:66:81:fc:7d:2d:2b:4a:6f:e4:33:76:de:89:b2:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 11 10:17:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7457755c6f8589d63079e5a9542a3ba5513a3357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d9:70:ce:41:e8:f2:7e:6f:73:4b:56:fb:db:
e2:c2:69:f8:c7:9a:8c:cd:4c:53:36:83:11:39:a0:
b7:45:7c:06:51:d3:15:2d:04:73:25:f0:dc:5f:0f:
39:f3:04:86:76:e3:e4:e1:36:ac:55:a6:59:ec:43:
b9:93:67:75:c9:24:42:03:d5:7f:d3:2b:3c:1c:d4:
fe:55:6a:00:1f:2d:b5:57:12:9a:e9:78:be:fe:e3:
a1:0f:4d:e1:22:c3:4b:97:d0:11:bb:6d:80:b1:c1:
36:ab:67:3c:e2:a9:97:ec:ff:1a:19:b0:b7:6d:5e:
a7:45:c8:90:7c:23:92:fa:43:77:a2:8d:e0:2b:7c:
16:c2:49:d3:a0:d0:1e:42:cf:3a:89:a6:9e:4c:92:
24:2d:6c:2a:82:27:85:3d:c6:cb:f1:c8:e6:9b:eb:
50:12:51:a2:99:41:6f:f5:44:07:3e:34:56:36:94:
4c:2a:0c:e4:a3:2d:74:84:db:b5:da:a1:16:42:92:
c2:d9:0b:01:53:3b:1a:5e:07:f4:fe:83:5e:1e:f8:
62:a0:72:2c:f7:e8:dd:25:66:4a:d8:77:6a:22:7a:
61:a6:cd:b1:ac:88:b9:9e:d2:e3:f9:1c:4e:af:ba:
d2:2e:83:f5:bb:20:67:bd:9d:77:cf:b6:b9:23:78:
14:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:57:75:5C:6F:85:89:D6:30:79:E5:A9:54:2A:3B:A5:51:3A:33:57
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/dFd1XG-FidYweeWpVCo7pVE6M1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.85.0/24
45.149.146.0/24
103.114.40.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:b5:75:ca:4a:03:eb:b2:bf:d0:fd:eb:d6:16:cf:54:b8:c6:
1d:09:a3:d1:b4:a5:3d:bf:e7:0e:35:aa:04:89:66:81:52:68:
60:9d:5a:67:58:be:f2:75:a7:e1:fa:28:77:3e:fe:92:74:1e:
37:fa:a9:3a:4b:da:ed:a5:04:25:c5:c7:02:9f:97:6c:83:20:
93:66:f4:c7:f8:20:85:df:a6:1d:2f:3a:b2:fd:3a:81:91:9b:
5b:74:b4:6e:40:b6:93:f2:01:b1:01:f1:53:0c:cd:8f:47:99:
da:62:7f:91:bc:09:93:c2:71:a5:76:a7:46:86:da:ee:a5:2f:
97:0f:29:42:f5:34:ec:43:fe:bd:cd:35:d8:32:bd:7e:4a:65:
41:33:57:5b:59:4c:9f:9c:5e:50:19:ef:f3:76:0f:8a:b3:68:
c4:54:90:fc:59:79:06:b0:6d:72:e1:3a:30:bc:d6:8f:6a:80:
8a:a1:66:7e:3a:88:d3:d8:fe:f5:c5:39:64:c4:d0:9a:95:88:
9c:72:7c:bc:4c:61:9e:65:2c:98:f3:88:60:f5:f7:52:c2:1e:
89:2a:70:a8:54:65:fa:38:41:2d:ef:9a:d5:00:34:6b:f3:86:
bd:12:44:57:a7:76:6a:3f:93:5c:92:ec:b4:e0:90:bc:85:35:
f2:a8:0e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 11:15:32 2026 by rpki-client