Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/jkavzZC87pYOLXJJTobh1v0rxKM.roa
File: jkavzZC87pYOLXJJTobh1v0rxKM.roa (raw, json)
Hash identifier: VUoT1pqEwPhDr4SEgipVNmHG+FfFc5AUjtsE1VDNydU=
Subject key identifier: 8E:46:AF:CD:90:BC:EE:96:0E:2D:72:49:4E:86:E1:D6:FD:2B:C4:A3
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A067D8DDB0A428D94F8EF7B96CF3776FA4
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/jkavzZC87pYOLXJJTobh1v0rxKM.roa
Signing time: Thu 03 Sep 2026 15:17:40 +0000
ROA not before: Thu 03 Sep 2026 15:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 45.128.76.0/24 maxlen: 24
45.130.125.0/24 maxlen: 24
45.146.130.0/24 maxlen: 24
45.148.100.0/24 maxlen: 24
45.152.208.0/24 maxlen: 24
45.154.56.0/24 maxlen: 24
193.8.231.0/24 maxlen: 24
195.85.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:d8:dd:b0:a4:28:d9:4f:8e:f7:b9:6c:f3:77:6f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 3 15:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e46afcd90bcee960e2d72494e86e1d6fd2bc4a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4b:fd:c3:78:24:b3:b4:f7:30:2c:64:4d:98:
68:c4:b6:3f:12:9e:a3:e3:2d:e3:74:2a:b8:70:3e:
10:f0:17:33:b5:a3:bb:bc:7b:68:1b:f7:df:a7:a9:
3d:c0:1d:c7:83:c6:55:25:51:72:81:e1:13:13:2d:
15:1c:a0:80:1c:ef:76:c3:47:7d:5e:bd:6d:96:28:
f3:1c:a7:04:70:d9:b8:b1:c7:b0:5a:7c:92:ca:f3:
49:e2:af:0d:93:a0:54:5b:76:8c:af:96:88:e8:21:
ab:50:16:55:6e:30:3d:e7:5b:7a:13:68:2a:a4:8a:
2e:8e:8f:9d:3a:64:32:6f:dc:c4:86:f1:2e:b7:a8:
36:51:a0:5a:da:0a:ff:7a:31:d1:8f:0a:ec:f1:e4:
d9:c6:48:1a:8e:ef:7e:50:f9:26:c0:3c:a7:79:b6:
a6:76:a8:94:6f:71:ab:1d:64:e9:e2:de:13:52:21:
60:cc:4d:c5:79:44:ed:b4:fa:96:68:a0:a0:26:88:
c1:02:49:38:27:e6:2e:5e:59:25:5f:4c:e6:9d:f8:
5c:f6:08:6c:a8:72:e4:4d:e6:8f:f6:05:a5:04:27:
e8:b1:4a:f5:68:6b:b4:24:75:45:74:99:ed:c4:cb:
01:c1:ca:96:1c:40:c5:52:d6:af:b5:d5:ba:53:4d:
c8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:46:AF:CD:90:BC:EE:96:0E:2D:72:49:4E:86:E1:D6:FD:2B:C4:A3
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/jkavzZC87pYOLXJJTobh1v0rxKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.76.0/24
45.130.125.0/24
45.146.130.0/24
45.148.100.0/24
45.152.208.0/24
45.154.56.0/24
193.8.231.0/24
195.85.194.0/24
Signature Algorithm: sha256WithRSAEncryption
44:e5:ec:1e:22:44:4e:ee:7b:13:fc:33:f8:bd:b1:bd:68:6f:
5d:bc:32:01:ad:74:e3:47:98:55:8a:cd:82:b7:85:77:73:e9:
ca:1b:5a:cf:56:59:82:da:5d:0b:49:d7:85:6e:48:33:ec:42:
ff:6a:33:b3:49:fa:f2:6e:01:cb:b6:c5:c7:9d:31:71:5a:b0:
30:f3:33:32:30:7f:e8:1b:1b:33:7d:bd:67:8d:88:1a:29:67:
22:97:49:fa:43:f4:dd:07:e3:4f:ac:ce:51:3e:a4:61:0d:a2:
d6:22:8d:8b:6a:70:0b:33:ea:4d:44:2e:65:16:ef:9c:8c:91:
c4:fe:da:f2:cd:ca:08:d6:ab:10:18:1d:e4:ee:6a:e3:78:14:
8b:30:c5:db:de:f0:ff:3d:27:32:69:df:ab:ea:c3:5c:eb:28:
af:86:09:9a:ce:fb:40:05:52:df:4e:4a:fd:b9:ce:85:e6:96:
f1:55:81:8e:f3:2a:6c:f8:04:bc:2a:dc:99:c6:c4:a9:21:eb:
0d:f7:b6:84:ee:8c:ce:ec:f3:6f:44:fb:a2:40:27:55:5b:70:
9b:22:41:4b:53:ca:98:9b:51:d6:d9:ac:64:b2:39:fc:4a:7e:
cd:cd:0a:74:4a:78:7d:7a:9e:83:ef:15:1f:21:5a:e1:d6:12:
07:38:31:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:21:43 2026 by rpki-client