Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/k21MDSBCXjr1kU7JWttyrkaBSL4.roa
File: k21MDSBCXjr1kU7JWttyrkaBSL4.roa (raw, json)
Hash identifier: UjP41fGOkcksfDNs0sHph4pqvUZamzYi9YEYvCeHZmg=
Subject key identifier: 93:6D:4C:0D:20:42:5E:3A:F5:91:4E:C9:5A:DB:72:AE:46:81:48:BE
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A0586BC528EABEB99260C54071DB678610
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/k21MDSBCXjr1kU7JWttyrkaBSL4.roa
Signing time: Mon 31 Aug 2026 15:24:12 +0000
ROA not before: Mon 31 Aug 2026 15:24:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218897
IP address blocks: 45.95.98.0/24 maxlen: 24
45.95.99.0/24 maxlen: 24
45.139.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:6b:c5:28:ea:be:b9:92:60:c5:40:71:db:67:86:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 31 15:24:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=936d4c0d20425e3af5914ec95adb72ae468148be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b1:78:7d:1b:a9:67:6f:68:3d:91:c4:9b:b3:
5c:72:3e:a3:42:ba:27:b6:b2:24:01:a7:e4:d4:79:
54:59:78:01:e5:47:a3:1a:d9:8e:e6:3c:14:bf:0e:
18:c1:43:71:05:2a:bd:b9:f2:f2:ac:23:8e:fc:21:
85:27:db:6c:07:e3:8a:4b:ed:59:c4:86:30:8e:bb:
0d:79:e6:97:b0:20:f8:98:cb:5e:38:92:c4:6b:b2:
06:4b:47:bb:c8:92:63:fe:14:90:ad:03:c2:5c:62:
09:5e:cd:b1:c5:9a:1b:05:d5:69:c4:d1:8d:00:cf:
39:da:dc:2b:38:53:b0:65:a3:05:72:4b:2c:f2:b4:
2b:03:13:c5:7d:9d:c6:ec:1c:40:67:37:04:32:42:
1d:3c:b9:3f:35:14:3f:2f:67:3b:e7:f6:50:69:33:
f5:8e:2a:8b:90:0f:12:f0:e3:58:48:3e:bb:5f:44:
39:43:34:ed:5b:88:e8:e8:49:49:78:54:89:f9:27:
aa:a1:71:aa:54:0f:17:2b:95:e4:bf:ec:26:76:c4:
19:93:47:c7:36:da:a6:68:ac:00:f2:6f:aa:90:0a:
23:00:bb:1e:87:db:c0:b5:85:55:de:e0:c2:b4:9c:
4f:56:07:24:3d:00:66:a8:16:ee:6d:18:45:f8:97:
1c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:6D:4C:0D:20:42:5E:3A:F5:91:4E:C9:5A:DB:72:AE:46:81:48:BE
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/k21MDSBCXjr1kU7JWttyrkaBSL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.98.0/23
45.139.84.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:d1:a6:bf:3f:73:d5:23:95:d8:e0:07:1f:ca:d4:fa:68:58:
ee:bf:76:d2:de:28:2e:9a:72:81:13:c8:97:3d:9e:b7:8b:f5:
e4:db:c2:44:33:39:bc:49:db:62:cf:51:88:3b:78:de:99:94:
72:9a:60:de:5b:b5:0c:cb:f8:e4:aa:43:52:00:05:69:56:f1:
98:27:e4:9e:c3:71:7c:a9:1c:76:14:80:b1:5b:e8:a2:ea:c5:
bf:f1:3e:9f:bb:7e:dc:59:91:24:ff:36:d2:aa:ef:85:c3:b1:
62:bf:82:e3:29:3e:50:77:bd:ad:03:19:d1:96:6d:4a:42:f9:
1d:40:19:ae:e8:b9:cd:8e:05:cf:c4:0a:cf:19:f6:a0:f9:63:
2c:36:03:a4:1f:6c:57:e9:38:db:ac:22:35:c6:a2:e9:89:ef:
6d:bb:41:4d:f9:fc:e9:51:57:68:da:19:45:33:bd:92:ba:9d:
d7:e0:fe:5f:1e:04:1b:c1:22:9d:66:af:51:37:11:b6:ea:9a:
c7:a0:1c:09:eb:3f:2c:2b:d7:8f:fa:dc:7d:a0:fe:5f:38:18:
20:39:cd:af:4b:36:ee:86:2a:0a:b0:54:8a:88:5d:0c:f2:11:
84:fe:ea:11:56:1f:ef:49:42:2b:79:cc:60:80:59:78:67:26:
52:b1:62:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:36 2026 by rpki-client