Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/kMF8kEVWcJPecXFIwDzx64ZaHmU.roa
File: kMF8kEVWcJPecXFIwDzx64ZaHmU.roa (raw, json)
Hash identifier: xLn8oG0jUpVIKcBwiXUgnt8tJe2ZLYxi3ewbbOiLjv8=
Subject key identifier: 90:C1:7C:90:45:56:70:93:DE:71:71:48:C0:3C:F1:EB:86:5A:1E:65
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019ECFB8C8F9294DDAB64D4AB80FB74A7188
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/kMF8kEVWcJPecXFIwDzx64ZaHmU.roa
Signing time: Tue 16 Jun 2026 09:17:34 +0000
ROA not before: Tue 16 Jun 2026 09:17:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28753
IP address blocks: 45.130.124.0/24 maxlen: 24
192.166.153.0/24 maxlen: 24
2a04:9f40::/29 maxlen: 29
2a06:1184:101::/48 maxlen: 48
2a06:3bc0::/29 maxlen: 29
2a07:8a40::/29 maxlen: 29
2a09:7b00::/29 maxlen: 29
2a0a:2d06:102::/48 maxlen: 48
2a0a:7d00::/29 maxlen: 29
2a0c:4880::/29 maxlen: 29
2a0c:7886:99::/48 maxlen: 48
2a0f:17c0::/29 maxlen: 29
2a0f:2500::/29 maxlen: 29
2a0f:d200::/29 maxlen: 29
2a0f:db40::/29 maxlen: 29
2a11:8880::/29 maxlen: 29
2a13:1380::/29 maxlen: 29
2a13:18c6:66::/48 maxlen: 48
2a13:2cc0::/29 maxlen: 29
2a13:2d40::/29 maxlen: 29
2a13:2dc0::/29 maxlen: 29
2a13:2e40::/29 maxlen: 29
2a13:3380::/29 maxlen: 29
2a13:4900::/29 maxlen: 29
2a13:5b80::/29 maxlen: 29
2a13:7900::/29 maxlen: 29
2a13:7d80::/29 maxlen: 29
2a13:8200::/29 maxlen: 29
2a13:d100::/29 maxlen: 29
2a13:d700::/29 maxlen: 29
2a13:d900::/29 maxlen: 29
2a13:f900::/29 maxlen: 29
2a13:fb00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:b8:c8:f9:29:4d:da:b6:4d:4a:b8:0f:b7:4a:71:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 16 09:17:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=90c17c9045567093de717148c03cf1eb865a1e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3f:94:2c:5b:9a:13:b4:ed:d5:07:06:e7:3e:
a1:d1:35:82:7e:33:3b:97:54:38:53:41:62:54:d4:
7b:00:6d:a7:64:d6:ea:c0:36:a8:03:62:b8:74:7c:
82:70:58:e4:20:72:fc:3d:3d:c1:49:63:2e:fd:04:
26:43:c8:52:76:8e:2a:c0:61:5f:b2:2d:b2:ea:81:
92:e2:32:f8:17:e0:fc:35:bb:a5:81:42:65:c4:61:
1b:e5:f9:79:ba:1f:ae:58:b1:18:73:a9:27:10:16:
11:fb:3e:6c:db:bc:52:39:57:a0:a3:fe:13:8e:e3:
33:fe:01:3d:ca:e4:ee:88:6e:ee:d1:c5:18:d9:1f:
f6:6c:19:5d:9c:7e:ba:5e:58:da:da:1a:e5:c7:c7:
4b:aa:da:23:6c:fd:8a:0a:08:56:10:75:31:63:70:
da:7d:b5:c7:d4:2b:df:00:df:ff:da:b2:4b:97:ca:
55:6a:71:15:f5:99:4e:b1:3e:b3:4a:cf:da:9a:96:
dd:a6:b9:4a:22:67:52:d6:ec:9b:1d:25:fb:95:46:
09:5e:8f:67:0a:f8:4d:9f:59:87:8d:de:37:a6:17:
be:b3:0e:56:cc:94:8d:4e:5f:42:e6:3e:e7:0f:11:
cf:ed:22:b6:3a:fb:94:50:c3:83:83:0a:6d:d1:07:
20:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C1:7C:90:45:56:70:93:DE:71:71:48:C0:3C:F1:EB:86:5A:1E:65
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/kMF8kEVWcJPecXFIwDzx64ZaHmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.124.0/24
192.166.153.0/24
IPv6:
2a04:9f40::/29
2a06:1184:101::/48
2a06:3bc0::/29
2a07:8a40::/29
2a09:7b00::/29
2a0a:2d06:102::/48
2a0a:7d00::/29
2a0c:4880::/29
2a0c:7886:99::/48
2a0f:17c0::/29
2a0f:2500::/29
2a0f:d200::/29
2a0f:db40::/29
2a11:8880::/29
2a13:1380::/29
2a13:18c6:66::/48
2a13:2cc0::/29
2a13:2d40::/29
2a13:2dc0::/29
2a13:2e40::/29
2a13:3380::/29
2a13:4900::/29
2a13:5b80::/29
2a13:7900::/29
2a13:7d80::/29
2a13:8200::/29
2a13:d100::/29
2a13:d700::/29
2a13:d900::/29
2a13:f900::/29
2a13:fb00::/29
Signature Algorithm: sha256WithRSAEncryption
a4:3a:3b:fa:a8:67:bc:dd:6e:93:e1:f8:c6:68:fa:d4:89:42:
1e:f4:54:bc:2f:77:3f:0e:ec:23:80:4c:c5:9c:90:cb:a4:7c:
fa:9f:7a:4d:85:88:fd:d3:41:d2:79:32:b1:e5:ae:d4:d1:19:
3d:f7:df:1b:7f:d2:34:a3:c0:6d:2e:1f:a7:91:9b:9d:c0:83:
cd:0b:9a:9f:08:9b:9f:19:be:a3:03:63:6f:11:e4:c0:2d:b8:
13:1b:1f:a0:fc:1d:45:3b:ac:25:23:0a:76:65:9c:45:eb:8a:
9f:59:50:6b:bd:97:5b:fe:39:86:54:9f:48:7f:3c:d4:db:5d:
9e:36:ac:a3:a0:17:63:d9:48:20:54:9b:9c:2d:f7:d4:2b:bc:
bd:bd:3d:43:07:d0:55:8a:2c:3d:9d:d9:b0:76:24:68:f5:1a:
c6:69:7a:7c:25:8c:40:e5:0a:99:95:73:44:83:82:27:85:b4:
1f:54:af:8e:24:f0:2a:f8:31:c2:30:61:3c:47:f0:ad:14:ca:
ce:4a:81:bf:b7:92:8b:e0:e3:ab:14:d0:db:26:24:1c:1a:f7:
cb:92:cf:66:d9:d1:fb:e6:fa:49:25:8b:a9:8d:22:0d:61:43:
87:93:a5:93:77:a8:49:e7:a5:42:9f:fd:83:bb:94:e3:56:a1:
ab:73:04:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 21:32:33 2026 by rpki-client