Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mG7rIZT2rR9LkBmS_0ptFOljYWk.roa
File: mG7rIZT2rR9LkBmS_0ptFOljYWk.roa (raw, json)
Hash identifier: CJ81vAkIS7uZ5ZMuh4ft9AqfIsgdRdaxgUliN4RB5oE=
Subject key identifier: 98:6E:EB:21:94:F6:AD:1F:4B:90:19:92:FF:4A:6D:14:E9:63:61:69
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A11FD16F67B1FAE403BA64B1C003AB1013
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mG7rIZT2rR9LkBmS_0ptFOljYWk.roa
Signing time: Fri 09 Oct 2026 08:39:41 +0000
ROA not before: Fri 09 Oct 2026 08:39:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26666
IP address blocks: 45.128.244.0/24 maxlen: 24
45.128.245.0/24 maxlen: 24
45.128.246.0/24 maxlen: 24
45.128.247.0/24 maxlen: 24
45.130.255.0/24 maxlen: 24
45.136.172.0/24 maxlen: 24
45.136.173.0/24 maxlen: 24
45.137.63.0/24 maxlen: 24
193.23.253.0/24 maxlen: 24
193.27.10.0/24 maxlen: 24
194.33.29.0/24 maxlen: 24
194.62.31.0/24 maxlen: 24
2a0f:35c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:d1:6f:67:b1:fa:e4:03:ba:64:b1:c0:03:ab:10:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 9 08:39:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=986eeb2194f6ad1f4b901992ff4a6d14e9636169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:35:fa:27:44:ac:a6:6f:c3:af:24:88:51:fe:
8d:65:50:0b:bc:d7:f1:8f:0a:23:b3:a4:e1:36:e1:
05:74:14:3b:9a:8a:15:62:47:c5:57:19:41:06:ee:
05:77:db:00:d8:37:fc:93:52:e3:ea:f5:b0:2a:df:
bf:3f:75:95:c7:f7:a9:98:ac:56:56:ff:15:33:72:
49:22:33:bf:6e:7d:cb:67:79:1e:32:cc:cc:bf:84:
1e:be:7a:fa:48:e7:1f:5f:37:4d:09:41:62:2e:41:
fa:fc:68:6e:07:db:e3:70:d1:ff:ca:fe:c9:1a:3f:
d3:d2:19:23:dd:3a:43:87:1e:a0:96:57:14:e0:52:
ec:11:4d:ff:53:3b:ba:37:e5:21:f2:19:a1:fc:cd:
92:a2:ed:3c:f9:5c:d6:2d:6e:ef:82:8a:02:05:50:
ad:d2:5d:e5:59:f9:8f:1a:11:d8:7d:a2:5c:80:c2:
bd:52:73:f2:a6:11:bf:2b:c4:8e:48:31:31:9d:fa:
90:f6:8a:b4:d9:2f:cb:46:3c:77:01:98:5d:05:ea:
24:99:e1:76:52:44:09:83:78:a6:47:c9:dd:dd:7a:
4e:00:48:d1:38:1b:00:dd:15:86:33:22:77:81:0e:
c9:d5:05:b5:06:15:c9:eb:c9:df:21:05:fa:04:ea:
85:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6E:EB:21:94:F6:AD:1F:4B:90:19:92:FF:4A:6D:14:E9:63:61:69
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mG7rIZT2rR9LkBmS_0ptFOljYWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.244.0/22
45.130.255.0/24
45.136.172.0/23
45.137.63.0/24
193.23.253.0/24
193.27.10.0/24
194.33.29.0/24
194.62.31.0/24
IPv6:
2a0f:35c0::/29
Signature Algorithm: sha256WithRSAEncryption
58:4e:e4:56:78:98:ce:c4:3e:9a:54:6f:50:83:89:6c:f9:27:
b5:32:c7:48:b6:a0:1f:2d:18:22:32:9a:5a:23:bb:39:e2:52:
2f:3d:b4:7f:72:d0:f3:81:42:14:1d:3e:31:f9:08:42:dd:30:
5e:ba:82:59:e5:b9:f6:ee:f1:aa:d6:cb:d1:c2:a7:58:39:86:
e0:b6:a8:98:1f:ec:95:a1:82:26:31:e7:8c:09:9a:49:30:26:
39:45:10:01:cc:d1:d7:fa:c4:c6:bd:9f:61:0c:ff:d8:d3:0b:
bb:e0:09:24:58:f8:59:4c:93:82:27:be:2c:da:f9:1b:31:b2:
14:e4:54:e2:c4:47:f2:fb:63:ed:18:9c:38:16:b1:86:ce:76:
db:50:5e:85:2f:68:b1:e7:82:31:f5:eb:51:dc:00:1c:6c:ae:
2f:44:a3:ab:df:86:ad:13:93:43:67:1a:8d:cf:97:33:a1:6e:
d7:cc:3f:a4:82:0d:90:9d:b2:41:95:be:50:84:34:b9:23:dc:
9f:fa:41:2b:a9:1c:3a:a0:ff:a2:01:64:70:d5:95:0d:55:e5:
15:89:a6:b9:f0:0e:a8:c4:4c:df:9a:c8:c4:01:3c:f9:32:f1:
cf:bf:b5:40:47:45:82:ce:c9:89:13:38:93:37:7e:a7:58:65:
4f:01:37:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:47:58 2026 by rpki-client