Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mTALF5jO-Jrh2kR316wNlPDlnt0.roa
File: mTALF5jO-Jrh2kR316wNlPDlnt0.roa (raw, json)
Hash identifier: bDLwSVjv6Utbhv/iJMkT6fmFbkYCTmI+kBDy9Bx3zRY=
Subject key identifier: 99:30:0B:17:98:CE:F8:9A:E1:DA:44:77:D7:AC:0D:94:F0:E5:9E:DD
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A086B954C8EFE49B53FB79031B2B9A3547
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mTALF5jO-Jrh2kR316wNlPDlnt0.roa
Signing time: Wed 09 Sep 2026 15:11:27 +0000
ROA not before: Wed 09 Sep 2026 15:11:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200823
IP address blocks: 45.12.62.0/24 maxlen: 24
45.95.99.0/24 maxlen: 24
45.131.214.0/24 maxlen: 24
45.151.106.0/24 maxlen: 24
45.153.219.0/24 maxlen: 24
93.190.247.0/24 maxlen: 24
103.114.43.0/24 maxlen: 24
103.227.84.0/24 maxlen: 24
193.41.68.0/24 maxlen: 24
194.33.61.0/24 maxlen: 24
194.35.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 20:53:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:b9:54:c8:ef:e4:9b:53:fb:79:03:1b:2b:9a:35:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 9 15:11:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99300b1798cef89ae1da4477d7ac0d94f0e59edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4f:11:d3:08:85:e6:d8:55:cd:ea:73:db:a8:
31:29:39:aa:9a:65:a1:72:84:a6:e2:ca:b1:64:be:
6a:40:e1:94:3c:3d:d9:fb:a0:5d:96:ed:ca:5b:61:
cf:65:72:6a:78:d0:e5:06:b3:5e:bf:39:f2:bd:64:
b8:8f:c7:ac:7a:82:c5:70:db:a3:08:f7:61:48:23:
a2:8b:00:fa:4b:f5:38:b7:63:f8:b5:3c:32:59:cf:
8f:5d:09:84:e4:be:85:1e:41:15:24:b4:6c:43:24:
10:a8:16:0f:d9:2f:c2:70:00:3b:ec:71:5d:05:a8:
b6:82:d7:e3:d9:45:c4:29:57:0e:5d:0e:1a:c3:a7:
39:ff:f0:a5:1d:90:50:e6:06:d8:2c:02:23:87:7a:
c2:b7:d9:de:3d:c5:ab:fd:be:65:93:31:87:ee:b0:
d6:bc:2f:b3:66:8a:18:3d:17:a1:64:c2:7d:ec:4b:
28:4f:50:b1:49:20:51:0b:39:b7:55:6b:95:92:08:
9f:dd:49:d7:a6:d8:b3:93:24:65:8e:6e:d7:32:87:
6d:9a:ba:c8:6e:60:7d:ea:7d:a6:0d:42:4e:36:cb:
7d:34:3c:87:37:d7:99:b7:47:ae:7e:37:a9:ed:8b:
1e:26:bb:26:98:eb:ee:09:77:02:93:94:1a:75:2b:
e0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:30:0B:17:98:CE:F8:9A:E1:DA:44:77:D7:AC:0D:94:F0:E5:9E:DD
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mTALF5jO-Jrh2kR316wNlPDlnt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.62.0/24
45.95.99.0/24
45.131.214.0/24
45.151.106.0/24
45.153.219.0/24
93.190.247.0/24
103.114.43.0/24
103.227.84.0/24
193.41.68.0/24
194.33.61.0/24
194.35.226.0/24
Signature Algorithm: sha256WithRSAEncryption
77:ec:2c:4e:eb:c1:1c:68:53:b6:08:eb:b1:76:b7:71:d1:49:
01:e9:98:f3:7f:2c:56:b1:b4:a7:1d:30:36:c8:4e:c7:27:56:
d1:a9:69:3f:4b:a7:a7:46:90:61:78:6d:46:66:17:36:c2:22:
df:9c:1c:74:fe:0b:9b:6a:29:3e:9e:92:db:cb:e9:57:06:27:
ae:a9:fe:5d:45:4f:55:62:59:9b:8e:e1:fc:35:28:90:b1:0c:
9f:b3:c5:4f:c6:35:a6:3a:04:d0:c4:6c:76:a0:bf:7f:7a:4b:
80:fe:0a:e2:a2:75:c8:ea:88:0f:c5:37:18:8a:8f:99:cc:49:
d8:4b:b7:4e:7f:ec:d2:bf:19:17:b6:7f:c7:19:88:0a:bd:7f:
0b:6c:04:a8:fe:95:5b:d5:7f:b1:ab:20:77:4c:c5:d2:9e:94:
12:ad:78:d7:44:f2:eb:ae:16:c0:a5:81:e6:c0:57:da:75:bd:
c6:ef:5e:64:ad:ff:57:ea:5f:3b:90:a6:a0:c7:e9:51:dd:c6:
76:e7:a5:3c:c6:93:fa:9a:5c:74:30:a2:ce:4e:a8:24:bb:95:
12:62:66:22:d9:bb:07:53:32:f2:b1:00:fc:b8:21:49:4d:c5:
1d:db:32:11:d7:6b:bb:03:c3:05:f3:22:12:b2:bf:49:28:49:
e0:de:bb:72
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAaCGuVTI7+SbU/t5AxsrmjVHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYwOTA5MTUxMTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTMwMGIxNzk4Y2VmODlhZTFkYTQ0NzdkN2FjMGQ5NGYwZTU5ZWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi08R0wiF5thVzepz26gxKTmqmmWh
coSm4sqxZL5qQOGUPD3Z+6Bdlu3KW2HPZXJqeNDlBrNevznyvWS4j8eseoLFcNuj
CPdhSCOiiwD6S/U4t2P4tTwyWc+PXQmE5L6FHkEVJLRsQyQQqBYP2S/CcAA77HFd
Bai2gtfj2UXEKVcOXQ4aw6c5//ClHZBQ5gbYLAIjh3rCt9nePcWr/b5lkzGH7rDW
vC+zZooYPRehZMJ97EsoT1CxSSBRCzm3VWuVkgif3UnXptizkyRljm7XModtmrrI
bmB96n2mDUJONst9NDyHN9eZt0eufjep7YseJrsmmOvuCXcCk5QadSvg4QIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFJkwCxeYzvia4dpEd9esDZTw5Z7dMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvbVRBTEY1ak8tSnJoMmtSMzE2d05sUERsbnQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQALQw+AwQA
LV9jAwQALYPWAwQALZdqAwQALZnbAwQAXb73AwQAZ3IrAwQAZ+NUAwQAwSlEAwQA
wiE9AwQAwiPiMA0GCSqGSIb3DQEBCwUAA4IBAQB37CxO68EcaFO2COuxdrdx0UkB
6ZjzfyxWsbSnHTA2yE7HJ1bRqWk/S6enRpBheG1GZhc2wiLfnBx0/gubaik+npLb
y+lXBieuqf5dRU9VYlmbjuH8NSiQsQyfs8VPxjWmOgTQxGx2oL9/ekuA/grionXI
6ogPxTcYio+ZzEnYS7dOf+zSvxkXtn/HGYgKvX8LbASo/pVb1X+xqyB3TMXSnpQS
rXjXRPLrrhbApYHmwFfadb3G715krf9X6l87kKagx+lR3cZ256U8xpP6mlx0MKLO
Tqgku5USYmYi2bsHUzLysQD8uCFJTcUd2zIR12u7A8MF8yISsr9JKEng3rty
-----END CERTIFICATE-----
Generated at Thu Sep 10 02:47:51 2026 by rpki-client