Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ngY2IE95JN6WC9gep1I3pvCZ0uw.roa
File: ngY2IE95JN6WC9gep1I3pvCZ0uw.roa (raw, json)
Hash identifier: LlCwuTCEkzxcS4accQ4SUguloNTilkQRJx0Bxx8a0kw=
Subject key identifier: 9E:06:36:20:4F:79:24:DE:96:0B:D8:1E:A7:52:37:A6:F0:99:D2:EC
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A05DD7B60ADEFEC4A6D8A1B2A7E637A439
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ngY2IE95JN6WC9gep1I3pvCZ0uw.roa
Signing time: Tue 01 Sep 2026 16:40:13 +0000
ROA not before: Tue 01 Sep 2026 16:40:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216334
IP address blocks: 45.152.196.0/24 maxlen: 24
45.154.246.0/24 maxlen: 24
45.154.247.0/24 maxlen: 24
45.158.197.0/24 maxlen: 24
45.158.198.0/24 maxlen: 24
103.91.147.0/24 maxlen: 24
193.5.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:d7:b6:0a:de:fe:c4:a6:d8:a1:b2:a7:e6:37:a4:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 1 16:40:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e0636204f7924de960bd81ea75237a6f099d2ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:85:8f:a5:8f:a3:0e:1a:20:5d:77:08:89:25:
cf:93:8a:d8:61:bf:e3:5e:6e:21:45:e0:d6:78:17:
46:c3:31:eb:10:5b:39:b8:e2:45:f0:07:14:25:a7:
5b:df:d4:ad:ab:6f:27:04:d7:af:92:0c:9d:90:93:
46:d4:dd:45:ab:b9:27:c6:a0:c2:6e:c3:cd:25:04:
46:bf:84:2f:74:4d:fb:42:5a:39:70:e2:bd:e0:47:
1a:4b:02:ec:0c:0d:0e:6f:9d:30:76:e2:38:d0:0a:
36:6f:17:af:ba:8c:0d:e5:b0:22:cd:43:9e:86:3b:
c5:56:91:4f:02:85:e7:d8:19:1b:c2:d1:04:5b:a7:
ca:87:f5:01:8d:36:21:c3:ba:f7:60:a8:45:3e:ab:
b7:65:30:a2:ed:7e:2e:7a:13:cd:fd:40:3c:94:12:
32:11:56:7c:0a:46:7d:7f:d0:08:07:f1:c9:d3:12:
83:a3:79:fe:74:1d:4b:c2:b2:80:cd:be:c5:f6:e1:
33:5b:08:c8:fe:82:cf:25:65:e3:5b:1d:a1:32:df:
3d:76:e3:ff:46:d5:2b:2e:3e:1c:2d:e6:21:76:6c:
13:21:54:b1:eb:8d:b6:60:40:72:f3:ee:fc:d0:1b:
a7:44:fe:9f:2f:fa:6e:d9:7c:3b:f9:b9:6a:92:76:
88:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:06:36:20:4F:79:24:DE:96:0B:D8:1E:A7:52:37:A6:F0:99:D2:EC
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ngY2IE95JN6WC9gep1I3pvCZ0uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.196.0/24
45.154.246.0/23
45.158.197.0-45.158.198.255
103.91.147.0/24
193.5.250.0/24
Signature Algorithm: sha256WithRSAEncryption
04:e5:06:d8:78:97:0a:75:66:90:9d:78:bc:49:f6:e0:3f:ef:
60:19:f4:c9:82:9f:c5:2f:15:a4:05:16:30:fc:14:2d:d5:c1:
9a:76:56:d3:cc:e3:62:e0:d8:58:5d:b0:53:4f:e7:c0:15:8f:
9f:0d:70:72:18:a6:16:a0:35:76:22:b8:f9:ab:af:21:b1:b5:
7c:22:12:aa:04:86:e4:b9:ff:c4:1a:f9:c1:cb:d3:df:37:d8:
4a:74:bd:71:a3:a1:cc:16:b4:42:33:fd:dd:cf:d2:6f:18:cc:
41:29:24:7d:b2:ad:91:43:76:29:59:fc:c1:6a:49:82:60:38:
16:bd:e4:79:f3:aa:d0:98:50:71:a8:9f:c2:8f:77:45:92:61:
f3:eb:09:31:a4:7d:10:ca:bf:c2:3b:dd:13:da:88:b8:04:2f:
46:6d:e6:66:2c:d2:35:01:8d:c7:07:90:29:ad:dd:78:d5:6d:
e1:04:38:26:63:64:be:7d:06:f7:d2:8a:8e:1d:84:58:9e:ce:
d4:11:ed:7a:26:62:29:91:46:0e:50:c6:8c:41:1f:57:16:ad:
07:2f:8d:ed:a6:32:67:69:46:fb:36:45:8d:ca:af:d6:62:7f:
a6:55:db:bc:a6:b2:d1:e3:f9:65:c6:46:4c:0f:d8:a3:3b:6a:
54:9c:43:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:21:14 2026 by rpki-client