Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/oWHLr3uiIhnb5S97BQuAk3t8DKI.roa
File: oWHLr3uiIhnb5S97BQuAk3t8DKI.roa (raw, json)
Hash identifier: aMvssFCm/frZjA0AD0xdmnNZIhfNJ7PZyCYQuo5R30E=
Subject key identifier: A1:61:CB:AF:7B:A2:22:19:DB:E5:2F:7B:05:0B:80:93:7B:7C:0C:A2
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A062A95B5110A20C79702E411598DD52BB
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/oWHLr3uiIhnb5S97BQuAk3t8DKI.roa
Signing time: Wed 02 Sep 2026 15:07:41 +0000
ROA not before: Wed 02 Sep 2026 15:07:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213755
IP address blocks: 45.145.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:a9:5b:51:10:a2:0c:79:70:2e:41:15:98:dd:52:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 2 15:07:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a161cbaf7ba22219dbe52f7b050b80937b7c0ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2e:c8:c6:38:3e:6e:59:a7:b5:1c:5f:87:4b:
e8:f5:ba:62:3c:c9:b1:fe:a4:d3:39:2e:0e:97:94:
04:cc:d2:4c:29:0b:63:1b:1e:1b:4e:b6:70:11:fc:
cf:68:88:c7:4b:b8:9e:1a:f8:27:87:30:8f:5b:7d:
e6:ee:35:24:17:d3:20:69:c6:82:aa:f7:55:81:6e:
54:73:d5:c6:59:28:c0:8a:97:fb:8b:93:21:a8:7a:
fe:29:bd:a9:03:2b:bd:de:cd:fd:69:6e:8f:ad:6a:
91:02:60:24:b8:c9:e3:7a:83:27:4e:48:31:68:a2:
24:12:8c:d8:95:49:6e:1a:dd:51:2c:d6:25:ba:a3:
2d:6d:9b:84:7a:89:37:bf:d2:5c:b3:c9:f0:55:02:
17:7b:9b:12:44:c0:62:b9:30:23:ff:67:05:3b:10:
cb:fc:75:c4:e8:3e:36:24:b6:2c:f2:95:59:06:2e:
a9:60:9d:50:3d:8d:d1:96:c2:16:16:9c:8b:9e:8a:
6f:1b:7d:fc:79:3d:3c:b6:eb:4f:ed:dc:2e:7a:13:
f5:5a:94:7f:77:86:f6:3b:2d:05:f5:42:29:73:19:
ba:16:6e:36:3a:3b:f7:1f:6d:46:a2:ac:8d:af:4e:
d2:2a:b9:c4:3b:2e:13:06:0f:8a:47:02:50:b4:ca:
21:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:61:CB:AF:7B:A2:22:19:DB:E5:2F:7B:05:0B:80:93:7B:7C:0C:A2
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/oWHLr3uiIhnb5S97BQuAk3t8DKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.59.0/24
Signature Algorithm: sha256WithRSAEncryption
49:f7:97:28:22:c0:61:6c:4c:ba:08:bd:6d:cd:88:75:67:a1:
10:9c:bf:93:06:65:3c:12:f6:1e:6d:7c:dd:b8:19:50:55:b4:
5d:ca:2b:37:5e:e2:76:e4:60:24:4c:eb:59:80:61:52:63:f1:
c2:95:1b:40:c0:10:11:ef:09:77:53:d6:5c:2e:a0:6d:00:69:
1b:e8:a0:ac:96:5f:f1:34:28:74:99:a7:40:9b:0a:6c:e1:43:
8e:2d:1b:6e:76:82:24:22:3f:c5:6f:c4:82:6e:04:1f:59:9a:
d7:46:5e:85:77:94:09:2d:1f:28:30:7f:48:c5:58:7a:cc:eb:
aa:d3:62:13:48:dd:01:ce:e0:59:6d:43:ee:f1:89:8a:8a:40:
72:ef:3e:ff:ee:32:19:01:9c:16:fe:05:41:e8:b7:4d:61:a9:
28:2e:be:b4:d8:3c:7c:c9:ea:3a:41:38:cd:70:cb:13:f2:a5:
7c:04:89:ff:a4:74:b7:df:d5:dd:b0:0c:3d:f4:e1:c4:31:59:
28:67:aa:fb:5c:ac:60:52:99:bc:55:53:ae:0d:09:d7:41:79:
a0:d9:0a:ac:0c:85:c2:d9:69:f7:10:ad:52:88:f0:bc:43:ed:
51:11:e8:52:da:d1:6d:a0:a5:6f:05:93:d2:a1:99:3c:69:d0:
63:2f:65:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:29 2026 by rpki-client