Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/otHCp5aFh1FOt35yhSOAotS3Hlk.roa
File: otHCp5aFh1FOt35yhSOAotS3Hlk.roa (raw, json)
Hash identifier: erT6xN4l0dB4sn4eQNHPwOQFSUCcmWFX5aT2oNuu/vA=
Subject key identifier: A2:D1:C2:A7:96:85:87:51:4E:B7:7E:72:85:23:80:A2:D4:B7:1E:59
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019E4B4D98C9B578BCABA0C7CC1BAE39FDBD
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/otHCp5aFh1FOt35yhSOAotS3Hlk.roa
Signing time: Thu 21 May 2026 16:10:37 +0000
ROA not before: Thu 21 May 2026 16:10:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197354
IP address blocks: 45.95.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 17:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4b:4d:98:c9:b5:78:bc:ab:a0:c7:cc:1b:ae:39:fd:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 21 16:10:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a2d1c2a7968587514eb77e72852380a2d4b71e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fa:67:be:fd:9e:7a:ed:1c:7e:2f:94:13:f0:
0e:63:0c:17:49:a6:a6:13:e4:ac:9a:cf:b2:22:65:
69:05:3d:8b:a2:1d:5d:f7:5d:c4:d0:7c:4d:86:9b:
c3:1b:23:1b:f6:dd:b2:23:34:27:36:7c:a2:16:13:
43:a6:9b:1c:64:f0:85:1d:4f:ca:b5:ca:93:be:b9:
0d:a7:ae:58:15:f9:50:23:d5:e0:50:c0:ea:7a:e9:
9e:37:a6:b3:41:55:6c:39:b3:6d:67:09:93:93:1b:
3c:65:ed:10:38:5b:ab:9b:f6:92:4e:b7:26:68:cd:
3c:09:14:9e:18:09:69:16:c2:a0:ec:6c:f9:fe:75:
98:0b:32:46:e4:4e:e5:50:f2:31:14:32:f8:39:f7:
39:6f:a6:59:d9:6b:58:5a:0d:2a:3d:5e:01:c1:f0:
82:82:12:2c:39:be:07:03:09:fd:eb:aa:86:e3:40:
1f:13:dd:85:0f:42:be:ae:e8:e1:d7:42:da:d2:f6:
10:4a:fc:82:08:bc:35:83:17:d2:7f:7e:5d:ea:f9:
a9:91:ed:f1:56:7f:f4:93:45:12:4f:56:b5:a0:ef:
af:2a:74:ce:b7:1f:eb:f6:25:33:82:b0:4f:44:94:
1a:a3:1a:f8:0b:c0:10:fa:6a:51:16:44:59:7f:e8:
f5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D1:C2:A7:96:85:87:51:4E:B7:7E:72:85:23:80:A2:D4:B7:1E:59
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/otHCp5aFh1FOt35yhSOAotS3Hlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.96.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:13:74:83:83:82:8d:97:26:54:75:c6:5a:f1:3a:0d:fa:f1:
33:28:b7:14:6a:28:e9:3a:46:03:d8:45:a1:e1:da:13:22:03:
eb:c7:0c:e7:94:3b:5c:44:3f:b0:19:67:3b:a1:bb:09:a7:ac:
91:70:ec:b2:88:1f:99:06:be:8f:db:10:0e:a8:2d:15:a7:b5:
e8:99:2a:cb:48:2d:7a:05:a1:83:c5:f1:28:d3:44:30:bd:cb:
de:b5:8c:28:a1:0f:6f:15:0b:bf:0d:f0:6c:26:db:5e:09:8f:
13:05:54:46:89:df:cd:41:f9:d2:5e:0d:b2:94:46:d2:fd:28:
4b:ca:db:81:bf:4d:32:32:f3:6d:24:eb:ce:67:10:96:29:36:
38:d2:66:66:4b:4b:73:09:76:17:6c:3f:b0:18:11:b2:d3:2c:
bf:25:f7:d7:45:11:45:28:ea:1e:0d:c2:bc:86:fc:56:e3:3b:
37:a1:9a:b1:08:e0:9b:4a:a2:3e:cf:74:d1:c8:5a:5b:95:db:
ea:97:58:f4:70:94:70:19:79:15:43:89:75:1f:c7:36:80:5f:
4f:d5:88:a8:8e:90:54:34:a6:67:83:43:f3:f5:3c:45:30:e4:
75:fd:b8:d6:3a:9f:42:93:e6:c3:1e:2e:9c:27:2e:b1:a8:5c:
a1:cd:55:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:29:11 2026 by rpki-client