Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qXSPNAEE3kXqDUIdeomz2fuvC7Q.roa
File: qXSPNAEE3kXqDUIdeomz2fuvC7Q.roa (raw, json)
Hash identifier: dSlSJuSq65AZ2IfI+a9bWdVuBWbKedy5G7XmearpRL0=
Subject key identifier: A9:74:8F:34:01:04:DE:45:EA:0D:42:1D:7A:89:B3:D9:FB:AF:0B:B4
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019F6B5F79DBFB0A6955BA1172085F68BC7D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qXSPNAEE3kXqDUIdeomz2fuvC7Q.roa
Signing time: Thu 16 Jul 2026 14:40:47 +0000
ROA not before: Thu 16 Jul 2026 14:40:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49981
IP address blocks: 45.91.211.0/24 maxlen: 24
45.146.129.0/24 maxlen: 24
185.99.99.0/24 maxlen: 24
193.8.1.0/24 maxlen: 24
193.8.94.0/24 maxlen: 24
195.85.197.0/24 maxlen: 24
2a0f:3045::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6b:5f:79:db:fb:0a:69:55:ba:11:72:08:5f:68:bc:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 16 14:40:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a9748f340104de45ea0d421d7a89b3d9fbaf0bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:28:fa:38:cd:50:bf:cb:98:34:58:da:0d:04:
7f:20:08:99:5d:6d:9f:33:ac:94:55:fd:c8:e8:ea:
7e:f5:f8:29:0c:93:36:65:15:26:5b:d9:80:14:e9:
06:6a:86:aa:b1:65:5c:71:f9:88:6e:cd:ae:9d:6d:
18:f1:bd:0e:76:4f:15:89:95:12:76:51:d6:bb:4d:
a9:9c:32:9e:0a:5f:b6:fc:f0:6d:ed:61:d7:ed:89:
58:ac:97:b2:70:22:62:32:9f:cd:b5:64:8f:c2:a1:
0a:42:92:d5:71:34:4d:bd:21:00:03:97:77:0a:af:
fb:9e:c8:28:70:95:f5:06:fc:90:de:96:db:ea:de:
74:8a:f9:c7:46:c8:4e:6f:61:bf:3c:de:48:3d:31:
6c:30:5e:fb:91:7c:2c:07:66:41:65:58:a1:09:4c:
88:8a:ed:a6:ed:14:f8:3f:91:f5:94:b1:84:17:b9:
19:be:08:6e:38:4c:d9:33:f6:ec:ff:4d:db:26:9a:
49:2a:3d:a6:70:c1:16:ed:ce:93:27:e2:9f:9e:dd:
1b:d2:dc:49:53:dc:f4:74:24:cd:49:a8:b7:84:b9:
24:74:e8:ce:7b:ab:e5:a0:e5:34:04:3e:95:21:17:
f5:5f:64:6a:f4:d1:bb:f6:26:4f:f1:24:fb:7a:64:
39:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:74:8F:34:01:04:DE:45:EA:0D:42:1D:7A:89:B3:D9:FB:AF:0B:B4
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qXSPNAEE3kXqDUIdeomz2fuvC7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.211.0/24
45.146.129.0/24
185.99.99.0/24
193.8.1.0/24
193.8.94.0/24
195.85.197.0/24
IPv6:
2a0f:3045::/32
Signature Algorithm: sha256WithRSAEncryption
b5:95:7d:a5:3b:0f:f8:88:1e:c8:88:68:c3:3f:30:7d:02:c4:
fb:9a:8a:44:11:47:ea:b5:28:a2:23:79:2a:9e:82:35:23:63:
27:c1:18:21:80:8d:68:1f:bf:4f:34:fc:7e:70:67:41:8a:2c:
38:19:4b:74:8f:80:2f:f1:b8:57:65:e0:ce:33:c0:c4:96:c2:
19:45:c9:87:4d:ca:5f:65:40:39:4f:30:dd:91:91:2e:0d:13:
a2:9a:6f:d4:85:8c:69:63:03:17:18:fc:b7:a0:04:54:cf:a2:
4e:e6:a4:d3:44:70:8b:c2:e7:5e:92:d8:a9:0f:e9:df:de:15:
8b:6f:2e:be:d6:82:5e:10:b0:72:46:af:6c:33:4a:f5:5d:b7:
f4:fb:97:6b:d2:a0:25:62:3e:f7:35:4d:ad:c2:9e:bb:ce:e2:
5a:65:99:d1:47:43:04:78:e4:89:01:16:3f:a6:79:7b:42:76:
9b:3c:98:09:fd:05:f9:85:a6:68:80:86:28:58:36:31:80:4d:
5c:fd:3b:1b:7a:7c:5a:e1:e4:77:e0:d3:e9:62:cf:e3:71:f0:
f8:9e:ac:b4:5a:14:bf:68:30:90:52:45:7b:d7:96:f8:4e:36:
d3:8e:2f:91:84:11:d0:8a:85:4f:40:54:a8:0b:7f:15:fd:bc:
a5:3c:9a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:34:57 2026 by rpki-client