Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/z_z3YRSiGUqKW8KCJbZbzTKECFI.roa
File: z_z3YRSiGUqKW8KCJbZbzTKECFI.roa (raw, json)
Hash identifier: 3jNkT1misHJ9hnhYv7nCP4a4jnJtGhDT6NbB8qlBhAQ=
Subject key identifier: CF:FC:F7:61:14:A2:19:4A:8A:5B:C2:82:25:B6:5B:CD:32:84:08:52
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A06279AFDFCAA0A4F89ACD6B017A7D3B22
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/z_z3YRSiGUqKW8KCJbZbzTKECFI.roa
Signing time: Wed 02 Sep 2026 14:15:37 +0000
ROA not before: Wed 02 Sep 2026 14:15:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207461
IP address blocks: 45.94.46.0/24 maxlen: 24
45.94.47.0/24 maxlen: 24
45.129.125.0/24 maxlen: 24
45.137.42.0/23 maxlen: 23
45.137.62.0/24 maxlen: 24
45.140.14.0/24 maxlen: 24
45.146.88.0/24 maxlen: 24
45.146.181.0/24 maxlen: 24
45.147.28.0/24 maxlen: 24
45.158.196.0/24 maxlen: 24
45.158.199.0/24 maxlen: 24
141.193.20.0/24 maxlen: 24
185.164.57.0/24 maxlen: 24
193.5.65.0/24 maxlen: 24
194.62.67.0/24 maxlen: 24
2a0a:2d06:10::/48 maxlen: 48
2a0a:2d07:e5::/48 maxlen: 48
2a0f:3d86:44::/48 maxlen: 48
2a0f:3d86:100::/48 maxlen: 48
2a0f:3d86:101::/48 maxlen: 48
2a0f:e1c0:37a::/48 maxlen: 48
2a0f:ea44:66::/48 maxlen: 48
2a13:8c86:120::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:79:af:df:ca:a0:a4:f8:9a:cd:6b:01:7a:7d:3b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 2 14:15:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cffcf76114a2194a8a5bc28225b65bcd32840852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e7:64:90:a7:91:44:95:b6:58:59:0c:32:92:
f2:69:4b:7c:29:e0:6d:0e:26:54:9b:52:83:c2:12:
44:97:e2:cd:46:90:9e:a9:cc:74:72:3a:f5:63:29:
d8:ea:37:86:30:4c:be:31:12:26:64:bd:d8:2c:d7:
d8:9d:30:e1:36:f6:f7:e1:1d:82:38:ac:f7:0f:69:
b8:2b:a2:2b:e1:df:e3:55:65:28:ea:14:63:0d:61:
e7:19:f6:b3:c9:a5:86:74:3f:4d:02:f5:70:ff:01:
61:a9:0c:16:22:93:2a:45:f8:85:a6:4d:c1:11:e1:
48:21:5e:4c:e4:0a:c2:ae:0a:8c:5b:dc:c3:9f:65:
0d:d2:36:45:88:bf:15:86:c6:d2:85:47:2b:a1:38:
bd:03:d1:ca:dc:f4:ee:30:0a:33:9b:33:cf:ca:68:
4d:48:7b:af:73:59:4d:68:84:a6:58:0e:a2:09:50:
7f:21:7b:db:43:75:ff:71:a5:48:01:6e:ca:af:4c:
a2:18:f1:27:96:2c:e0:14:cb:b3:28:95:9a:26:f8:
13:c2:e2:8f:c6:bc:5d:72:6b:41:d5:35:b5:3c:5d:
cd:33:c2:ac:3f:3b:94:1d:3d:88:25:c6:c3:a3:14:
f7:da:e9:72:ff:80:7a:32:73:df:d5:f9:95:3e:2f:
df:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FC:F7:61:14:A2:19:4A:8A:5B:C2:82:25:B6:5B:CD:32:84:08:52
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/z_z3YRSiGUqKW8KCJbZbzTKECFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.46.0/23
45.129.125.0/24
45.137.42.0/23
45.137.62.0/24
45.140.14.0/24
45.146.88.0/24
45.146.181.0/24
45.147.28.0/24
45.158.196.0/24
45.158.199.0/24
141.193.20.0/24
185.164.57.0/24
193.5.65.0/24
194.62.67.0/24
IPv6:
2a0a:2d06:10::/48
2a0a:2d07:e5::/48
2a0f:3d86:44::/48
2a0f:3d86:100::/47
2a0f:e1c0:37a::/48
2a0f:ea44:66::/48
2a13:8c86:120::/48
Signature Algorithm: sha256WithRSAEncryption
c7:36:04:a0:04:45:c9:c1:e5:e1:86:65:c7:b0:74:12:66:44:
3e:ac:f5:bd:3d:ca:ab:19:70:43:f4:bf:17:9f:12:4e:72:e9:
22:1d:c7:9f:04:a2:1d:20:e4:36:bc:e4:d8:fc:a9:1a:d7:c4:
de:30:c5:1f:f5:62:b4:2e:28:32:b9:88:55:99:cc:44:09:b6:
68:78:4c:80:31:39:bb:e4:ab:77:ba:ec:c1:7e:ff:46:0e:55:
9b:0d:ce:c8:0f:67:ee:34:8f:cd:17:2a:33:4e:34:e4:8d:63:
74:33:71:4d:d7:e4:64:cb:e1:11:eb:20:5c:3d:0a:72:f9:04:
ee:93:67:65:6c:fd:03:0d:38:f2:6c:e6:7e:4a:e9:fa:31:56:
df:77:bc:57:2f:66:12:f4:6b:65:31:bd:f7:9d:21:71:9e:35:
cf:4f:52:8c:e4:c0:ab:9b:e5:d8:67:02:b1:0c:b5:bd:1d:aa:
c6:02:e3:b4:d3:27:d9:58:98:64:8f:09:67:b4:3a:5a:d2:a7:
51:62:f3:9c:ec:2f:e0:8f:72:12:b4:b7:68:de:28:3e:6c:c1:
12:38:53:a2:80:ba:4c:33:6d:99:53:6f:11:3f:6d:fb:44:94:
e6:e5:41:ad:ab:1b:25:c7:02:ad:42:d0:57:9a:d2:fc:c7:d4:
4c:43:cc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:56 2026 by rpki-client