Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/0lHNHAB1dSCHu8NfJvUD7DHgsFc.roa
File: 0lHNHAB1dSCHu8NfJvUD7DHgsFc.roa (raw, json)
Hash identifier: 722KSNZHtYdxDwgLoCah7ZpT1vkIwON9vi+ms0lvuNE=
Subject key identifier: D2:51:CD:1C:00:75:75:20:87:BB:C3:5F:26:F5:03:EC:31:E0:B0:57
Certificate issuer: /CN=49f933fc732d42128c3c88b3de0e48ca94acdd7e
Certificate serial: 01A0F149C890E8FA420060590D311D0DB756
Authority key identifier: 49:F9:33:FC:73:2D:42:12:8C:3C:88:B3:DE:0E:48:CA:94:AC:DD:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sfkz_HMtQhKMPIiz3g5IypSs3X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/0lHNHAB1dSCHu8NfJvUD7DHgsFc.roa
Signing time: Wed 30 Sep 2026 07:48:59 +0000
ROA not before: Wed 30 Sep 2026 07:48:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29650
IP address blocks: 45.139.240.0/22 maxlen: 22
45.139.240.0/23 maxlen: 23
45.139.242.0/23 maxlen: 23
79.140.128.0/20 maxlen: 20
79.140.128.0/21 maxlen: 21
79.140.136.0/21 maxlen: 21
82.195.128.0/19 maxlen: 19
82.195.128.0/20 maxlen: 20
82.195.144.0/20 maxlen: 20
84.51.224.0/21 maxlen: 21
84.51.224.0/22 maxlen: 22
84.51.228.0/22 maxlen: 22
84.51.236.0/22 maxlen: 22
84.51.236.0/23 maxlen: 23
84.51.238.0/23 maxlen: 23
84.51.240.0/20 maxlen: 20
84.51.240.0/21 maxlen: 21
84.51.248.0/21 maxlen: 21
212.78.224.0/20 maxlen: 20
212.78.224.0/21 maxlen: 21
212.78.232.0/21 maxlen: 21
212.78.240.0/23 maxlen: 23
212.78.240.0/24 maxlen: 24
212.78.241.0/24 maxlen: 24
212.78.252.0/22 maxlen: 22
212.84.40.0/21 maxlen: 21
212.84.40.0/22 maxlen: 22
212.84.44.0/22 maxlen: 22
2001:1bd8::/32 maxlen: 32
2001:1bd8::/33 maxlen: 33
2001:1bd8:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sfkz_HMtQhKMPIiz3g5IypSs3X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:49:c8:90:e8:fa:42:00:60:59:0d:31:1d:0d:b7:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f933fc732d42128c3c88b3de0e48ca94acdd7e
Validity
Not Before: Sep 30 07:48:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d251cd1c0075752087bbc35f26f503ec31e0b057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e1:d9:bd:a4:71:93:81:c9:32:b2:1a:32:db:
da:06:7c:12:ba:55:5a:8f:bb:3a:71:26:6a:81:be:
26:a8:4f:67:b1:7d:c1:90:e6:55:92:3a:72:b8:57:
b4:c0:ae:00:7c:05:32:20:a4:a5:48:83:cf:2c:4d:
54:50:ce:ff:0f:ac:1e:eb:67:da:d9:23:9e:62:fa:
4c:56:7a:17:ed:c0:a0:46:0b:9c:4e:24:84:a4:d3:
d8:b5:c1:99:20:be:09:15:f2:1c:c3:4b:49:52:a1:
cc:11:2a:cf:d3:20:ef:b4:8b:f1:50:13:85:bc:2a:
e7:2a:29:65:54:47:e0:1d:aa:4c:df:b7:0a:67:b6:
44:55:c5:3e:c0:19:ff:12:a6:20:4d:24:c4:62:69:
c8:68:9b:ef:c8:6a:cd:5b:55:05:04:62:55:ca:86:
84:41:7c:b7:1f:db:6d:e8:07:90:f3:76:2a:16:c7:
bd:05:d0:e9:91:c5:5a:4f:64:a2:fb:bc:9a:e8:0a:
ac:d8:3d:60:ae:f1:3a:1f:00:e5:96:54:01:32:c9:
22:b3:b8:a8:fd:66:88:2c:c2:cf:0d:7f:ea:47:1e:
79:0f:4d:2d:ac:f9:83:ef:03:50:64:b5:c0:40:66:
59:31:1b:c3:cb:da:84:59:26:b3:87:07:4f:89:52:
06:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:51:CD:1C:00:75:75:20:87:BB:C3:5F:26:F5:03:EC:31:E0:B0:57
X509v3 Authority Key Identifier:
keyid:49:F9:33:FC:73:2D:42:12:8C:3C:88:B3:DE:0E:48:CA:94:AC:DD:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sfkz_HMtQhKMPIiz3g5IypSs3X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/0lHNHAB1dSCHu8NfJvUD7DHgsFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.240.0/22
79.140.128.0/20
82.195.128.0/19
84.51.224.0/21
84.51.236.0-84.51.255.255
212.78.224.0-212.78.241.255
212.78.252.0/22
212.84.40.0/21
IPv6:
2001:1bd8::/32
Signature Algorithm: sha256WithRSAEncryption
d5:01:da:d1:d4:2a:48:7c:36:22:b0:df:93:f6:70:d8:a3:b5:
64:76:2a:ef:b9:df:88:8a:57:d5:38:5f:c9:a5:54:cb:c5:72:
f6:3c:10:b6:b4:48:e5:67:f4:23:ee:68:e7:1d:8c:3b:c2:9d:
18:a7:8c:06:70:0b:8d:f2:f0:bb:89:21:c4:4d:fd:75:81:3e:
26:f3:cb:85:69:e0:b6:9c:09:07:83:ba:b2:4a:97:ed:b7:55:
85:94:ac:79:c7:11:46:fe:db:01:84:0f:d5:9e:0a:45:ff:76:
86:85:6f:39:77:c9:33:16:29:73:9a:29:2a:b1:a7:ef:38:59:
02:a2:27:58:a5:bd:d3:b7:5f:50:89:5f:01:29:64:dd:98:65:
00:ab:01:77:8a:5d:a3:e8:84:9b:8c:ed:77:b8:16:0e:05:50:
02:05:7d:d0:e8:cf:23:e9:a8:72:9f:5b:1d:01:b1:59:fa:1d:
e4:c6:bc:a8:61:0a:3a:c2:57:9b:46:a1:0d:c4:5b:98:ff:02:
3e:19:55:07:92:43:79:1d:1f:73:31:de:f9:1f:6a:bf:3b:18:
67:ab:ff:ab:18:cd:cb:57:00:33:d5:6b:6f:78:cc:58:d3:b4:
85:8a:ae:b4:fa:3c:17:c0:63:4f:c2:05:0d:a7:56:50:08:28:
0e:04:4d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:57:09 2026 by rpki-client