Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/alomw2OsWHbd8tHr8rQUVSaTf48.roa
File: alomw2OsWHbd8tHr8rQUVSaTf48.roa (raw, json)
Hash identifier: /SgtQ+hB/USe7wR/Kp74UDlxjPB2bz9JIMvjDNTyblY=
Subject key identifier: 6A:5A:26:C3:63:AC:58:76:DD:F2:D1:EB:F2:B4:14:55:26:93:7F:8F
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019E79945E7A10BC09A30F8BCFD95086A845
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/alomw2OsWHbd8tHr8rQUVSaTf48.roa
Signing time: Sat 30 May 2026 15:50:27 +0000
ROA not before: Sat 30 May 2026 15:50:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60631
IP address blocks: 45.159.149.0/24 maxlen: 24
45.159.150.0/24 maxlen: 24
62.106.95.0/24 maxlen: 24
146.19.212.0/24 maxlen: 24
217.114.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:79:94:5e:7a:10:bc:09:a3:0f:8b:cf:d9:50:86:a8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: May 30 15:50:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a5a26c363ac5876ddf2d1ebf2b4145526937f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:99:94:39:f8:89:c3:1d:a5:80:c9:0d:96:56:
05:96:e2:e1:f5:cb:9e:d7:e6:54:c6:5b:51:c8:ad:
3d:ba:7d:88:20:c6:0e:8f:40:e5:1f:38:26:80:33:
82:24:51:de:72:5f:b9:22:3c:05:ef:74:a4:f2:17:
10:3d:c3:b1:91:83:05:c0:ef:20:75:40:73:8f:54:
f7:e5:ae:db:ff:f4:3d:1b:52:37:e4:7d:74:77:30:
a4:e3:de:cf:f8:af:0c:a7:bb:ea:99:7f:78:7d:06:
34:45:b9:96:98:09:ff:b4:96:05:22:16:87:34:27:
61:5e:1b:16:6f:c6:96:d8:ef:52:44:61:ce:0e:13:
7c:10:aa:32:50:5b:f8:31:7a:2f:d0:92:55:ef:42:
69:11:42:4d:4c:73:d6:b9:c7:a9:4f:d7:03:f2:34:
af:da:7d:1a:3c:34:3e:19:32:61:21:da:58:2a:03:
aa:d9:ac:68:5c:99:f5:c5:3d:11:10:21:ca:f5:70:
5f:cc:6b:c9:47:32:87:4a:c8:0e:78:59:e7:6c:52:
4b:7a:57:33:be:ce:d9:b1:54:cb:8f:04:7d:92:b1:
2e:84:ca:aa:0c:6b:41:a0:ae:80:db:8a:5e:90:72:
32:d8:df:7b:06:71:49:a0:33:3e:88:d8:d3:6e:7a:
a4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:5A:26:C3:63:AC:58:76:DD:F2:D1:EB:F2:B4:14:55:26:93:7F:8F
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/alomw2OsWHbd8tHr8rQUVSaTf48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.149.0-45.159.150.255
62.106.95.0/24
146.19.212.0/24
217.114.40.0/24
Signature Algorithm: sha256WithRSAEncryption
73:1a:c9:78:3d:51:26:0d:a4:98:27:d1:04:ac:14:97:49:18:
57:3e:14:84:f1:76:3b:42:6b:f0:8e:1f:3c:ed:42:c2:dc:85:
27:f7:7f:69:18:a6:a8:8c:78:94:80:4c:4c:65:98:e8:44:df:
9f:d4:11:3e:cc:3b:02:33:39:00:2b:43:4f:49:e5:89:5e:a9:
0d:93:15:a5:66:71:47:b2:6e:69:31:aa:23:09:df:96:22:fb:
2d:ea:21:3f:0d:5e:cf:b4:a9:ea:db:86:cf:bb:a6:b8:28:ac:
2d:fa:1a:2a:b1:cb:f0:63:df:78:d6:31:80:9d:1c:15:32:66:
25:6c:f0:c1:96:67:1a:13:75:66:00:7a:ad:9c:df:29:03:c6:
00:7d:59:c6:c2:cf:8d:55:bb:1b:d6:a1:88:b1:c9:51:72:9b:
e7:3e:20:f6:55:c8:23:04:71:b4:e5:92:ba:6a:7f:a0:08:c9:
3c:af:32:a9:9c:ff:a8:bf:08:de:1b:4b:6a:be:88:dc:75:97:
f3:a2:53:ab:90:12:cb:74:ea:1c:ff:75:dc:47:8e:50:7e:94:
51:b7:bb:ad:31:35:b4:0d:9f:a3:e8:74:c2:6b:57:38:91:40:
a0:07:55:74:3c:9c:e3:2e:4e:d3:b7:c0:bf:6c:cd:dc:b9:9f:
91:6e:b3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 04:12:51 2026 by rpki-client