Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/fdAWH39zdbtm7mMYQ8ChXiiwNho.roa
File: fdAWH39zdbtm7mMYQ8ChXiiwNho.roa (raw, json)
Hash identifier: DJA2F7Y08swfNI9bds3Jp09xBGdfNtIaDN7pjPNot9M=
Subject key identifier: 7D:D0:16:1F:7F:73:75:BB:66:EE:63:18:43:C0:A1:5E:28:B0:36:1A
Certificate issuer: /CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Certificate serial: 019FCF7CE0A26A672933747B61D11C01DA27
Authority key identifier: 42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/fdAWH39zdbtm7mMYQ8ChXiiwNho.roa
Signing time: Wed 05 Aug 2026 01:14:55 +0000
ROA not before: Wed 05 Aug 2026 01:14:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29119
IP address blocks: 45.13.171.0/24 maxlen: 24
103.127.46.0/24 maxlen: 24
103.127.47.0/24 maxlen: 24
185.152.60.0/23 maxlen: 23
185.152.61.0/24 maxlen: 24
185.189.224.0/24 maxlen: 24
185.198.51.0/24 maxlen: 24
195.245.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cf:7c:e0:a2:6a:67:29:33:74:7b:61:d1:1c:01:da:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Validity
Not Before: Aug 5 01:14:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7dd0161f7f7375bb66ee631843c0a15e28b0361a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f1:a3:1b:88:66:a2:6a:76:c1:66:f6:87:21:
cd:07:d0:de:8c:fe:14:0b:e4:b8:9b:91:9d:78:fb:
e4:59:d4:56:e7:ba:5a:2f:3f:3a:ad:c2:3f:dd:40:
ae:e2:25:be:cc:84:2d:a1:ae:a6:70:12:27:4a:75:
43:22:0c:f8:d9:ed:b9:b5:9f:f7:c0:b8:37:0c:61:
df:89:8a:b8:e5:85:56:15:0d:18:38:68:ae:97:c4:
fd:06:e5:6a:f7:7c:e4:eb:d6:55:e5:b1:78:73:6c:
77:c6:35:04:f9:ac:c2:cb:51:94:9a:bc:ad:37:65:
bb:30:f1:71:55:51:b5:c8:07:e3:2f:84:3a:f2:d9:
72:e3:41:cc:8d:c5:5f:b3:af:07:d0:5f:64:9a:71:
ff:46:f1:fa:94:61:7b:6b:c7:90:ba:20:40:25:e5:
e5:dd:9e:be:be:a8:d0:c7:69:9f:d4:1b:4c:74:05:
5c:9f:e3:55:79:52:c8:04:ef:5d:e1:5c:62:b2:f1:
ef:d0:7a:dd:7a:9e:50:4f:c6:49:ac:29:2a:0a:34:
fe:1b:4b:e6:79:f2:cf:dd:3b:90:10:a2:58:82:da:
84:d0:2f:0e:b2:0b:2b:07:62:01:3d:d1:e4:1e:19:
9a:27:a8:47:7c:51:3f:a3:53:c8:a6:7f:76:09:3c:
41:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D0:16:1F:7F:73:75:BB:66:EE:63:18:43:C0:A1:5E:28:B0:36:1A
X509v3 Authority Key Identifier:
keyid:42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/fdAWH39zdbtm7mMYQ8ChXiiwNho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.171.0/24
103.127.46.0/23
185.152.60.0/23
185.189.224.0/24
185.198.51.0/24
195.245.89.0/24
Signature Algorithm: sha256WithRSAEncryption
50:04:20:5f:92:fb:4c:d6:d3:1e:15:f8:ed:bf:e6:1e:f6:7f:
b6:67:8c:32:6c:e6:91:1f:af:ec:70:e3:df:09:b3:a8:8d:ed:
5a:aa:21:14:3f:e5:da:9f:d9:c2:db:fc:1e:8d:1b:77:05:dc:
b9:3d:bf:b2:40:07:aa:34:02:2e:34:23:c5:f6:b3:47:a0:3c:
75:77:7a:5f:e5:05:de:f9:97:74:1f:21:d9:8b:9c:26:4a:8b:
f9:90:28:a9:f6:cc:a8:cb:6c:f6:0a:35:e9:f7:c0:de:4d:99:
ea:c5:59:77:7f:f2:6d:89:40:61:87:95:b5:b8:cc:32:65:5f:
cf:a4:dc:43:a5:88:87:db:e7:4f:66:a6:72:9a:c4:ec:cf:0a:
7f:2f:69:08:86:f0:2d:43:9b:b6:d0:5c:f3:38:da:f6:7c:b7:
ca:c5:40:4b:f1:14:88:51:97:38:a0:b3:2c:fc:98:f9:c9:12:
eb:df:04:af:7b:d0:2e:aa:9e:9b:a1:8c:d1:42:1b:f8:5b:75:
d6:dc:1d:c9:4c:50:6a:cc:70:b1:b3:a6:db:3e:73:ad:cc:a8:
df:bf:0d:a3:10:cb:e9:c6:3c:0d:2a:9a:2d:58:d0:8a:43:c1:
ba:87:1c:b9:2c:b7:d1:29:c7:7d:65:17:ac:0e:54:03:88:4e:
ae:9f:e4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 15:55:27 2026 by rpki-client