Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2878qLK7LOIbisIlqsv8N_NLbEk.roa
File: 2878qLK7LOIbisIlqsv8N_NLbEk.roa (raw, json)
Hash identifier: sqKuR8G7mdtfHJ3l8S1CScqIqwgdkKPPHqNyotxH6ps=
Subject key identifier: DB:CE:FC:A8:B2:BB:2C:E2:1B:8A:C2:25:AA:CB:FC:37:F3:4B:6C:49
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019DF38D7EC4B16F2B872567BCB4F48A9BC8
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2878qLK7LOIbisIlqsv8N_NLbEk.roa
Signing time: Mon 04 May 2026 15:13:49 +0000
ROA not before: Mon 04 May 2026 15:13:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 45.128.76.0/24 maxlen: 24
45.130.125.0/24 maxlen: 24
45.146.130.0/24 maxlen: 24
45.148.100.0/24 maxlen: 24
193.8.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:35:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f3:8d:7e:c4:b1:6f:2b:87:25:67:bc:b4:f4:8a:9b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 4 15:13:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dbcefca8b2bb2ce21b8ac225aacbfc37f34b6c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6c:b6:16:f6:11:cc:89:68:83:e0:5b:b6:04:
49:50:33:a2:d6:44:bd:a7:9d:5b:46:a1:bb:d3:46:
66:d6:bc:00:62:9e:7e:ac:fd:29:00:40:ee:74:64:
db:c4:87:f1:21:08:38:a6:3c:77:27:a1:dd:f9:93:
b0:ec:87:f4:2f:4a:6b:71:e7:52:5a:a6:03:ea:e6:
5b:5c:51:23:29:f8:29:b3:70:81:e0:19:59:f3:cb:
1d:a1:2e:b6:5d:30:f3:82:2b:00:de:6b:f0:9d:27:
68:6a:03:33:b7:3c:1d:71:b4:c8:7e:f4:23:f5:4c:
9f:0e:45:06:f7:5e:ee:76:85:75:f5:2d:25:55:71:
58:21:3b:25:c2:96:8d:ee:ca:62:24:3a:b5:02:76:
45:59:c5:7d:2d:f8:2b:40:22:41:34:b6:1e:34:35:
95:fd:07:1e:cf:54:2c:44:6c:20:e3:1b:ce:b1:2a:
db:4e:fe:e8:31:d9:50:90:af:5b:e8:0f:2d:79:45:
15:2b:73:9c:5e:e0:c3:28:a1:97:c0:75:dc:5d:fe:
96:c7:f5:96:31:d3:e9:0b:a3:87:5e:b5:47:bb:8d:
49:9c:b1:a3:45:56:10:cd:4a:de:69:6a:60:b4:9f:
76:1e:93:31:3d:97:a6:d6:e5:b6:ec:f7:85:ee:88:
51:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:CE:FC:A8:B2:BB:2C:E2:1B:8A:C2:25:AA:CB:FC:37:F3:4B:6C:49
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2878qLK7LOIbisIlqsv8N_NLbEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.76.0/24
45.130.125.0/24
45.146.130.0/24
45.148.100.0/24
193.8.231.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:b6:f6:22:c0:29:ed:46:6e:61:12:20:e6:e5:6f:dc:fd:50:
e1:e8:64:45:ce:19:7d:b2:e5:0f:9f:f1:63:a5:af:6d:a8:7b:
a6:b0:06:6d:bf:34:f6:bc:39:a6:8b:b5:1c:3d:1f:c0:79:2c:
35:56:b9:35:d0:45:5f:f3:86:53:27:6e:c9:11:a5:a1:d3:66:
1e:f3:05:60:9d:4d:84:db:5f:38:ac:a9:2f:bb:de:e5:a4:9d:
93:02:24:8c:96:fe:53:ca:f0:53:2f:e5:24:fe:19:61:51:1a:
fa:4d:7c:9e:9b:d4:d7:31:0c:7f:c1:76:c4:e6:79:88:e1:3f:
58:06:06:4b:bc:e2:4e:96:d5:9f:1e:db:37:7c:e6:70:e7:a8:
5c:f7:8a:44:e5:db:3a:ec:a0:71:78:94:e7:d2:e1:85:ec:01:
d8:fc:55:6b:1b:d3:40:c6:b1:13:87:2d:ae:11:ac:20:66:19:
20:37:e6:a3:50:40:10:da:cc:6b:64:ee:f8:4b:34:be:c8:90:
26:26:cb:47:5d:b2:3f:4a:b0:b0:da:ae:7d:c6:3c:17:ae:4d:
96:3e:29:f4:1a:7a:1d:26:03:7f:76:d1:fd:2e:ca:f8:6c:15:
48:b3:63:01:97:87:7d:c8:d8:d3:99:ee:1b:bc:af:8a:ba:63:
5a:a0:0a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:26:56 2026 by rpki-client