Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/5hZrlPLAbotFaJd0vfbYjcl6vtg.roa
File: 5hZrlPLAbotFaJd0vfbYjcl6vtg.roa (raw, json)
Hash identifier: MSjUL1COgzTpXwtjLQ1qUq1Ruxn1jilEsg0zatW4+/s=
Subject key identifier: E6:16:6B:94:F2:C0:6E:8B:45:68:97:74:BD:F6:D8:8D:C9:7A:BE:D8
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019DFDF93D8CE25A050DB2A9B3FF2BC8DA92
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/5hZrlPLAbotFaJd0vfbYjcl6vtg.roa
Signing time: Wed 06 May 2026 15:47:43 +0000
ROA not before: Wed 06 May 2026 15:47:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207461
IP address blocks: 45.86.247.0/24 maxlen: 24
45.92.168.0/24 maxlen: 24
45.92.169.0/24 maxlen: 24
45.92.170.0/24 maxlen: 24
45.92.171.0/24 maxlen: 24
45.92.247.0/24 maxlen: 24
45.94.36.0/24 maxlen: 24
45.94.37.0/24 maxlen: 24
45.94.39.0/24 maxlen: 24
45.94.46.0/24 maxlen: 24
45.94.47.0/24 maxlen: 24
45.95.98.0/23 maxlen: 23
45.95.99.0/24 maxlen: 24
45.118.249.0/24 maxlen: 24
45.128.24.0/24 maxlen: 24
45.129.125.0/24 maxlen: 24
45.131.213.0/24 maxlen: 24
45.133.209.0/24 maxlen: 24
45.133.210.0/24 maxlen: 24
45.137.42.0/23 maxlen: 23
45.137.60.0/24 maxlen: 24
45.137.62.0/24 maxlen: 24
45.140.14.0/24 maxlen: 24
45.145.12.0/24 maxlen: 24
45.146.88.0/24 maxlen: 24
45.146.181.0/24 maxlen: 24
45.147.28.0/24 maxlen: 24
45.151.101.0/24 maxlen: 24
45.151.102.0/24 maxlen: 24
45.152.198.0/24 maxlen: 24
45.154.56.0/24 maxlen: 24
45.155.70.0/24 maxlen: 24
45.155.71.0/24 maxlen: 24
45.158.196.0/24 maxlen: 24
45.158.199.0/24 maxlen: 24
103.229.28.0/24 maxlen: 24
113.30.153.0/24 maxlen: 24
113.30.155.0/24 maxlen: 24
141.193.20.0/24 maxlen: 24
185.155.203.0/24 maxlen: 24
185.164.56.0/24 maxlen: 24
185.164.57.0/24 maxlen: 24
193.5.65.0/24 maxlen: 24
194.62.67.0/24 maxlen: 24
195.74.90.0/24 maxlen: 24
195.85.194.0/24 maxlen: 24
2a0a:2d06:10::/48 maxlen: 48
2a0a:2d07:e5::/48 maxlen: 48
2a0f:3d86:44::/48 maxlen: 48
2a0f:3d86:100::/48 maxlen: 48
2a0f:3d86:101::/48 maxlen: 48
2a0f:e1c0:37a::/48 maxlen: 48
2a0f:e1c0:a8b9::/48 maxlen: 48
2a13:8c86:120::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:35:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fd:f9:3d:8c:e2:5a:05:0d:b2:a9:b3:ff:2b:c8:da:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 6 15:47:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e6166b94f2c06e8b45689774bdf6d88dc97abed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:da:53:82:a9:6b:8a:0a:57:47:85:0e:76:41:
77:b1:5f:f7:89:fe:79:da:db:7f:a9:98:27:72:dd:
23:75:1c:56:a2:63:79:06:19:38:c0:4f:43:a3:3f:
15:d3:40:81:09:6d:29:fc:ac:b8:bf:a3:65:72:0a:
83:91:da:c2:d1:15:37:52:10:1f:bf:73:fc:6a:4b:
c6:b9:10:bf:68:36:a4:a8:3d:8e:01:22:50:7d:79:
80:9b:a4:c5:c5:dd:61:53:87:43:1b:1f:25:a8:be:
8d:0c:f6:f0:3b:86:8f:02:a6:88:f8:f2:08:6d:d9:
d4:a9:46:08:01:ab:e9:e4:30:ad:c5:9e:37:e5:31:
a3:d9:36:79:f8:ba:95:43:14:1b:65:e9:77:be:45:
4c:9e:d3:9e:62:69:ea:8e:3f:37:2b:64:af:78:85:
13:70:c2:29:25:39:33:ec:42:5c:3d:dd:a3:e3:3b:
ff:71:72:09:5d:8c:88:06:d3:42:20:d2:2d:2a:4d:
3a:35:84:77:6a:61:91:90:4d:e6:2a:29:5e:6e:a3:
4e:87:f5:fb:5d:11:44:ee:74:a2:78:90:e3:83:7a:
b2:2b:9c:27:fe:c5:db:2b:5d:f1:bd:22:d8:83:ae:
fb:06:88:e8:1f:98:e8:27:ab:56:fe:1c:a1:90:0f:
a5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:16:6B:94:F2:C0:6E:8B:45:68:97:74:BD:F6:D8:8D:C9:7A:BE:D8
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/5hZrlPLAbotFaJd0vfbYjcl6vtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.247.0/24
45.92.168.0/22
45.92.247.0/24
45.94.36.0/23
45.94.39.0/24
45.94.46.0/23
45.95.98.0/23
45.118.249.0/24
45.128.24.0/24
45.129.125.0/24
45.131.213.0/24
45.133.209.0-45.133.210.255
45.137.42.0/23
45.137.60.0/24
45.137.62.0/24
45.140.14.0/24
45.145.12.0/24
45.146.88.0/24
45.146.181.0/24
45.147.28.0/24
45.151.101.0-45.151.102.255
45.152.198.0/24
45.154.56.0/24
45.155.70.0/23
45.158.196.0/24
45.158.199.0/24
103.229.28.0/24
113.30.153.0/24
113.30.155.0/24
141.193.20.0/24
185.155.203.0/24
185.164.56.0/23
193.5.65.0/24
194.62.67.0/24
195.74.90.0/24
195.85.194.0/24
IPv6:
2a0a:2d06:10::/48
2a0a:2d07:e5::/48
2a0f:3d86:44::/48
2a0f:3d86:100::/47
2a0f:e1c0:37a::/48
2a0f:e1c0:a8b9::/48
2a13:8c86:120::/48
Signature Algorithm: sha256WithRSAEncryption
9f:a1:67:63:02:e0:ed:8b:bf:72:4f:a1:c2:45:14:c7:1e:43:
3a:7e:48:de:3b:cf:7b:f4:2b:d7:f4:9f:85:74:d4:d3:96:93:
3f:dd:8a:c5:70:fe:c6:60:ef:26:24:3d:a6:55:c8:83:95:d3:
ce:9c:6e:81:36:41:cb:ff:bd:60:f7:84:62:3a:67:51:6e:4b:
fd:64:cc:81:1c:65:8d:c8:e4:ce:0e:56:43:96:01:fe:ae:b4:
55:e1:32:ce:86:63:43:23:97:a3:32:61:b1:3e:64:aa:1a:05:
38:44:e7:ef:f0:db:fd:9e:79:7f:58:67:96:ff:0b:9c:12:16:
67:6a:d9:47:17:bd:21:48:54:7a:eb:f8:03:79:b2:97:33:8e:
63:4b:77:89:c3:5d:62:81:b2:de:38:96:d9:45:c8:64:1f:52:
3c:ae:b3:c5:20:bf:e2:93:c0:c5:4b:63:52:21:5f:46:87:ba:
ed:61:f7:1c:45:09:02:c8:bc:fd:7f:65:0f:31:40:e8:40:09:
8d:7f:25:98:9e:8f:2c:74:ee:89:7d:f5:b3:13:4f:19:da:1c:
e7:79:e8:25:2c:13:28:c0:ad:9c:75:68:82:fb:9e:5f:29:53:
d6:ba:4d:ce:e3:05:85:82:20:b5:66:bc:cf:74:f5:77:3b:50:
cf:4f:95:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:51:16 2026 by rpki-client