Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/B-55tOL_PtyvsTnQt8ekJ9LZCaY.roa
File: B-55tOL_PtyvsTnQt8ekJ9LZCaY.roa (raw, json)
Hash identifier: YrPkrkysUQ4ofXpt6ryer3vFzb/NnzM6Jinua8qOllo=
Subject key identifier: 07:EE:79:B4:E2:FF:3E:DC:AF:B1:39:D0:B7:C7:A4:27:D2:D9:09:A6
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019E1DAF7CE52276C9541F76CE1D186CCA65
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/B-55tOL_PtyvsTnQt8ekJ9LZCaY.roa
Signing time: Tue 12 May 2026 19:35:00 +0000
ROA not before: Tue 12 May 2026 19:35:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142019
IP address blocks: 45.142.28.0/24 maxlen: 24
45.153.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:35:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:af:7c:e5:22:76:c9:54:1f:76:ce:1d:18:6c:ca:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 12 19:35:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=07ee79b4e2ff3edcafb139d0b7c7a427d2d909a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a7:f7:fd:25:7e:d0:d5:2e:70:d8:d8:e3:2f:
be:41:01:e6:8a:6d:e6:43:da:2b:f3:28:4d:ff:21:
38:57:b3:dc:99:2d:b5:2b:83:31:9a:56:a5:a1:a9:
af:b8:4d:7d:8b:ed:89:4a:ea:91:9a:fb:37:f3:59:
f8:53:9b:37:8c:d9:59:9b:62:03:97:40:e4:d9:22:
98:b2:7f:18:04:bd:69:51:f2:2c:3b:36:63:4a:76:
69:e0:40:3d:f1:d9:f4:02:09:75:18:41:58:fa:48:
a4:84:70:06:0a:6c:6d:aa:7f:69:a8:cd:0f:f1:1e:
8c:4a:8e:c3:38:61:b2:95:fa:80:28:20:27:09:ad:
72:d6:74:c9:3c:c2:fd:89:75:8e:f8:70:1e:50:2f:
b6:05:f9:a3:b1:85:98:77:17:3c:2e:e6:1a:af:64:
c6:e7:d9:3d:2b:01:c2:4a:fa:9e:d2:16:99:16:68:
6e:1a:50:95:03:7b:a4:1a:bb:49:ea:19:18:67:d4:
7c:78:29:aa:53:a2:f0:a7:d8:80:ea:71:ca:eb:ea:
a8:b9:7f:c5:1e:d5:04:63:13:64:ae:a7:cb:3b:36:
dd:77:72:a8:2a:d5:1f:23:8b:aa:ca:6b:c6:ff:1c:
b8:13:33:74:7b:fa:52:6f:37:30:01:be:60:42:80:
1a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:EE:79:B4:E2:FF:3E:DC:AF:B1:39:D0:B7:C7:A4:27:D2:D9:09:A6
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/B-55tOL_PtyvsTnQt8ekJ9LZCaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.28.0/24
45.153.22.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:eb:68:63:d9:b0:8f:68:12:90:2e:76:55:0a:e6:69:3d:c0:
ef:25:83:91:0c:ac:82:25:70:88:82:ea:a7:03:0e:5c:79:b7:
1b:4e:d9:e2:6d:f6:ae:c5:a6:5e:7c:12:c8:2a:75:1e:54:61:
bf:26:f2:ad:95:73:74:95:70:9a:70:e1:14:11:a2:7a:df:41:
15:da:1b:99:a1:ad:47:b0:d2:91:3c:98:3f:ae:6c:3f:8e:ac:
68:69:eb:01:5a:b0:8b:f0:2e:0f:d0:54:c1:e2:9d:96:30:a6:
ae:56:89:50:e1:d8:11:e5:91:98:24:b6:71:97:50:0d:47:f7:
e8:99:ff:2d:e5:d6:bd:6c:4f:78:67:ca:7f:4d:b8:56:c2:99:
4a:28:e9:f6:84:7f:bf:d7:96:1c:4e:92:2e:a0:78:40:07:c7:
b6:35:fb:6b:48:a4:92:41:63:e3:2b:3f:8c:64:f6:59:26:1f:
2e:07:b8:ba:6a:e3:81:f5:20:c1:25:16:8b:6c:9f:df:b6:99:
1c:da:bd:d3:d7:cb:6e:65:e9:a8:19:0d:9f:81:1d:4a:26:0c:
5f:cc:9d:1a:7c:7d:77:56:23:9f:ef:d3:c7:db:19:6c:57:c1:
01:e0:e0:6f:91:d5:27:06:96:a6:82:d5:43:d2:ef:c6:09:b4:
0a:a6:e2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:20:02 2026 by rpki-client