Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Poq-ny-bMnDPLms4pd7XzL-gICQ.roa
File: Poq-ny-bMnDPLms4pd7XzL-gICQ.roa (raw, json)
Hash identifier: 2ONs/CeuTbuY35ezFhml1HDPfezflZh5CKdBlWid6PA=
Subject key identifier: 3E:8A:BE:9F:2F:9B:32:70:CF:2E:6B:38:A5:DE:D7:CC:BF:A0:20:24
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A1AADB0CACB98EA15D27F93E6EB5259D06
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Poq-ny-bMnDPLms4pd7XzL-gICQ.roa
Signing time: Thu 05 Nov 2026 08:37:24 +0000
ROA not before: Thu 05 Nov 2026 08:37:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218568
IP address blocks: 45.154.247.0/24 maxlen: 24
45.158.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:db:0c:ac:b9:8e:a1:5d:27:f9:3e:6e:b5:25:9d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 5 08:37:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e8abe9f2f9b3270cf2e6b38a5ded7ccbfa02024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:69:0d:10:b2:40:0a:70:c9:9e:a1:49:b3:c4:
4f:a2:3c:ee:fd:28:9c:46:e3:c6:75:d7:6f:d1:23:
9c:06:3b:6b:8d:79:e4:38:2e:08:00:4d:6c:70:79:
c8:14:69:ee:92:13:f9:9d:1f:19:28:00:c6:93:c5:
75:00:ca:f6:12:ce:4e:bf:f7:1e:e6:62:b9:19:cb:
67:7a:10:5e:43:c6:44:5c:68:97:91:64:ee:da:11:
1e:43:e9:07:b1:e2:e8:c4:07:c6:4a:91:aa:4f:4c:
27:82:10:5c:a0:4c:66:4b:82:03:2b:05:65:34:80:
64:7f:c7:be:49:d0:ea:a3:6f:50:e9:d9:9a:c7:53:
5f:c9:cb:fa:b9:98:5b:fe:2c:a3:6f:95:16:79:db:
e0:b5:47:1a:35:2d:ef:54:d6:7e:c7:46:96:5b:f0:
ef:cb:f3:4c:01:4b:43:de:58:77:57:93:a4:91:03:
5f:2d:2a:fa:df:c5:4d:50:92:90:40:85:d7:d9:d8:
e6:92:93:71:03:ff:c7:2e:91:1f:b5:30:8e:4a:b4:
b5:47:f3:e8:c7:57:02:33:fc:00:94:ae:c6:d5:88:
68:1b:a0:3e:88:12:d8:fb:57:04:06:58:5d:93:6b:
ac:1f:a3:6b:d8:25:02:b9:7c:04:f8:71:b1:b0:12:
af:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8A:BE:9F:2F:9B:32:70:CF:2E:6B:38:A5:DE:D7:CC:BF:A0:20:24
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Poq-ny-bMnDPLms4pd7XzL-gICQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.247.0/24
45.158.198.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:cc:56:3f:6d:82:ed:d6:a0:a3:6d:82:fb:ee:b7:99:cb:20:
c7:33:ce:8e:ca:57:66:f3:52:34:bb:47:79:2a:6c:c6:f7:fc:
d1:dc:5c:b9:52:15:54:45:a5:79:17:91:2f:38:4f:c2:a0:6d:
91:0a:91:a6:f3:ab:43:25:90:c1:18:18:69:07:64:1c:a7:48:
b2:3e:c2:9e:e5:33:01:35:2f:9f:ff:ae:38:4a:bd:39:44:f2:
f9:7a:b7:93:f2:f1:b8:a6:b8:2e:f0:0b:ec:83:3f:90:ba:0f:
a9:04:d6:60:79:47:aa:1f:eb:7f:14:57:f3:88:fc:67:9a:f6:
ab:31:9c:67:2d:c0:82:e5:e6:d1:29:6c:de:62:7d:3e:8b:fb:
d6:9b:be:a7:99:fd:e0:57:af:18:06:4e:ce:e8:02:6f:dd:b6:
76:b1:68:90:e5:cc:dc:33:65:98:c3:0e:96:91:c6:a0:77:c6:
bb:07:83:d3:27:c3:c1:03:a8:6a:2d:89:26:57:71:67:4b:5c:
65:7b:5c:f6:93:36:01:18:00:df:cb:d8:d6:a8:d2:8a:81:68:
3b:c8:7d:d7:19:58:35:01:3f:46:d2:b5:63:2c:0d:5a:76:9c:
c3:ad:ab:55:5d:66:d4:ac:a0:6e:78:e3:46:47:be:73:92:02:
bc:31:08:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:35:06 2026 by rpki-client