Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/UlVj8DUFDN8l-SEr04uYQTa4B8A.roa
File: UlVj8DUFDN8l-SEr04uYQTa4B8A.roa (raw, json)
Hash identifier: cGeaAbHJPQDO41ix692fedEon2uJku1XUgwhZT4D9Hs=
Subject key identifier: 52:55:63:F0:35:05:0C:DF:25:F9:21:2B:D3:8B:98:41:36:B8:07:C0
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A0CD82F9BAC8127AD52ABCFA8B223F124E
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/UlVj8DUFDN8l-SEr04uYQTa4B8A.roa
Signing time: Wed 23 Sep 2026 09:05:07 +0000
ROA not before: Wed 23 Sep 2026 09:05:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203273
IP address blocks: 45.9.117.0/24 maxlen: 24
45.9.120.0/24 maxlen: 24
45.86.245.0/24 maxlen: 24
45.94.37.0/24 maxlen: 24
45.118.248.0/24 maxlen: 24
45.118.249.0/24 maxlen: 24
45.129.124.0/24 maxlen: 24
45.129.126.0/24 maxlen: 24
45.130.254.0/24 maxlen: 24
45.131.215.0/24 maxlen: 24
45.133.209.0/24 maxlen: 24
45.133.210.0/24 maxlen: 24
45.135.38.0/24 maxlen: 24
45.137.42.0/24 maxlen: 24
45.137.43.0/24 maxlen: 24
45.139.85.0/24 maxlen: 24
45.146.90.0/24 maxlen: 24
45.146.91.0/24 maxlen: 24
45.151.100.0/24 maxlen: 24
45.152.202.0/24 maxlen: 24
45.154.58.0/24 maxlen: 24
45.158.185.0/24 maxlen: 24
45.158.199.0/24 maxlen: 24
103.229.31.0/24 maxlen: 24
167.94.163.0/24 maxlen: 24
185.99.98.0/24 maxlen: 24
185.126.64.0/24 maxlen: 24
193.5.64.0/24 maxlen: 24
193.39.143.0/24 maxlen: 24
193.39.209.0/24 maxlen: 24
193.39.245.0/24 maxlen: 24
193.41.86.0/24 maxlen: 24
193.58.108.0/24 maxlen: 24
194.62.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:82:f9:ba:c8:12:7a:d5:2a:bc:fa:8b:22:3f:12:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 23 09:05:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=525563f035050cdf25f9212bd38b984136b807c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a4:b7:b2:de:7d:56:bc:be:b2:2d:30:c1:a6:
95:94:84:7f:a3:d7:e5:f1:de:44:b9:1f:d7:c7:56:
73:83:01:17:26:8c:f0:f8:2e:18:19:e7:89:ac:d5:
da:49:1a:e3:19:02:70:a7:80:9a:df:79:5f:ea:fe:
35:92:f8:69:02:7c:29:d5:b7:28:d4:d7:43:7e:99:
9f:00:cd:83:8c:c7:3c:ea:04:33:d8:b5:4c:89:33:
e4:ba:c6:56:4d:ea:46:b8:d8:a4:82:e2:5a:b4:80:
65:34:bd:6b:ca:a5:d4:e3:af:01:ed:0e:a4:ea:ee:
6e:3b:2f:54:82:d7:c8:81:1e:a5:0f:46:a5:c6:cd:
6a:82:6e:59:42:7d:3c:76:be:cc:a9:df:1d:ee:52:
de:e6:76:f4:6c:84:7f:d8:5c:da:cb:75:67:70:bc:
3e:32:e9:44:de:0b:6d:1e:04:f7:b2:d6:b1:90:81:
ba:67:90:25:f6:5b:4f:0d:0c:78:b7:a3:10:5b:04:
fa:99:3d:ba:f2:f7:5d:ae:88:4e:ce:eb:58:15:cd:
ce:87:1e:3e:d6:ee:59:c3:ac:5b:40:7e:ce:81:b9:
e0:44:bc:30:6d:3a:15:11:91:e0:94:ce:e6:60:bf:
51:3e:4f:eb:fc:88:08:0e:60:56:33:c8:d8:d5:c6:
dc:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:55:63:F0:35:05:0C:DF:25:F9:21:2B:D3:8B:98:41:36:B8:07:C0
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/UlVj8DUFDN8l-SEr04uYQTa4B8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.117.0/24
45.9.120.0/24
45.86.245.0/24
45.94.37.0/24
45.118.248.0/23
45.129.124.0/24
45.129.126.0/24
45.130.254.0/24
45.131.215.0/24
45.133.209.0-45.133.210.255
45.135.38.0/24
45.137.42.0/23
45.139.85.0/24
45.146.90.0/23
45.151.100.0/24
45.152.202.0/24
45.154.58.0/24
45.158.185.0/24
45.158.199.0/24
103.229.31.0/24
167.94.163.0/24
185.99.98.0/24
185.126.64.0/24
193.5.64.0/24
193.39.143.0/24
193.39.209.0/24
193.39.245.0/24
193.41.86.0/24
193.58.108.0/24
194.62.66.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:bc:bb:03:80:33:db:49:3e:75:40:43:24:51:25:94:ae:55:
34:d5:02:35:92:d6:02:f1:a3:cd:9e:f5:bd:96:7a:3e:fc:89:
21:02:4b:da:8d:b9:c6:28:cb:f8:85:76:dc:1c:44:ec:d5:f7:
0b:94:26:a7:e5:ff:de:a9:7c:67:74:5f:d4:a5:d4:6e:67:18:
da:8e:63:54:11:3c:42:1d:4b:86:cb:28:0a:10:3c:e9:66:52:
9a:86:88:2c:3b:b2:6d:d6:30:5b:5a:b6:6b:b8:a7:05:3e:48:
49:42:4f:94:23:aa:54:f1:63:aa:c9:cd:a8:8f:a5:aa:a0:38:
60:6f:ca:04:0b:5c:53:af:7d:16:73:5f:a2:1d:75:9b:bd:cd:
1c:ca:90:af:68:f0:51:20:ef:cd:18:6f:f8:c7:f5:23:84:07:
26:be:f5:fe:06:e0:e2:64:08:e2:7f:34:11:5c:d6:62:8b:cf:
11:eb:5f:56:0d:7e:b9:7b:02:5b:db:a5:d2:68:15:b7:e4:04:
1e:49:77:fa:70:1e:0d:2b:4c:2c:5d:d2:82:14:a2:00:34:de:
19:60:e2:e8:2b:cd:62:03:81:d0:5a:8b:93:6d:6b:40:ea:e2:
1f:8d:26:29:50:92:de:1b:4f:d2:80:f6:62:6b:70:35:2b:fd:
45:2f:b2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:07:36 2026 by rpki-client