Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Vt9fPR8o1mXAeo5NjJJIjKQBTMU.roa
File: Vt9fPR8o1mXAeo5NjJJIjKQBTMU.roa (raw, json)
Hash identifier: R+CPb5Qh2c6NGsGiPeblRFBH+p7hecQGyEsS52DzLG4=
Subject key identifier: 56:DF:5F:3D:1F:28:D6:65:C0:7A:8E:4D:8C:92:48:8C:A4:01:4C:C5
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019F8E201478D86EEA6128870E989514BB05
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Vt9fPR8o1mXAeo5NjJJIjKQBTMU.roa
Signing time: Thu 23 Jul 2026 08:38:14 +0000
ROA not before: Thu 23 Jul 2026 08:38:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 45.128.76.0/24 maxlen: 24
45.130.125.0/24 maxlen: 24
45.146.130.0/24 maxlen: 24
45.148.100.0/24 maxlen: 24
45.154.56.0/24 maxlen: 24
193.8.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:20:14:78:d8:6e:ea:61:28:87:0e:98:95:14:bb:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 23 08:38:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56df5f3d1f28d665c07a8e4d8c92488ca4014cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:16:74:38:93:1c:ad:ad:79:fb:e8:59:f3:16:
58:07:34:b0:65:52:ec:67:af:81:24:f5:43:98:ed:
26:af:77:ce:cb:4c:3c:3c:07:7c:f4:11:51:88:71:
1b:99:69:e0:8b:db:80:65:8b:cc:c6:2f:54:cc:39:
e8:55:64:8d:41:27:8e:c5:0c:37:2b:a6:9c:ce:87:
cc:74:d9:71:f7:f0:f5:cc:9d:bf:11:51:7a:9d:4d:
e7:56:e4:ee:85:66:b9:bc:d0:04:46:10:97:bb:12:
e0:62:cb:a5:da:82:a3:7a:70:ff:fa:e4:39:5e:5f:
2e:77:68:14:7c:20:d8:15:41:45:d7:02:39:12:d8:
4f:68:8c:25:31:8c:2c:ac:ca:70:99:a4:c5:94:7d:
ba:f7:5b:a1:a0:35:73:e3:ee:9f:c4:bb:83:70:61:
83:65:60:65:50:29:17:0e:b3:70:45:79:4c:65:31:
34:a9:9a:ae:c4:a4:98:94:b6:d3:50:85:6f:0c:c8:
3b:2d:e4:e9:e8:0b:83:ad:0e:e8:6f:71:fd:3a:fe:
15:fc:db:a3:c7:26:e1:f2:d1:2a:88:14:ed:3f:b1:
36:db:c4:ca:2c:29:64:09:bf:22:4d:06:d2:cb:17:
d9:a5:d6:d0:e4:ec:2b:53:5d:1f:d3:f0:ff:cb:60:
19:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DF:5F:3D:1F:28:D6:65:C0:7A:8E:4D:8C:92:48:8C:A4:01:4C:C5
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Vt9fPR8o1mXAeo5NjJJIjKQBTMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.76.0/24
45.130.125.0/24
45.146.130.0/24
45.148.100.0/24
45.154.56.0/24
193.8.231.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:46:31:64:53:23:e3:62:26:f5:60:be:93:99:8a:08:22:b2:
8c:ae:a7:87:5e:18:14:ee:0b:90:3d:54:74:51:4e:7b:c6:5a:
ca:3b:02:56:be:97:b0:6b:d6:5b:26:17:29:91:f1:95:78:88:
ae:3f:dd:62:9e:c6:36:50:e2:15:b6:78:5c:4d:29:a6:ca:b0:
95:17:9f:e4:52:e8:95:6f:bd:82:42:35:d3:59:6e:01:4b:6e:
43:2f:53:7b:06:bd:d3:11:94:96:48:a2:9c:4a:fc:3f:a2:19:
6c:78:4f:e7:cd:31:19:59:b7:1c:83:ae:4b:f1:fa:89:19:94:
ef:16:18:95:b5:84:16:2d:5b:40:7e:c6:53:fc:c1:e0:5a:1f:
6f:a5:0f:db:99:7d:1b:52:25:d1:33:29:81:7b:3d:16:95:36:
2d:7b:d1:0a:54:dc:27:9f:18:ee:d9:d2:8a:f4:77:a3:6b:e6:
ac:5d:b4:5e:1a:6b:93:a5:2e:1a:a9:4b:df:87:ee:52:c5:5f:
6a:71:a8:e4:1c:87:7f:19:50:4c:4a:a4:b5:82:99:a3:00:1a:
39:65:55:ce:97:6c:09:be:61:f0:0b:40:25:d0:b6:a6:90:cd:
09:ae:10:98:63:e2:7a:4c:55:6c:57:ea:d4:ec:6e:fb:a0:fd:
ba:4e:52:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:33:31 2026 by rpki-client