Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_q-3u7zWiWi95NvxljyVZWnsT40.roa
File: _q-3u7zWiWi95NvxljyVZWnsT40.roa (raw, json)
Hash identifier: +6cUzOKTjynbBLk0tWxkrDlvihWBoZwSHhZ7sfyj05o=
Subject key identifier: FE:AF:B7:BB:BC:D6:89:68:BD:E4:DB:F1:96:3C:95:65:69:EC:4F:8D
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019DF38D7FAEAD01BEB8D530386992081AED
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_q-3u7zWiWi95NvxljyVZWnsT40.roa
Signing time: Mon 04 May 2026 15:13:49 +0000
ROA not before: Mon 04 May 2026 15:13:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203614
IP address blocks: 45.137.41.0/24 maxlen: 24
103.139.51.0/24 maxlen: 24
185.126.66.0/24 maxlen: 24
193.27.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:35:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f3:8d:7f:ae:ad:01:be:b8:d5:30:38:69:92:08:1a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 4 15:13:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=feafb7bbbcd68968bde4dbf1963c956569ec4f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ea:a7:66:60:44:0e:c4:1d:84:8e:5b:c9:e7:
19:58:9c:51:73:4e:6b:40:4a:be:cf:36:85:fc:be:
a3:95:dd:cf:0f:2d:65:3a:7c:85:79:40:56:3c:55:
6f:81:b4:2f:a6:e9:c0:52:28:6b:87:00:ea:e6:c5:
95:07:48:b0:da:8f:99:d6:fa:f6:4a:8e:fe:89:c8:
d8:32:5a:4a:20:31:30:c3:17:09:91:ac:66:0a:2c:
5c:7f:be:a5:82:68:56:df:02:01:7e:cc:a2:71:6f:
e4:19:78:8d:97:29:a4:eb:94:98:de:fc:bc:57:a4:
77:54:42:9a:b8:e6:9a:d2:37:04:19:7e:1d:e3:5a:
ca:b3:27:10:e5:4f:b9:8e:21:fb:7e:b2:0d:62:90:
6c:d6:f1:5e:6e:a5:90:d8:11:4e:a1:c7:53:ab:69:
bb:e0:e9:3d:ec:cc:58:d7:af:1f:c1:29:cc:4b:a0:
f7:5e:13:c8:af:bf:35:5d:0b:5c:59:f1:e3:ef:1e:
3c:ed:50:3e:cf:87:10:b3:88:c4:13:22:97:a1:ba:
fd:b1:4d:c6:9b:e9:07:ea:e6:01:bc:7a:0e:5e:01:
8c:6a:aa:25:00:fc:ea:fd:39:b0:d1:42:8b:9f:1f:
39:d0:47:c8:2b:da:8d:53:bf:70:03:07:86:e8:7f:
1e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:AF:B7:BB:BC:D6:89:68:BD:E4:DB:F1:96:3C:95:65:69:EC:4F:8D
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_q-3u7zWiWi95NvxljyVZWnsT40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.41.0/24
103.139.51.0/24
185.126.66.0/24
193.27.19.0/24
Signature Algorithm: sha256WithRSAEncryption
24:44:1a:11:2b:61:f7:15:8f:61:2d:9a:68:2c:4f:79:74:67:
d5:81:5c:eb:b9:0b:9e:9b:ff:11:95:2e:27:94:1e:b0:42:d7:
2f:b6:a9:7c:db:f1:9f:c6:c3:e8:de:11:9e:ee:62:35:ea:86:
3b:6e:11:ad:55:89:fc:b0:2e:5c:a9:ec:67:f2:53:f3:be:30:
13:3e:7a:11:b2:22:13:ee:5d:b6:79:4b:3d:ee:0d:ef:bc:00:
ac:2d:d5:2b:3d:de:3f:20:df:aa:cf:6b:13:15:1c:02:6f:0c:
a8:eb:30:21:ec:89:46:86:6d:ff:bf:e3:24:be:fc:48:00:5f:
69:7b:2a:b7:1f:8b:25:1d:0e:a8:07:2a:5e:30:54:f7:8d:71:
e7:a8:5b:e9:fc:db:43:db:c8:76:10:2a:16:e4:c2:93:a9:c9:
8d:dd:d6:fd:e0:59:b8:6c:68:02:00:85:e1:90:46:bf:8d:b7:
71:18:48:ea:10:16:c2:ea:30:6f:d3:b0:27:4e:f1:11:5c:17:
26:ae:8e:b0:c6:79:63:cf:44:92:51:51:73:b3:02:6a:54:3f:
6e:0f:7c:9a:f8:af:1a:6d:00:30:ea:11:9c:01:e7:7a:6f:54:
67:61:55:d6:5a:8f:c0:3e:22:14:98:e3:69:d7:fd:e1:19:f1:
91:a4:de:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:48:11 2026 by rpki-client