Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/as9naNS3pR29hnnPG34HykmEow8.roa
File: as9naNS3pR29hnnPG34HykmEow8.roa (raw, json)
Hash identifier: 4IcYqxb0LViSfSWz86rcJsf5eTrFYtXwq864ty8Zz/I=
Subject key identifier: 6A:CF:67:68:D4:B7:A5:1D:BD:86:79:CF:1B:7E:07:CA:49:84:A3:0F
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019D2482798DF7D41DAC9ABDFA429CC626FE
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/as9naNS3pR29hnnPG34HykmEow8.roa
Signing time: Wed 25 Mar 2026 10:20:23 +0000
ROA not before: Wed 25 Mar 2026 10:20:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207461
IP address blocks: 45.9.119.0/24 maxlen: 24
45.86.15.0/24 maxlen: 24
45.86.245.0/24 maxlen: 24
45.86.247.0/24 maxlen: 24
45.87.240.0/24 maxlen: 24
45.92.168.0/24 maxlen: 24
45.92.169.0/24 maxlen: 24
45.92.170.0/24 maxlen: 24
45.92.171.0/24 maxlen: 24
45.92.247.0/24 maxlen: 24
45.94.36.0/24 maxlen: 24
45.94.37.0/24 maxlen: 24
45.94.38.0/24 maxlen: 24
45.94.39.0/24 maxlen: 24
45.94.46.0/24 maxlen: 24
45.94.47.0/24 maxlen: 24
45.95.98.0/23 maxlen: 23
45.95.99.0/24 maxlen: 24
45.118.249.0/24 maxlen: 24
45.128.24.0/24 maxlen: 24
45.129.124.0/24 maxlen: 24
45.129.125.0/24 maxlen: 24
45.130.127.0/24 maxlen: 24
45.130.254.0/24 maxlen: 24
45.131.213.0/24 maxlen: 24
45.133.209.0/24 maxlen: 24
45.133.210.0/24 maxlen: 24
45.136.175.0/24 maxlen: 24
45.136.228.0/24 maxlen: 24
45.137.42.0/23 maxlen: 23
45.137.60.0/24 maxlen: 24
45.137.62.0/24 maxlen: 24
45.140.14.0/24 maxlen: 24
45.145.12.0/24 maxlen: 24
45.145.13.0/24 maxlen: 24
45.145.14.0/24 maxlen: 24
45.146.88.0/24 maxlen: 24
45.146.181.0/24 maxlen: 24
45.147.28.0/24 maxlen: 24
45.151.101.0/24 maxlen: 24
45.151.102.0/24 maxlen: 24
45.152.198.0/24 maxlen: 24
45.154.56.0/24 maxlen: 24
45.155.70.0/24 maxlen: 24
45.155.71.0/24 maxlen: 24
45.158.196.0/24 maxlen: 24
45.158.199.0/24 maxlen: 24
113.30.153.0/24 maxlen: 24
113.30.155.0/24 maxlen: 24
141.193.20.0/24 maxlen: 24
185.155.200.0/24 maxlen: 24
185.155.203.0/24 maxlen: 24
185.164.56.0/24 maxlen: 24
185.164.57.0/24 maxlen: 24
193.5.65.0/24 maxlen: 24
194.62.67.0/24 maxlen: 24
195.74.90.0/24 maxlen: 24
195.85.194.0/24 maxlen: 24
2a0a:2d06:10::/48 maxlen: 48
2a0f:3d86:44::/48 maxlen: 48
2a0f:3d86:100::/48 maxlen: 48
2a0f:3d86:101::/48 maxlen: 48
2a0f:e1c0:37a::/48 maxlen: 48
2a0f:e1c0:a8b9::/48 maxlen: 48
2a13:8c86:120::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:82:79:8d:f7:d4:1d:ac:9a:bd:fa:42:9c:c6:26:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 25 10:20:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6acf6768d4b7a51dbd8679cf1b7e07ca4984a30f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2b:b8:9e:ee:6a:ca:24:b7:44:a6:3e:0a:41:
d7:27:76:50:63:e6:0a:4d:22:29:94:25:88:c6:f1:
5f:14:a0:ba:0b:41:37:6e:ad:af:5c:7f:04:5a:8a:
04:7b:b1:e1:55:44:93:19:3a:ed:ff:0e:36:d3:ff:
3a:0b:4b:3e:59:0d:00:89:e2:db:4b:21:45:c1:b6:
cb:d8:4c:4f:80:1f:1e:db:f8:0b:20:ad:f7:0a:04:
56:39:2f:69:a9:66:57:10:c9:60:94:ee:04:a9:7c:
91:32:e0:31:2c:71:2e:10:23:1f:bc:18:4a:74:67:
cf:63:47:34:1b:24:e9:0e:4d:ec:41:c4:db:e9:dc:
7a:98:19:8a:e3:e9:82:bb:d0:23:ce:e0:f0:77:87:
8f:2e:a1:23:2a:d4:fd:25:05:29:d2:dc:31:a9:43:
80:a8:38:26:86:72:71:66:44:3f:d9:61:86:d0:e6:
1a:00:78:43:7b:c3:4f:47:0d:d7:f2:e5:9a:96:db:
c1:0b:b7:8b:a3:64:f5:3f:6b:f9:09:da:8d:27:96:
3d:32:64:81:35:8a:43:1e:78:b3:d2:ea:68:2f:08:
54:9e:b4:94:95:66:65:2d:36:98:9c:9c:bf:34:d2:
89:a6:69:06:2e:28:88:a9:ef:fd:fa:e9:5b:09:41:
02:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:CF:67:68:D4:B7:A5:1D:BD:86:79:CF:1B:7E:07:CA:49:84:A3:0F
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/as9naNS3pR29hnnPG34HykmEow8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.119.0/24
45.86.15.0/24
45.86.245.0/24
45.86.247.0/24
45.87.240.0/24
45.92.168.0/22
45.92.247.0/24
45.94.36.0/22
45.94.46.0/23
45.95.98.0/23
45.118.249.0/24
45.128.24.0/24
45.129.124.0/23
45.130.127.0/24
45.130.254.0/24
45.131.213.0/24
45.133.209.0-45.133.210.255
45.136.175.0/24
45.136.228.0/24
45.137.42.0/23
45.137.60.0/24
45.137.62.0/24
45.140.14.0/24
45.145.12.0-45.145.14.255
45.146.88.0/24
45.146.181.0/24
45.147.28.0/24
45.151.101.0-45.151.102.255
45.152.198.0/24
45.154.56.0/24
45.155.70.0/23
45.158.196.0/24
45.158.199.0/24
113.30.153.0/24
113.30.155.0/24
141.193.20.0/24
185.155.200.0/24
185.155.203.0/24
185.164.56.0/23
193.5.65.0/24
194.62.67.0/24
195.74.90.0/24
195.85.194.0/24
IPv6:
2a0a:2d06:10::/48
2a0f:3d86:44::/48
2a0f:3d86:100::/47
2a0f:e1c0:37a::/48
2a0f:e1c0:a8b9::/48
2a13:8c86:120::/48
Signature Algorithm: sha256WithRSAEncryption
8a:0e:76:7b:4f:e7:5f:3c:d9:bd:4f:7e:33:f0:01:2b:70:22:
31:c9:26:36:f8:13:a9:79:c5:10:ca:ac:8e:47:1b:3f:90:f1:
d2:97:d0:48:61:72:57:61:1b:6f:11:6d:55:88:19:8d:8c:e8:
69:5b:0f:9d:5d:2c:21:a5:13:61:88:0d:45:12:e8:d9:01:62:
8e:b2:c8:b1:fb:d8:b6:81:0b:5a:55:5f:71:cd:a8:c8:9f:06:
e6:34:c1:1c:87:2e:25:ec:a7:39:6c:6e:63:e3:4b:60:f1:50:
01:0d:0e:e4:79:4a:65:75:8d:54:b1:f8:5b:08:a8:fa:df:65:
7b:95:d3:f8:8e:25:1f:58:7e:bd:18:3d:83:60:8d:3a:4a:5c:
07:4e:3c:cf:8d:8f:5e:32:5a:34:ec:b2:fd:99:77:68:25:02:
0f:5c:a5:f0:cc:a8:d7:bb:a4:91:d5:8d:ca:da:36:13:74:2f:
ea:ed:07:cd:32:f3:6d:9b:15:da:a1:3a:83:82:5f:76:e8:75:
3f:5f:af:ea:83:31:81:c4:ba:3d:ae:34:0d:b6:30:12:e4:1f:
3c:d5:50:9e:97:97:5e:b9:1e:af:dc:55:94:a7:79:08:3e:46:
67:9d:15:9a:ed:c8:05:58:29:f3:d4:c8:22:19:5d:bb:2b:32:
66:0c:26:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:50:12 2026 by rpki-client