Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fN7xWaPD5WD_QkQUbtIYzaFgm-M.roa
File: fN7xWaPD5WD_QkQUbtIYzaFgm-M.roa (raw, json)
Hash identifier: MMJXByZlCKJZPeramV574vXM1O7AjNKUHXf56V/kuPc=
Subject key identifier: 7C:DE:F1:59:A3:C3:E5:60:FF:42:44:14:6E:D2:18:CD:A1:60:9B:E3
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019CFD857E739F1651B2E516C77DAA94DCB0
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fN7xWaPD5WD_QkQUbtIYzaFgm-M.roa
Signing time: Tue 17 Mar 2026 20:38:30 +0000
ROA not before: Tue 17 Mar 2026 20:38:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395954
IP address blocks: 45.145.58.0/24 maxlen: 24
45.147.100.0/24 maxlen: 24
45.147.101.0/24 maxlen: 24
45.147.102.0/24 maxlen: 24
45.147.103.0/24 maxlen: 24
45.152.201.0/24 maxlen: 24
45.155.200.0/24 maxlen: 24
45.155.201.0/24 maxlen: 24
45.155.202.0/24 maxlen: 24
45.155.203.0/24 maxlen: 24
193.8.8.0/24 maxlen: 24
194.41.56.0/24 maxlen: 24
2a13:18c6:33::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fd:85:7e:73:9f:16:51:b2:e5:16:c7:7d:aa:94:dc:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 17 20:38:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7cdef159a3c3e560ff4244146ed218cda1609be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d9:99:ec:65:57:d2:a2:5f:fd:22:b7:e5:2a:
ff:c6:0f:a4:e3:ed:09:5c:fb:18:97:2a:b4:6a:3e:
c0:f6:e1:a3:2f:24:ce:25:a8:b8:ad:ee:d9:44:17:
a7:10:8e:60:d4:45:15:14:45:09:10:e1:85:20:a4:
dd:f6:44:5f:4c:c3:5f:a0:8b:dd:2a:12:94:6d:96:
ac:f1:61:ef:8f:1a:47:f0:ce:3d:32:c4:24:d2:d3:
3d:82:40:dc:25:18:ea:2e:c1:50:cd:5d:e8:06:ea:
56:f2:a3:51:90:a9:9d:07:89:3e:d6:2b:09:04:1e:
f8:42:aa:c3:62:9f:19:66:98:4f:a5:0c:cb:8a:ca:
9f:8a:2c:e8:f3:29:e8:b9:b9:45:32:50:39:11:b6:
09:24:ad:75:62:d5:c3:aa:3a:e1:e1:08:32:b9:fa:
76:f6:75:61:d1:59:58:86:a2:f2:07:2b:04:92:e7:
d9:ee:bf:13:3c:bb:18:bc:9f:df:17:f2:5b:d9:fe:
f2:23:2c:ad:a6:c0:8a:b3:35:e9:78:c4:1f:21:00:
ea:19:da:fa:70:40:ff:35:f1:f6:35:a7:b5:8d:8c:
71:fc:be:94:61:5f:e6:bc:5d:6b:91:b4:84:65:72:
a3:d8:a8:5f:74:eb:48:11:c6:42:6e:cf:a0:95:c3:
f5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DE:F1:59:A3:C3:E5:60:FF:42:44:14:6E:D2:18:CD:A1:60:9B:E3
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fN7xWaPD5WD_QkQUbtIYzaFgm-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.58.0/24
45.147.100.0/22
45.152.201.0/24
45.155.200.0/22
193.8.8.0/24
194.41.56.0/24
IPv6:
2a13:18c6:33::/48
Signature Algorithm: sha256WithRSAEncryption
bd:c7:f2:bd:0a:45:53:ae:79:6d:de:d9:28:59:b2:37:17:74:
13:62:06:70:09:24:d2:27:28:df:a9:59:d2:ca:72:40:b7:a5:
e5:04:41:b2:06:45:27:29:1b:60:07:51:10:a5:8d:a1:52:5b:
ce:27:51:bd:5e:84:76:61:d0:70:97:25:18:3a:aa:e9:0d:0b:
1b:ef:fc:9f:99:82:c7:9a:08:98:f6:8e:9c:f1:84:b5:7e:71:
62:05:40:34:9d:92:9f:32:63:01:70:02:8c:fe:a8:00:67:15:
f2:8a:8b:57:b6:8d:4c:57:b5:7d:f4:a1:c1:ce:05:01:99:66:
d6:3b:9b:f9:60:44:60:59:3c:3b:0c:1f:a9:de:86:79:d0:e7:
0a:2e:fd:ca:b7:05:86:33:16:91:c4:31:3f:4c:4c:9b:a5:6d:
a6:f0:18:bc:24:4c:14:74:03:3b:42:2f:ed:9d:65:2a:1c:99:
f2:fe:b2:8c:b7:16:82:c8:23:9e:84:ab:c9:e4:af:e0:e2:5a:
b4:1c:fb:f6:11:59:5c:02:21:2a:34:8b:9b:e5:22:04:69:47:
4d:a1:52:b3:04:cb:d8:fa:ce:72:af:79:b8:ae:03:92:99:77:
57:00:1b:34:b1:fc:78:a4:17:cb:8f:f7:af:17:2c:1e:b1:5e:
4c:92:b1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:48:35 2026 by rpki-client