Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/i8IrdlisbUTtj7ek49F0cPvtWTY.roa
File: i8IrdlisbUTtj7ek49F0cPvtWTY.roa (raw, json)
Hash identifier: sUD2yzWPsCAghHVv/r2EBJp/j3UNZe2kf+t0fo3b6PM=
Subject key identifier: 8B:C2:2B:76:58:AC:6D:44:ED:8F:B7:A4:E3:D1:74:70:FB:ED:59:36
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A1C5BF9ECA33A637C33108D513749A97B9
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/i8IrdlisbUTtj7ek49F0cPvtWTY.roa
Signing time: Tue 10 Nov 2026 13:57:11 +0000
ROA not before: Tue 10 Nov 2026 13:57:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213334
IP address blocks: 45.12.63.0/24 maxlen: 24
45.129.125.0/24 maxlen: 24
45.147.31.0/24 maxlen: 24
45.152.196.0/24 maxlen: 24
193.5.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 17:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c5:bf:9e:ca:33:a6:37:c3:31:08:d5:13:74:9a:97:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 10 13:57:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8bc22b7658ac6d44ed8fb7a4e3d17470fbed5936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:29:46:0b:ac:39:33:8d:7f:9f:86:c5:2f:e3:
9f:b6:40:55:5f:29:06:cf:08:b3:39:7c:52:63:7b:
7e:d0:16:62:22:86:c7:3b:b3:e7:a5:4a:ed:26:5a:
8b:29:f8:4f:c6:a1:e7:f7:37:4e:a2:dd:f1:4c:b5:
17:4d:63:94:22:2a:3f:3b:00:7f:57:e6:ec:52:32:
2e:ae:68:00:9a:21:8c:b3:cb:b4:32:11:e0:2a:cb:
d4:23:f0:9e:80:d1:c7:38:34:7d:c6:2f:4d:49:a9:
9f:c2:10:31:f6:3d:10:84:e6:5f:fc:36:7c:8f:c1:
94:f8:7f:bc:c8:dd:d1:75:d5:5e:b1:48:84:2b:0d:
70:bb:e0:0b:81:5d:57:21:2e:07:12:19:f2:d7:53:
57:80:f6:15:4c:b2:ca:8b:4c:b6:a6:84:35:f2:91:
5f:33:99:2d:09:8a:78:79:dc:77:50:e1:7d:cd:27:
d7:23:57:a6:7c:f1:74:39:a5:c4:c9:be:38:c5:73:
78:6e:98:f6:be:1b:e3:3d:21:ab:da:82:9c:ce:f3:
de:e8:b4:44:b3:bb:7e:e7:82:02:4c:65:d6:8b:6d:
a6:a7:4b:5b:5f:06:88:e5:2e:37:99:b2:ff:5b:13:
d7:49:92:bb:9b:da:26:72:a4:39:7c:8e:33:0e:85:
b1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C2:2B:76:58:AC:6D:44:ED:8F:B7:A4:E3:D1:74:70:FB:ED:59:36
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/i8IrdlisbUTtj7ek49F0cPvtWTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.63.0/24
45.129.125.0/24
45.147.31.0/24
45.152.196.0/24
193.5.250.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:06:55:78:6e:0e:3e:18:3c:94:81:d2:d3:dc:14:c1:2d:9e:
26:cf:aa:88:f5:92:8d:12:42:b0:20:d5:d0:4b:94:fc:94:85:
31:50:2b:36:89:c9:6f:52:7c:69:57:a7:b6:bf:76:36:f8:6e:
92:ce:6e:e0:f6:f7:da:fb:28:3b:77:fd:48:41:43:f8:a7:a7:
5c:ae:62:4a:d8:bd:63:a0:90:98:4d:cb:34:41:13:a4:a8:d8:
ff:69:eb:bf:ff:38:c0:2a:53:2b:ce:61:d9:8c:16:ca:f0:47:
fc:30:9a:8b:4f:40:46:54:47:29:c1:90:e7:69:e9:c0:60:2c:
74:b1:d0:9d:38:26:29:ca:e3:fd:e6:90:50:42:5a:fb:c8:3b:
45:c3:7a:19:7d:a4:1a:ad:74:98:43:0b:95:46:a0:ba:e2:59:
f9:2e:06:40:3f:ec:34:cc:6b:c6:7b:9a:15:49:3a:bf:44:1c:
d5:db:e6:6e:45:af:89:84:c9:03:35:48:96:04:27:59:6e:91:
3f:3d:33:e0:34:41:9c:70:2c:74:12:1d:17:ed:89:ca:cb:ce:
94:e4:8a:c6:89:cd:96:41:8d:82:14:5c:94:4d:51:3a:64:45:
3c:76:8e:db:5a:f1:94:5b:8c:86:0b:85:1a:e2:6a:31:47:b3:
e8:f6:ab:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:32:46 2026 by rpki-client