Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/me7T5dk_gfqB9SDpabzmgpBASg0.roa
File: me7T5dk_gfqB9SDpabzmgpBASg0.roa (raw, json)
Hash identifier: Ht0J5ao9BIqCBooDFfduLlrqySXBhGBOjmsnP6SW4i8=
Subject key identifier: 99:EE:D3:E5:D9:3F:81:FA:81:F5:20:E9:69:BC:E6:82:90:40:4A:0D
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A1B183869CFCBC2D7D4457ED4E681373D1
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/me7T5dk_gfqB9SDpabzmgpBASg0.roa
Signing time: Fri 06 Nov 2026 15:39:09 +0000
ROA not before: Fri 06 Nov 2026 15:39:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26666
IP address blocks: 45.128.244.0/24 maxlen: 24
45.128.245.0/24 maxlen: 24
45.128.246.0/24 maxlen: 24
45.128.247.0/24 maxlen: 24
2a0f:35c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 17:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b1:83:86:9c:fc:bc:2d:7d:44:57:ed:4e:68:13:73:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 6 15:39:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99eed3e5d93f81fa81f520e969bce68290404a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a4:db:64:10:af:f7:c6:e2:95:f1:09:4b:88:
58:e7:29:80:8d:3e:61:c3:f5:ad:dd:45:b9:20:f0:
8b:aa:a7:0d:38:3f:6c:bb:b0:68:93:93:05:a9:bf:
72:b8:79:05:12:8e:10:f5:0e:38:08:ab:8a:e2:dd:
ff:d0:ed:29:10:83:32:2c:82:b2:da:d0:56:5e:b3:
38:cb:6f:84:d9:67:fc:6c:b8:83:44:8b:26:42:7c:
4a:6f:14:52:9a:ce:14:7c:98:32:98:47:f8:d5:06:
ae:d4:66:a9:38:ea:ea:1c:ee:33:c6:a7:27:cd:79:
f9:7a:79:e6:ca:a4:e0:85:63:f3:62:bb:28:fc:33:
96:fc:f1:d1:12:1f:40:93:b4:51:59:36:f6:e9:4e:
32:47:df:36:d0:15:45:3d:9c:35:e8:16:2a:3d:4a:
b7:4f:57:ac:0e:95:cd:48:74:33:93:7a:30:40:2e:
26:c2:ae:ea:e8:c8:af:48:58:65:e2:cd:ea:e1:31:
62:b4:e5:35:28:78:8f:0a:70:23:a4:e3:83:d5:3d:
1d:70:10:04:e2:37:dd:1e:19:01:31:e5:d0:88:dd:
93:a3:87:39:9f:32:47:3b:77:be:2d:d3:a5:18:66:
1e:7a:a3:84:f8:65:80:2f:b3:1a:36:dd:05:92:6a:
f8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:EE:D3:E5:D9:3F:81:FA:81:F5:20:E9:69:BC:E6:82:90:40:4A:0D
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/me7T5dk_gfqB9SDpabzmgpBASg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.244.0/22
IPv6:
2a0f:35c0::/29
Signature Algorithm: sha256WithRSAEncryption
a8:fc:f7:60:25:26:c0:bf:85:f3:ed:ec:71:4f:e5:c9:20:49:
31:56:58:49:01:fd:39:e1:d3:e6:cf:8b:79:bb:52:f5:56:9a:
c6:7a:90:52:d7:85:53:7a:75:0b:be:7b:ee:37:2b:a8:83:d9:
88:56:8d:6c:8d:89:7b:bb:38:63:57:ff:cc:e8:aa:18:c2:61:
3c:fa:e7:a6:d4:6a:52:e6:d4:a8:06:79:08:a9:eb:11:0a:55:
94:3d:4e:4e:5c:e1:e4:c0:1a:e7:8d:5e:d7:db:5b:a9:76:39:
f3:bf:e4:35:32:52:bc:dc:ef:77:ac:5c:b6:c3:29:7f:00:3b:
39:21:69:be:1a:48:c2:b4:bc:a0:d7:f9:c4:61:ac:d7:40:73:
5d:1f:5d:1b:e1:b8:fb:c6:c1:62:cf:1b:3e:c3:fa:3d:3e:f2:
76:1b:41:cf:6e:0b:26:0a:c7:53:e0:e9:d7:de:8e:a0:c1:86:
eb:eb:6e:2b:b4:83:b9:aa:13:0e:62:df:4c:e7:ac:2d:de:61:
7a:cd:f0:7c:1d:00:6a:d4:e8:87:13:ba:0f:4e:ca:4d:ae:e7:
2e:05:94:b7:61:59:b7:16:66:8c:f0:94:d4:8e:92:41:72:d1:
b8:bb:fc:76:5d:ba:a7:3b:5e:bc:37:0d:32:f1:86:aa:db:02:
f5:40:e3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:54:13 2026 by rpki-client