Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/rHM-c8gvOCQEeTGFQmvS1l9deSU.roa
File: rHM-c8gvOCQEeTGFQmvS1l9deSU.roa (raw, json)
Hash identifier: NSnBldgcCqgSEvHS1haIcYMdrSE23dPROWkieJTux9c=
Subject key identifier: AC:73:3E:73:C8:2F:38:24:04:79:31:85:42:6B:D2:D6:5F:5D:79:25
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A18C2FA64C3B8125191FE955F8229682BB
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/rHM-c8gvOCQEeTGFQmvS1l9deSU.roa
Signing time: Fri 30 Oct 2026 09:41:35 +0000
ROA not before: Fri 30 Oct 2026 09:41:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203273
IP address blocks: 45.9.117.0/24 maxlen: 24
45.9.118.0/24 maxlen: 24
45.9.120.0/24 maxlen: 24
45.86.245.0/24 maxlen: 24
45.94.37.0/24 maxlen: 24
45.118.248.0/24 maxlen: 24
45.118.249.0/24 maxlen: 24
45.128.78.0/24 maxlen: 24
45.129.124.0/24 maxlen: 24
45.129.126.0/24 maxlen: 24
45.130.254.0/24 maxlen: 24
45.131.212.0/24 maxlen: 24
45.131.215.0/24 maxlen: 24
45.133.209.0/24 maxlen: 24
45.133.210.0/24 maxlen: 24
45.135.38.0/24 maxlen: 24
45.137.42.0/24 maxlen: 24
45.137.43.0/24 maxlen: 24
45.139.85.0/24 maxlen: 24
45.146.88.0/24 maxlen: 24
45.146.90.0/24 maxlen: 24
45.146.91.0/24 maxlen: 24
45.151.100.0/24 maxlen: 24
45.152.202.0/24 maxlen: 24
45.154.58.0/24 maxlen: 24
45.158.185.0/24 maxlen: 24
45.158.199.0/24 maxlen: 24
45.159.144.0/24 maxlen: 24
103.91.147.0/24 maxlen: 24
103.229.31.0/24 maxlen: 24
113.30.154.0/24 maxlen: 24
167.94.163.0/24 maxlen: 24
185.99.98.0/24 maxlen: 24
185.126.64.0/24 maxlen: 24
185.164.56.0/24 maxlen: 24
193.5.64.0/24 maxlen: 24
193.39.143.0/24 maxlen: 24
193.39.209.0/24 maxlen: 24
193.39.245.0/24 maxlen: 24
193.41.86.0/24 maxlen: 24
193.58.108.0/24 maxlen: 24
194.62.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:2f:a6:4c:3b:81:25:19:1f:e9:55:f8:22:96:82:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 30 09:41:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac733e73c82f382404793185426bd2d65f5d7925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4b:78:35:94:92:a6:1f:96:da:d5:04:b7:21:
b7:37:74:55:2a:b5:a8:90:fb:27:56:90:c7:6c:a3:
c7:62:73:f9:bc:15:d3:36:aa:51:be:0b:a0:fe:d4:
5b:1e:f1:95:54:3e:6b:de:d5:fe:72:da:36:02:3d:
13:e6:b6:34:19:0f:67:3e:e9:32:8c:7a:e7:e5:16:
2b:3d:7c:f3:0a:7d:a5:0b:b2:89:a9:ec:d3:1c:69:
a8:cc:10:38:eb:7f:54:95:dd:51:67:69:7c:75:c5:
c3:46:7a:c0:1b:7a:1f:97:cb:16:1a:b8:25:67:ce:
74:9a:a3:c8:4b:f7:d4:21:a5:40:90:53:e5:86:1b:
8f:2a:36:ec:26:d4:c2:a1:eb:d6:2c:80:28:d7:2a:
a6:f5:dc:0b:5f:db:f5:99:93:dc:f2:05:1c:d1:dd:
bd:6a:2f:04:6b:90:88:ef:55:db:58:03:a6:4a:98:
71:f4:50:d1:f4:87:2b:a1:95:67:93:b5:50:26:5f:
7b:b5:fa:6e:57:66:c1:e5:4e:dd:1e:03:21:cf:be:
09:00:ba:20:a6:ac:32:a8:a0:e3:24:86:5e:3c:62:
e2:98:64:8e:4c:9e:3f:b4:c5:cf:8f:88:64:72:ee:
5f:ca:f3:4d:76:94:5f:cd:85:82:d7:fd:61:e6:d7:
55:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:73:3E:73:C8:2F:38:24:04:79:31:85:42:6B:D2:D6:5F:5D:79:25
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/rHM-c8gvOCQEeTGFQmvS1l9deSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.117.0-45.9.118.255
45.9.120.0/24
45.86.245.0/24
45.94.37.0/24
45.118.248.0/23
45.128.78.0/24
45.129.124.0/24
45.129.126.0/24
45.130.254.0/24
45.131.212.0/24
45.131.215.0/24
45.133.209.0-45.133.210.255
45.135.38.0/24
45.137.42.0/23
45.139.85.0/24
45.146.88.0/24
45.146.90.0/23
45.151.100.0/24
45.152.202.0/24
45.154.58.0/24
45.158.185.0/24
45.158.199.0/24
45.159.144.0/24
103.91.147.0/24
103.229.31.0/24
113.30.154.0/24
167.94.163.0/24
185.99.98.0/24
185.126.64.0/24
185.164.56.0/24
193.5.64.0/24
193.39.143.0/24
193.39.209.0/24
193.39.245.0/24
193.41.86.0/24
193.58.108.0/24
194.62.66.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:1e:ad:4b:96:b1:35:7a:bf:18:c2:f4:c2:3b:c1:42:64:90:
f4:8a:99:ba:40:eb:23:74:90:8e:47:04:8c:5e:90:7b:b6:9e:
21:bc:7e:ff:30:ac:2a:ad:f2:5e:29:46:03:83:d3:ac:13:be:
1d:40:fc:76:ae:e6:fa:64:21:0f:d2:f5:e9:07:cd:5b:e8:44:
3b:be:14:57:40:6d:78:ff:15:23:7a:f9:41:28:f7:6e:cb:ac:
30:9c:02:c2:8d:45:53:ca:0b:eb:05:1e:f3:4b:e6:65:60:23:
73:e1:cb:cd:3c:85:1c:e5:48:ad:c7:c0:07:29:46:8d:9a:43:
a7:71:2b:08:90:aa:50:f4:ee:c2:f5:c7:a6:6c:92:3b:03:4d:
de:18:71:0c:d0:80:0f:9f:c9:61:34:94:4c:9d:ae:5f:03:0d:
58:be:3b:02:f9:91:d8:61:a0:1a:03:a9:11:40:0d:9d:c5:54:
00:d4:26:ba:ef:49:4d:9a:f3:6b:7b:2f:ed:f5:58:12:36:1e:
e0:06:b9:a3:b4:0e:12:5e:fe:61:ac:cf:9b:78:ae:45:52:06:
c7:2b:2b:f3:f4:7d:fe:b2:ea:09:9c:61:91:74:22:78:70:90:
0d:a5:ae:7e:fd:84:e9:70:5b:f1:7c:23:1a:fa:68:3e:c5:f4:
6d:22:b2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:24:44 2026 by rpki-client