Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/tG7RmqZlrtxRvE3Bmsf4Lk2pyCQ.roa
File: tG7RmqZlrtxRvE3Bmsf4Lk2pyCQ.roa (raw, json)
Hash identifier: TArjsQG55zle8NbCAdng4sF/1DUg7sdtIJVabrqgGf0=
Subject key identifier: B4:6E:D1:9A:A6:65:AE:DC:51:BC:4D:C1:9A:C7:F8:2E:4D:A9:C8:24
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019CD8D96562F800B4795145028DE4CCC2ED
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/tG7RmqZlrtxRvE3Bmsf4Lk2pyCQ.roa
Signing time: Tue 10 Mar 2026 17:44:11 +0000
ROA not before: Tue 10 Mar 2026 17:44:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206208
IP address blocks: 45.142.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d8:d9:65:62:f8:00:b4:79:51:45:02:8d:e4:cc:c2:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 10 17:44:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b46ed19aa665aedc51bc4dc19ac7f82e4da9c824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8d:5d:7f:17:71:3b:b7:d1:66:c1:83:2f:aa:
08:db:9e:81:bd:99:75:6b:ac:b9:b5:f6:d2:4f:ac:
2a:0b:2f:77:cf:a5:9d:1f:92:7a:1b:29:70:5f:27:
34:32:af:f0:4c:94:81:c6:88:62:67:49:5a:f2:5c:
d6:d4:d3:18:64:89:9b:cf:1d:13:c4:6c:91:80:f7:
31:dc:3d:8f:10:f7:86:57:e9:35:9f:a7:42:46:ed:
d6:78:1a:50:11:c9:ed:f4:cf:56:04:5b:80:76:fc:
3c:03:d9:a5:7f:bc:8e:80:61:7f:32:5d:6b:1f:51:
97:6b:a4:0f:6a:eb:00:f1:6f:51:59:40:bf:46:26:
d8:e5:70:81:66:27:b9:f5:0e:40:a7:d5:b9:89:18:
c5:bb:f7:d1:b0:a0:b5:1e:98:e0:19:b6:34:55:6e:
a0:d3:56:3f:79:2a:f5:f9:93:70:88:b8:46:c0:bd:
e0:bd:c2:ac:6d:b1:a0:fd:56:c6:50:c6:a1:60:96:
47:3d:57:ee:17:ae:67:fe:27:23:e5:3a:fc:7a:20:
fc:2d:93:09:6d:ad:89:e7:a5:7b:ed:54:b8:8d:ba:
90:ee:4b:35:e9:95:75:52:f7:29:90:c9:85:ad:9a:
2d:19:72:b9:ba:26:16:df:40:73:a1:6f:6a:90:72:
4f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:6E:D1:9A:A6:65:AE:DC:51:BC:4D:C1:9A:C7:F8:2E:4D:A9:C8:24
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/tG7RmqZlrtxRvE3Bmsf4Lk2pyCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.30.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:7a:be:e0:51:f8:c7:f6:e8:d7:18:7e:5f:97:4c:b7:72:dd:
97:28:b1:35:3d:12:60:16:41:1f:c0:77:52:ca:62:b5:c1:53:
de:0f:af:da:fc:13:ba:d1:36:9a:7a:6e:3b:40:14:b1:9b:78:
48:e4:84:ba:99:67:be:5f:0f:f3:e1:b7:60:1d:cc:c9:ea:b2:
c6:31:59:32:d5:33:a5:83:c5:b7:1d:93:31:f1:88:1f:e1:6b:
8c:87:74:6c:06:25:12:f2:e2:1f:d8:d9:15:58:71:83:52:a6:
51:89:5c:4c:04:ee:f6:cc:67:03:fd:dc:28:81:90:a1:13:92:
5a:65:bb:05:5a:3a:01:39:00:b5:cd:ae:97:05:8f:cc:07:22:
d7:aa:7f:e9:42:a8:3a:eb:8b:d6:d0:b4:e2:4a:71:d0:4e:01:
6a:f0:ee:57:49:0a:10:e4:34:24:60:0f:23:58:a1:47:9b:e1:
9f:48:6e:91:73:31:1b:d3:18:d2:12:cf:88:65:8e:21:d0:19:
0f:c6:8a:33:78:ed:02:61:94:bb:33:94:01:f1:ed:41:85:29:
71:4f:2a:ca:97:2d:6f:d8:fe:51:5b:b0:38:bf:62:dc:3d:5b:
c1:07:0c:e4:e5:d9:d1:c9:2f:38:8c:fa:13:ac:ef:33:87:47:
1b:7a:c8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:42:15 2026 by rpki-client