Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/vUkaN5LSYhFOYGqOPAn1y4okz4E.roa
File: vUkaN5LSYhFOYGqOPAn1y4okz4E.roa (raw, json)
Hash identifier: U191b1ZUX48DxdPv/Tq3h67688S7FEiZgEVxio8Irxc=
Subject key identifier: BD:49:1A:37:92:D2:62:11:4E:60:6A:8E:3C:09:F5:CB:8A:24:CF:81
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019E1BF145836EB8BD92B364B430ABC3593E
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/vUkaN5LSYhFOYGqOPAn1y4okz4E.roa
Signing time: Tue 12 May 2026 11:27:37 +0000
ROA not before: Tue 12 May 2026 11:27:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214927
IP address blocks: 45.9.117.0/24 maxlen: 24
45.95.96.0/24 maxlen: 24
45.118.248.0/24 maxlen: 24
45.130.60.0/24 maxlen: 24
45.131.212.0/24 maxlen: 24
45.131.215.0/24 maxlen: 24
45.135.39.0/24 maxlen: 24
45.137.81.0/24 maxlen: 24
45.140.13.0/24 maxlen: 24
45.152.208.0/24 maxlen: 24
45.153.22.0/24 maxlen: 24
45.155.69.0/24 maxlen: 24
85.209.128.0/24 maxlen: 24
103.114.43.0/24 maxlen: 24
113.30.154.0/24 maxlen: 24
185.122.171.0/24 maxlen: 24
185.126.64.0/24 maxlen: 24
185.242.245.0/24 maxlen: 24
193.8.215.0/24 maxlen: 24
2a0c:7886:105::/48 maxlen: 48
2a0f:e7c6:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:35:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:f1:45:83:6e:b8:bd:92:b3:64:b4:30:ab:c3:59:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 12 11:27:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd491a3792d262114e606a8e3c09f5cb8a24cf81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9b:6a:18:06:71:50:d5:2f:b2:36:ad:4a:0d:
0a:dc:10:a4:d2:85:56:c9:df:00:ae:1f:23:19:cc:
04:ec:81:f2:2e:40:b6:03:a5:02:b5:c6:c6:39:b6:
ba:4d:15:e1:1f:8c:56:bd:75:4f:71:10:f8:9e:0c:
f7:7c:d6:49:80:fc:74:9a:1c:e4:7d:c4:98:5e:f9:
e1:a1:da:b3:83:73:4a:21:44:34:91:9e:22:81:30:
51:f8:c6:41:72:ce:b1:f9:35:16:24:b8:a5:f5:fe:
57:9e:8e:f9:c6:b3:5e:36:94:69:1b:1e:51:47:c5:
75:a2:a3:b4:63:ea:b9:dd:94:e8:be:56:8b:a3:2e:
07:72:b3:25:42:3d:a9:36:eb:b9:e4:34:c6:a2:3c:
81:ec:55:fa:63:71:88:f1:f0:40:70:95:37:72:53:
c3:7f:d9:6b:30:2d:63:3a:db:cb:f5:b0:c8:0d:92:
19:0e:24:30:c5:14:f5:c3:dd:c9:03:b5:15:0d:8b:
29:c7:cb:bc:c1:6f:40:df:51:da:28:ca:5b:ec:93:
f3:11:8c:5b:c1:cf:42:39:93:cd:47:0f:f5:1d:11:
e7:97:e3:ce:27:e9:60:c5:43:e4:8b:75:37:d7:22:
a2:f3:37:35:d4:25:4f:44:3c:15:53:f5:ed:e5:22:
52:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:49:1A:37:92:D2:62:11:4E:60:6A:8E:3C:09:F5:CB:8A:24:CF:81
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/vUkaN5LSYhFOYGqOPAn1y4okz4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.117.0/24
45.95.96.0/24
45.118.248.0/24
45.130.60.0/24
45.131.212.0/24
45.131.215.0/24
45.135.39.0/24
45.137.81.0/24
45.140.13.0/24
45.152.208.0/24
45.153.22.0/24
45.155.69.0/24
85.209.128.0/24
103.114.43.0/24
113.30.154.0/24
185.122.171.0/24
185.126.64.0/24
185.242.245.0/24
193.8.215.0/24
IPv6:
2a0c:7886:105::/48
2a0f:e7c6:1000::/48
Signature Algorithm: sha256WithRSAEncryption
3b:6a:a8:5d:5c:9f:ff:84:cd:83:41:da:b2:fc:af:d8:0b:a0:
a8:04:4b:c1:69:92:b6:9f:44:cd:c8:62:63:1d:fb:53:e4:fc:
20:18:8a:3f:df:ac:25:41:99:9f:28:d4:ab:c2:09:57:dc:b4:
32:4d:2f:c5:18:89:e5:55:d6:e3:46:12:bb:4b:24:d6:3d:15:
1d:b3:7d:ac:1e:d8:7a:35:b4:71:0e:d1:93:a0:3e:73:f9:61:
c5:6e:59:95:10:05:b5:e3:5a:95:57:85:a6:3a:d7:0d:1a:66:
00:d5:96:99:9d:af:57:d3:3b:6e:45:9c:23:6b:14:64:36:a5:
22:d3:92:10:06:05:b4:2b:a1:ac:ab:62:06:09:04:87:ae:d0:
e7:00:02:9a:55:dc:d1:4f:63:ec:91:24:09:d3:2c:44:8d:00:
7e:d9:14:17:81:b0:8d:29:7a:a6:f7:fe:68:0d:da:9a:77:39:
0a:76:2c:1b:b3:f4:f2:30:a4:7c:ec:9e:44:8e:e6:f7:67:1c:
94:2b:86:68:53:78:f0:43:a3:90:cc:98:29:f2:6d:41:f4:bb:
d2:22:42:a7:96:1f:3e:0a:63:dc:8d:40:a3:0c:54:85:d9:78:
6f:8c:c2:ce:1c:27:db:a1:fd:1e:be:01:61:82:7a:89:fc:0b:
57:fe:b3:7a
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgISAZ4b8UWDbri9krNktDCrw1k+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYwNTEyMTEyNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDQ5MWEzNzkyZDI2MjExNGU2MDZhOGUzYzA5ZjVjYjhhMjRjZjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5tqGAZxUNUvsjatSg0K3BCk0oVW
yd8Arh8jGcwE7IHyLkC2A6UCtcbGOba6TRXhH4xWvXVPcRD4ngz3fNZJgPx0mhzk
fcSYXvnhodqzg3NKIUQ0kZ4igTBR+MZBcs6x+TUWJLil9f5Xno75xrNeNpRpGx5R
R8V1oqO0Y+q53ZTovlaLoy4HcrMlQj2pNuu55DTGojyB7FX6Y3GI8fBAcJU3clPD
f9lrMC1jOtvL9bDIDZIZDiQwxRT1w93JA7UVDYspx8u8wW9A31HaKMpb7JPzEYxb
wc9COZPNRw/1HRHnl+POJ+lgxUPki3U31yKi8zc11CVPRDwVU/Xt5SJS7wIDAQAB
o4ICkjCCAo4wHQYDVR0OBBYEFL1JGjeS0mIRTmBqjjwJ9cuKJM+BMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvdlVrYU41TFNZaEZPWUdxT1BBbjF5NG9rejRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGnBggrBgEFBQcBBwEB/wSBlzCBlDB4BAIAATByAwQALQl1
AwQALV9gAwQALXb4AwQALYI8AwQALYPUAwQALYPXAwQALYcnAwQALYlRAwQALYwN
AwQALZjQAwQALZkWAwQALZtFAwQAVdGAAwQAZ3IrAwQAcR6aAwQAuXqrAwQAuX5A
AwQAufL1AwQAwQjXMBgEAgACMBIDBwAqDHiGAQUDBwAqD+fGEAAwDQYJKoZIhvcN
AQELBQADggEBADtqqF1cn/+EzYNB2rL8r9gLoKgES8FpkrafRM3IYmMd+1Pk/CAY
ij/frCVBmZ8o1KvCCVfctDJNL8UYieVV1uNGErtLJNY9FR2zfawe2Ho1tHEO0ZOg
PnP5YcVuWZUQBbXjWpVXhaY61w0aZgDVlpmdr1fTO25FnCNrFGQ2pSLTkhAGBbQr
oayrYgYJBIeu0OcAAppV3NFPY+yRJAnTLESNAH7ZFBeBsI0peqb3/mgN2pp3OQp2
LBuz9PIwpHzsnkSO5vdnHJQrhmhTePBDo5DMmCnybUH0u9IiQqeWHz4KY9yNQKMM
VIXZeG+Mws4cJ9uh/R6+AWGCeon8C1f+s3o=
-----END CERTIFICATE-----
Generated at Wed May 13 06:11:48 2026 by rpki-client