Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xISijrcnBrhiVAmZFgBm0aEhdGY.roa
File: xISijrcnBrhiVAmZFgBm0aEhdGY.roa (raw, json)
Hash identifier: lzJ8WoJcMyiPs8r3QDrxl3RYlqHxZus4zbxzAmAbhKI=
Subject key identifier: C4:84:A2:8E:B7:27:06:B8:62:54:09:99:16:00:66:D1:A1:21:74:66
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019D2542F89E510BD8DE634EB93DA4A23D66
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xISijrcnBrhiVAmZFgBm0aEhdGY.roa
Signing time: Wed 25 Mar 2026 13:50:39 +0000
ROA not before: Wed 25 Mar 2026 13:50:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199929
IP address blocks: 45.134.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:42:f8:9e:51:0b:d8:de:63:4e:b9:3d:a4:a2:3d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 25 13:50:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c484a28eb72706b862540999160066d1a1217466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:28:e6:6f:a7:38:45:49:d7:2b:cc:6c:21:e2:
43:3d:02:58:b0:a2:ed:b7:78:7c:5c:ff:05:78:42:
e0:16:19:b7:5b:55:f0:a7:67:8f:d7:0c:b9:0c:92:
2a:58:18:68:70:24:0b:a4:f4:ee:3f:35:c3:b2:5a:
c0:54:f8:40:a5:d4:f6:4e:e1:17:3f:55:36:fe:d8:
be:44:5a:a3:6f:b3:dd:e9:bc:2c:ab:50:67:4f:53:
5c:b3:4d:40:ed:68:e1:a6:47:d1:5f:26:1e:86:75:
62:7e:ef:60:99:35:e5:25:37:b8:ed:55:22:ce:3d:
ea:95:23:8a:fe:51:e2:bd:58:bf:3d:d8:38:b9:1a:
c3:d6:0e:38:91:99:bd:e0:af:10:03:c9:ab:8a:f1:
f9:94:5d:bd:04:38:b4:8d:df:42:ee:45:92:46:4e:
79:23:66:fb:9c:2b:7a:ee:37:0d:bb:d3:5d:28:36:
d9:0d:1e:c8:bf:c0:c9:9c:24:17:3c:96:83:b3:ef:
a7:ed:45:ea:98:4d:1a:f0:a6:39:64:e5:16:96:db:
a7:84:ec:0f:f5:dc:18:c1:e1:d5:c5:51:4a:87:d7:
b5:36:3f:38:b6:15:e7:68:ac:6e:2f:50:0d:d3:5c:
ac:69:36:2f:a6:3d:4e:4b:0a:f2:f3:c0:f2:b6:62:
0a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:84:A2:8E:B7:27:06:B8:62:54:09:99:16:00:66:D1:A1:21:74:66
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xISijrcnBrhiVAmZFgBm0aEhdGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.185.0/24
Signature Algorithm: sha256WithRSAEncryption
68:aa:bc:5a:d1:4b:85:15:db:91:4a:86:65:d7:cd:a6:b9:a1:
8f:a0:88:2b:7b:9d:4c:4a:95:66:a1:28:a6:b1:af:ff:8d:09:
1f:f7:6d:e7:e8:4f:97:8f:dc:1f:38:ae:40:99:5c:39:63:27:
7c:cb:3e:e7:fb:af:f7:a4:64:11:cb:29:e8:dc:ba:1c:45:17:
3e:64:5c:c9:0f:b1:4d:a7:47:b2:98:c1:c2:5a:8c:cf:a2:a4:
a4:08:41:ef:c0:d3:eb:7a:18:6b:a0:7f:dd:bb:8f:9f:34:0b:
2f:20:30:6c:05:87:50:9b:92:6a:a9:ca:5e:34:93:0d:b0:70:
20:85:01:26:4c:3d:58:0f:1f:73:22:71:03:ed:d0:6c:5c:6c:
dc:08:87:2f:e1:a1:1a:99:8f:8d:76:13:26:69:3a:c0:38:4a:
5f:ae:97:e8:b2:12:9f:c0:cd:e1:5d:57:f9:c5:22:e0:f0:63:
2f:11:95:5f:f9:0a:56:5c:5a:81:25:ff:a5:4f:56:84:b9:c4:
15:b4:b1:1d:f0:13:f7:cb:a9:38:2b:3a:a2:0d:0e:24:0e:1c:
33:6e:46:6f:26:e9:1c:76:50:d1:c5:36:85:e8:62:db:46:45:
c0:3e:99:aa:29:af:96:0c:bd:3d:e1:95:6d:ff:9d:6d:2d:ff:
15:c2:e7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:49:29 2026 by rpki-client