Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/yhA5SkfU33MaaK64LA4qJ6fKIOk.roa
File: yhA5SkfU33MaaK64LA4qJ6fKIOk.roa (raw, json)
Hash identifier: gHXhS/uxgQXSniJ1OIZqcILGsOqxK9GSizYExtFb9u4=
Subject key identifier: CA:10:39:4A:47:D4:DF:73:1A:68:AE:B8:2C:0E:2A:27:A7:CA:20:E9
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A0C8010F22B24C2708D5E6A81B7DEB5B2D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/yhA5SkfU33MaaK64LA4qJ6fKIOk.roa
Signing time: Tue 22 Sep 2026 07:25:07 +0000
ROA not before: Tue 22 Sep 2026 07:25:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 27411
IP address blocks: 45.137.87.0/24 maxlen: 24
45.152.197.0/24 maxlen: 24
2a0c:7886:b4::/48 maxlen: 48
2a10:67c7::/32 maxlen: 32
2a10:68c6::/32 maxlen: 32
2a13:9280::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:01:0f:22:b2:4c:27:08:d5:e6:a8:1b:7d:eb:5b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 22 07:25:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca10394a47d4df731a68aeb82c0e2a27a7ca20e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:51:01:8f:de:fd:ad:64:99:76:7b:81:34:13:
e6:ca:c5:a7:c7:d4:f0:6f:91:fa:9c:7a:c7:2f:8a:
52:73:11:be:11:d0:d2:4c:76:b4:76:97:da:30:1d:
f9:e4:05:5f:a1:d2:f6:12:04:c6:3b:65:2b:0a:d0:
b0:84:e1:ff:8d:a1:08:91:64:95:74:65:93:51:06:
ff:a8:81:ad:40:94:d4:8d:9e:d0:b0:f8:06:a3:4d:
89:4b:b9:95:09:10:48:35:12:d4:5f:2a:80:1b:02:
0f:98:51:9f:13:fb:3a:85:2d:7b:3b:b3:d5:9d:3e:
bd:ff:c7:d2:85:8a:9a:e4:b1:3d:e8:29:f7:1d:f0:
6a:54:25:dc:bc:87:ec:d6:7b:c0:b8:62:5a:08:c4:
5b:41:7f:f2:cc:16:7e:c4:23:df:bb:5e:bf:06:32:
d3:de:fe:25:8c:37:a7:c5:27:7e:82:2b:0d:4e:74:
5c:85:b7:8c:f5:63:7f:9b:f7:37:e3:b0:91:cc:a5:
4a:5b:ba:4e:af:ba:fe:4d:30:dc:b0:6f:50:ec:3a:
6d:d1:29:1e:68:1b:13:7d:81:5d:0d:83:67:b3:65:
31:9e:04:84:d7:09:f1:c4:00:15:d0:dd:c5:99:4c:
36:3f:76:47:7a:58:97:de:78:c3:cb:7c:73:54:ed:
cf:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:10:39:4A:47:D4:DF:73:1A:68:AE:B8:2C:0E:2A:27:A7:CA:20:E9
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/yhA5SkfU33MaaK64LA4qJ6fKIOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.87.0/24
45.152.197.0/24
IPv6:
2a0c:7886:b4::/48
2a10:67c7::/32
2a10:68c6::/32
2a13:9280::/32
Signature Algorithm: sha256WithRSAEncryption
9e:df:d1:32:b9:eb:8b:d4:94:d7:2a:19:6b:e7:04:1f:cc:34:
af:0a:2d:7a:14:63:41:dc:7c:1a:8d:34:6e:11:1b:3f:be:bf:
b7:06:3f:11:5e:28:5c:8c:b8:8e:97:2b:55:70:81:3a:48:3f:
db:90:7f:70:58:09:02:b3:6a:fb:89:1e:6f:38:25:b6:13:f4:
40:94:6c:20:6d:47:34:3c:4c:56:dc:b8:e0:e5:38:3c:41:25:
d8:29:bf:e9:37:0e:ea:7c:4f:cc:7d:58:43:20:f5:3b:d2:d9:
e8:75:71:f6:c5:5c:b2:d9:53:3e:c9:33:95:97:76:38:7b:f4:
4d:91:3d:2f:d1:ff:81:14:2c:7d:2d:c6:c1:b0:b2:19:fd:78:
81:b3:ef:48:bd:d4:30:f3:1d:8c:d7:08:f0:07:13:f5:e8:6e:
cc:e8:89:03:ff:3e:ad:77:02:ec:71:06:79:08:83:bc:87:00:
9b:8e:25:5b:0c:bb:e6:7e:46:8f:e9:18:cb:f4:4d:ed:d2:de:
12:1c:3a:cd:a5:22:08:b4:67:15:ed:c9:96:46:a2:03:85:d7:
b7:ef:a2:0e:fb:e4:d9:e6:c0:1d:26:23:3e:d9:e5:c3:89:ff:
c4:6f:cd:7d:8d:30:e1:35:6c:18:ca:08:d2:96:77:ac:a6:20:
72:88:76:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:08:27 2026 by rpki-client