Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/yuLI27hgECA5tet06dAkpfL3uE4.roa
File: yuLI27hgECA5tet06dAkpfL3uE4.roa (raw, json)
Hash identifier: V33eCOIZF8Su0WA9Xwaow5xHjH6RkE3EQ95auFCv2f0=
Subject key identifier: CA:E2:C8:DB:B8:60:10:20:39:B5:EB:74:E9:D0:24:A5:F2:F7:B8:4E
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A1B103A5401BECB6F4A050A4A050FBA605
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/yuLI27hgECA5tet06dAkpfL3uE4.roa
Signing time: Fri 06 Nov 2026 13:19:28 +0000
ROA not before: Fri 06 Nov 2026 13:19:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213529
IP address blocks: 45.94.45.0/24 maxlen: 24
193.5.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b1:03:a5:40:1b:ec:b6:f4:a0:50:a4:a0:50:fb:a6:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 6 13:19:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cae2c8dbb860102039b5eb74e9d024a5f2f7b84e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:20:7f:29:4f:c7:cd:b1:3d:13:6f:68:72:0d:
be:13:b1:be:1b:9d:26:1d:91:12:eb:fd:c2:de:a4:
22:9f:e6:1e:5e:75:64:32:cc:36:8d:67:7d:85:61:
4f:0c:32:5e:af:41:8c:b3:ec:2f:c8:8a:45:09:78:
bb:e0:80:14:30:ab:75:5d:93:68:de:b7:25:c3:30:
4c:ed:d4:2d:ad:86:6d:4d:eb:b2:98:a4:e5:91:d9:
09:b6:a6:a3:73:d8:59:0b:6c:be:e4:61:90:68:14:
6c:b2:d8:ce:91:0f:35:72:7a:f4:4b:54:05:3b:a0:
e4:2f:92:39:69:08:1d:2a:bb:10:6e:5d:f9:ee:96:
bd:11:3a:3d:02:5a:f1:48:69:fc:ac:b1:cf:62:93:
f3:d0:c8:c2:ed:14:0d:ea:ab:ae:33:88:1b:f6:c1:
99:ae:80:b7:82:e3:3b:41:ab:0e:13:9f:7f:29:1c:
65:0f:6b:25:f5:f4:19:7f:68:c8:05:82:61:03:4e:
8c:03:e3:b8:3f:68:d5:02:23:d2:d2:e8:b3:16:86:
55:a2:6e:c1:d8:71:e6:78:98:0a:15:da:ed:64:23:
ca:d9:87:1c:ef:0f:40:74:36:f1:ac:b1:8c:d7:3d:
aa:27:95:ca:72:79:a5:f0:51:7d:19:bc:0a:f2:40:
56:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E2:C8:DB:B8:60:10:20:39:B5:EB:74:E9:D0:24:A5:F2:F7:B8:4E
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/yuLI27hgECA5tet06dAkpfL3uE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.45.0/24
193.5.251.0/24
Signature Algorithm: sha256WithRSAEncryption
42:9e:66:d1:34:dc:f9:7e:a5:83:40:a0:f2:bb:1a:42:c1:98:
20:a8:f1:7d:da:0b:31:6d:2a:a1:d9:80:2f:64:2b:ef:5c:18:
be:6b:db:51:37:ee:c0:50:52:97:80:e9:d8:4c:2e:a0:f4:e5:
f7:ac:16:9f:c4:f8:94:74:07:f8:d0:a6:84:7f:b7:ac:44:cc:
4f:22:68:50:dd:ce:aa:4e:cb:11:27:7e:b9:75:8e:d1:18:dd:
68:3d:21:35:34:10:60:87:2d:3d:57:4c:d9:ae:1b:35:b7:9b:
28:0b:9e:0d:7b:0e:fa:24:00:87:04:ab:18:c0:d6:73:e0:1e:
c2:e4:d9:0b:16:71:b7:cc:7e:6c:0a:c7:96:e1:96:a9:a8:a2:
ba:1b:17:1d:08:a1:aa:8e:7d:24:36:13:32:15:de:d1:d1:6f:
37:ef:8a:f7:03:79:ad:d0:de:91:ea:29:7c:18:ec:f7:fd:94:
55:65:e6:1f:3e:cb:35:c8:30:27:1f:51:b3:3a:4c:d1:7f:6e:
ce:cf:e6:c4:08:90:c0:7a:c2:c0:18:ee:65:5b:9e:e0:26:c2:
fd:70:e6:dd:e4:6f:4b:1f:d4:7f:f4:20:79:29:60:a6:59:c8:
1f:c4:15:14:1b:98:65:d6:15:99:00:1a:20:99:cf:b4:63:1f:
cf:b2:53:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:48:57 2026 by rpki-client