Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/u-k4GTlOR4eaoLyiz_tkjtue_A4.roa
File: u-k4GTlOR4eaoLyiz_tkjtue_A4.roa (raw, json)
Hash identifier: QGdUckDCMk7EGOCpam7irNYjoucBouQDm74ubfso+Fk=
Subject key identifier: BB:E9:38:19:39:4E:47:87:9A:A0:BC:A2:CF:FB:64:8E:DB:9E:FC:0E
Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial: 019FA8DC8EF08B1B1C78F70D67EF5D0E59FA
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/u-k4GTlOR4eaoLyiz_tkjtue_A4.roa
Signing time: Tue 28 Jul 2026 13:14:14 +0000
ROA not before: Tue 28 Jul 2026 13:14:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49505
IP address blocks: 45.129.79.0/24 maxlen: 24
46.150.240.0/24 maxlen: 24
46.150.241.0/24 maxlen: 24
46.150.242.0/24 maxlen: 24
46.150.243.0/24 maxlen: 24
46.150.244.0/24 maxlen: 24
46.150.245.0/24 maxlen: 24
46.150.246.0/24 maxlen: 24
46.150.247.0/24 maxlen: 24
46.150.250.0/24 maxlen: 24
46.150.251.0/24 maxlen: 24
46.150.252.0/24 maxlen: 24
46.150.253.0/24 maxlen: 24
46.150.254.0/24 maxlen: 24
46.150.255.0/24 maxlen: 24
176.103.80.0/24 maxlen: 24
176.103.81.0/24 maxlen: 24
176.103.84.0/24 maxlen: 24
176.103.85.0/24 maxlen: 24
176.103.86.0/24 maxlen: 24
176.103.87.0/24 maxlen: 24
176.103.88.0/24 maxlen: 24
176.103.89.0/24 maxlen: 24
176.103.90.0/24 maxlen: 24
176.103.91.0/24 maxlen: 24
176.103.92.0/24 maxlen: 24
176.103.93.0/24 maxlen: 24
176.103.94.0/24 maxlen: 24
176.103.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:dc:8e:f0:8b:1b:1c:78:f7:0d:67:ef:5d:0e:59:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Validity
Not Before: Jul 28 13:14:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bbe93819394e47879aa0bca2cffb648edb9efc0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:06:98:79:6e:66:10:98:ce:98:c0:3e:fc:62:
72:28:21:a4:5d:89:dd:e7:91:59:bb:e1:24:ab:06:
78:71:df:89:32:7d:57:52:20:83:26:cf:9c:ff:db:
6f:07:11:28:e0:f0:8b:b1:f8:d8:5d:5e:97:d9:aa:
21:af:46:01:7e:de:b0:99:a6:02:fa:09:17:5a:14:
9f:a7:6f:90:88:39:de:ce:81:85:32:e8:03:be:84:
b5:98:0d:70:0c:9c:7c:81:41:c1:ca:af:8f:08:12:
d6:13:e3:40:4a:6e:99:4f:61:32:65:16:86:c7:28:
8e:62:88:17:d6:25:34:e1:7e:0a:7d:05:83:bc:be:
4e:ee:d0:4f:ed:97:9e:d6:db:c5:fc:c7:1e:f6:28:
d3:ab:64:52:d1:d5:62:9f:90:ed:2f:0d:9e:7d:22:
fd:4f:05:ad:d8:93:15:b6:04:3a:9a:66:91:4c:2d:
02:c5:4e:55:b6:c7:2c:71:f0:87:ce:df:bb:a4:e9:
31:d7:be:52:71:9d:e7:16:d2:79:9d:dd:3f:d7:8f:
4e:01:15:fa:b1:80:81:77:dd:e6:ba:4c:ab:2b:98:
21:2e:de:f6:f4:3e:ba:1a:d3:2a:61:d6:31:bd:3c:
64:4c:9c:62:ec:1b:7e:a9:b0:19:02:c3:59:7b:62:
f7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E9:38:19:39:4E:47:87:9A:A0:BC:A2:CF:FB:64:8E:DB:9E:FC:0E
X509v3 Authority Key Identifier:
keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/u-k4GTlOR4eaoLyiz_tkjtue_A4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.79.0/24
46.150.240.0/21
46.150.250.0-46.150.255.255
176.103.80.0/23
176.103.84.0-176.103.95.255
Signature Algorithm: sha256WithRSAEncryption
8f:6f:dc:24:ad:3f:d8:4e:82:1f:33:70:eb:79:6a:3d:34:8a:
7c:fd:bc:3b:34:56:06:85:34:b6:d2:b7:a5:92:5c:65:18:2c:
1b:00:4a:dc:75:89:7d:65:6a:10:8d:d6:5a:07:18:c4:44:ec:
f3:d5:53:35:24:b2:6a:ff:fd:9e:d9:36:ba:f8:4c:d6:e8:29:
45:7c:95:ce:5b:f3:4d:44:e1:82:a0:cd:2c:e2:66:1f:3f:e8:
6f:9a:10:4b:58:91:65:be:d9:c3:34:14:63:61:d0:75:9f:57:
d6:59:0f:69:22:74:ac:49:5c:ba:42:8c:d6:ed:7d:78:a8:0e:
f9:b0:a2:3f:b7:66:ac:59:67:1e:ad:ba:c3:4a:af:59:c1:97:
3a:d2:dd:b5:58:37:ae:62:79:e1:6c:11:ce:df:46:01:c9:e6:
86:18:92:54:73:02:5d:6a:82:d5:df:f7:d5:e3:95:63:90:ab:
2d:fa:5f:fe:89:cd:ed:f0:60:d0:66:77:78:40:61:c6:8d:b7:
8e:40:df:04:6c:48:35:24:92:27:c5:de:a4:7f:c1:cf:2c:77:
46:d9:a0:3d:50:68:eb:cb:57:57:db:84:b1:b7:e0:00:1b:a0:
32:b9:e4:1d:5b:be:01:72:72:ae:06:9d:a5:3e:6f:05:21:4c:
75:2b:d4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:22:42 2026 by rpki-client