Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/7Dwg5wFGQqErSuNtav6wSEytWn0.roa
File: 7Dwg5wFGQqErSuNtav6wSEytWn0.roa (raw, json)
Hash identifier: KeyWkMo6tHKMd0UPR13FjorhMTn+dRjqc0BqAQPkOvs=
Subject key identifier: EC:3C:20:E7:01:46:42:A1:2B:4A:E3:6D:6A:FE:B0:48:4C:AD:5A:7D
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 019C66956713AA05B4B112C54B2F46C0D0CF
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/7Dwg5wFGQqErSuNtav6wSEytWn0.roa
Signing time: Mon 16 Feb 2026 13:13:13 +0000
ROA not before: Mon 16 Feb 2026 13:13:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26548
IP address blocks: 45.140.206.0/23 maxlen: 23
45.145.128.0/23 maxlen: 23
45.145.130.0/23 maxlen: 23
45.148.232.0/23 maxlen: 23
45.148.234.0/23 maxlen: 23
45.155.166.0/23 maxlen: 23
83.142.52.0/23 maxlen: 23
83.142.54.0/23 maxlen: 23
193.202.12.0/23 maxlen: 23
193.202.14.0/23 maxlen: 23
193.202.80.0/23 maxlen: 23
193.202.86.0/23 maxlen: 23
193.203.8.0/23 maxlen: 23
212.119.46.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:66:95:67:13:aa:05:b4:b1:12:c5:4b:2f:46:c0:d0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Feb 16 13:13:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec3c20e7014642a12b4ae36d6afeb0484cad5a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f1:08:4c:cc:8c:85:5d:8f:bd:65:44:7f:6c:
c6:64:ac:e1:0b:21:ca:e5:cd:4f:6f:63:c3:a2:6f:
1f:d1:a6:17:21:ed:15:7c:c2:8c:69:e1:7c:2b:88:
74:e7:21:33:f6:96:11:95:fd:8b:07:52:54:47:30:
03:67:05:d5:ea:34:96:ff:1f:61:63:69:8b:60:ea:
24:5e:33:d5:fa:43:6a:88:1e:95:b0:e2:b1:f0:f7:
67:cc:f1:a4:51:76:fd:e8:ff:c5:f9:cf:10:ca:e1:
50:f2:aa:a8:9a:ee:75:48:79:23:78:aa:b9:32:40:
ba:17:f5:e0:a5:97:1d:e9:46:2c:99:16:15:1d:52:
cd:7c:ce:3d:a9:e1:84:21:ea:77:24:f3:83:66:17:
ee:f7:05:0e:2d:6e:82:f4:b8:6c:3f:4c:d7:30:ea:
13:6b:03:ca:c7:41:56:63:6f:9b:78:25:3c:8e:d7:
bc:3b:ee:30:b4:0c:24:f2:c8:3c:64:18:75:61:5f:
dc:aa:b5:ba:aa:6b:ae:d0:18:4e:48:02:19:ae:fd:
53:c2:13:cb:42:78:b2:80:14:36:5f:cf:bd:e4:b3:
dd:59:36:51:aa:6e:6f:9b:dd:fe:d8:d4:53:5b:52:
d8:1d:f9:69:95:d2:1d:cd:44:eb:ad:b0:17:fe:8e:
45:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3C:20:E7:01:46:42:A1:2B:4A:E3:6D:6A:FE:B0:48:4C:AD:5A:7D
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/7Dwg5wFGQqErSuNtav6wSEytWn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.206.0/23
45.145.128.0/22
45.148.232.0/22
45.155.166.0/23
83.142.52.0/22
193.202.12.0/22
193.202.80.0/23
193.202.86.0/23
193.203.8.0/23
212.119.46.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:d7:a7:e2:64:80:6f:0a:72:b2:2d:da:ea:ea:9f:47:f4:a3:
c9:f9:91:ed:83:af:ba:aa:71:c1:68:cf:6b:d0:ef:1f:bf:9b:
71:f9:2b:8e:5b:4c:e5:d6:0f:46:e2:95:79:6f:06:a1:f1:41:
a1:11:97:32:68:61:9f:ae:59:e4:11:e7:e4:af:01:01:c9:a2:
c5:a9:92:27:aa:b3:e9:0c:a6:46:14:9e:c9:b9:f2:61:c0:66:
dc:cb:26:49:68:ad:5e:c0:55:c5:1a:5f:07:93:08:8e:6f:f7:
b9:df:be:9b:28:1f:82:d1:8c:f4:bb:e5:e4:fa:98:bb:a2:d5:
c9:5a:34:7e:3c:60:d0:f4:09:06:14:43:20:de:ee:45:c6:c7:
48:00:b4:eb:f6:79:51:1f:b9:a7:61:1c:2a:d1:5c:ff:4f:0b:
9c:ad:aa:89:b7:10:bd:ac:2e:5e:a6:4d:54:5d:30:3f:28:06:
6e:ec:f4:74:d4:f9:dc:85:ef:db:18:35:e2:51:1d:d0:33:58:
fc:7c:98:0c:6e:56:03:e3:06:a4:ef:1c:d2:2f:21:92:ae:47:
41:d7:9d:d3:fb:e8:7e:3b:7a:44:85:8d:af:27:2e:09:0f:8b:
f8:36:12:81:c9:e7:21:1f:0c:37:58:e9:b2:2f:b1:3a:47:03:
09:66:e5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:41:22 2026 by rpki-client