Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/4tiUELWbSTAyIn0P7bD-q60sgUA.roa
File: 4tiUELWbSTAyIn0P7bD-q60sgUA.roa (raw, json)
Hash identifier: t3+ruf40/Kkac70ypRsg0fw1w7zPWoSGWb+7SuVj32I=
Subject key identifier: E2:D8:94:10:B5:9B:49:30:32:22:7D:0F:ED:B0:FE:AB:AD:2C:81:40
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019FACEE70786B407B0E7B226E2C00A72BB5
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/4tiUELWbSTAyIn0P7bD-q60sgUA.roa
Signing time: Wed 29 Jul 2026 08:12:15 +0000
ROA not before: Wed 29 Jul 2026 08:12:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219464
IP address blocks: 45.94.36.0/24 maxlen: 24
45.155.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ee:70:78:6b:40:7b:0e:7b:22:6e:2c:00:a7:2b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 29 08:12:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e2d89410b59b493032227d0fedb0feabad2c8140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:aa:11:d3:6d:21:78:44:be:e6:db:8e:d7:6c:
0a:72:15:3c:cc:af:89:3c:34:52:99:a5:58:6b:70:
97:44:cc:61:6b:64:fa:8e:a9:cd:44:22:e3:6f:05:
cf:99:47:11:cc:1c:4d:6e:bb:47:af:6f:ba:19:34:
f8:39:48:1f:42:a1:37:09:6b:ba:47:6e:4a:5c:b6:
2d:8d:b8:ea:99:8d:98:e1:36:d0:cf:81:35:49:cf:
f9:d7:04:53:82:25:21:98:71:bb:3e:5c:7f:bb:9e:
43:b6:ae:36:1f:29:3b:1d:b7:8f:9e:be:67:80:b9:
e3:85:b3:fe:11:c4:d8:7f:8e:90:23:6b:d7:4a:9a:
12:0e:0a:59:80:76:6c:03:9b:25:fc:8c:46:aa:1f:
4c:d6:15:62:ee:02:da:02:99:6c:ef:8e:f5:05:0e:
d3:ed:7d:46:69:7f:65:ef:c3:0d:e6:d6:80:ce:06:
0f:f7:62:8c:2d:42:2e:31:60:72:c2:ee:f0:a4:5c:
02:23:8f:5b:22:10:ef:45:dd:2d:84:45:54:2a:74:
5b:f8:ee:ad:d3:04:ce:4a:2f:11:e8:72:45:ed:c7:
e4:6a:80:bb:ca:e1:a3:cf:2a:8c:ef:0e:78:ef:e7:
4c:a5:5f:73:b6:3f:0d:76:44:0d:6a:95:c7:7a:85:
90:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D8:94:10:B5:9B:49:30:32:22:7D:0F:ED:B0:FE:AB:AD:2C:81:40
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/4tiUELWbSTAyIn0P7bD-q60sgUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.36.0/24
45.155.70.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:36:3c:55:dc:83:ff:c2:40:f8:15:5d:4a:cc:bc:0c:cf:59:
b9:26:9c:e6:c2:72:59:6d:8b:0e:54:00:e4:48:55:d6:30:45:
e7:e3:e3:a1:6f:23:8d:29:e9:58:e2:d2:9c:f2:5e:f0:0b:57:
d7:ad:b6:a2:e6:da:30:45:86:0d:30:db:63:9f:82:18:7f:f8:
16:ea:a4:e1:08:54:7f:c9:73:35:4a:69:21:d0:3a:09:ac:8f:
d2:09:0e:60:e8:8c:95:d2:3b:0b:4a:3b:2d:93:2f:eb:16:5d:
65:49:5c:66:67:19:51:fc:3e:f3:4d:87:70:22:5f:76:9d:26:
21:07:a4:01:6d:67:ec:85:5c:1e:54:50:4c:58:23:1c:37:1a:
44:a8:91:93:f2:b1:c8:df:17:f5:e8:96:a0:b0:f3:ac:d9:5f:
ed:05:67:5f:60:7b:cd:4c:c2:96:fb:84:47:55:8a:c9:07:56:
ed:e7:91:6b:3e:f7:c2:dd:4d:23:4c:ea:c7:e5:08:46:96:c3:
d1:70:e2:a2:fe:ef:d9:5c:d9:79:7f:12:23:33:e8:92:df:36:
3e:cf:34:9c:68:36:95:c3:f3:cb:eb:ea:2e:e5:b0:8e:69:f0:
3a:e8:98:04:f8:e6:5a:28:da:25:ca:15:ad:4f:ca:b2:61:c3:
82:18:0d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:20:36 2026 by rpki-client