Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/73AErX_73YyGkNPXNnZFNU97Je0.roa
File: 73AErX_73YyGkNPXNnZFNU97Je0.roa (raw, json)
Hash identifier: lP6FJD5l5eJwxen4JcoLSWRH/MUB39vEigq1k+kMTfI=
Subject key identifier: EF:70:04:AD:7F:FB:DD:8C:86:90:D3:D7:36:76:45:35:4F:7B:25:ED
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A0A47508E503175B0A1EF8234D9B16AFDD
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/73AErX_73YyGkNPXNnZFNU97Je0.roa
Signing time: Tue 15 Sep 2026 09:45:28 +0000
ROA not before: Tue 15 Sep 2026 09:45:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205544
IP address blocks: 45.153.20.0/24 maxlen: 24
2a09:17c0:b19a::/48 maxlen: 48
2a0e:1a83:88::/48 maxlen: 48
2a0f:1206:77::/48 maxlen: 48
2a0f:1540::/29 maxlen: 29
2a0f:1640::/29 maxlen: 29
2a0f:1940::/29 maxlen: 29
2a0f:2840::/29 maxlen: 29
2a0f:2940::/29 maxlen: 29
2a0f:2a40::/29 maxlen: 29
2a0f:2dc0::/29 maxlen: 29
2a0f:2e40::/29 maxlen: 29
2a0f:30c0::/29 maxlen: 29
2a0f:3140::/29 maxlen: 29
2a0f:3540::/29 maxlen: 29
2a0f:3740::/29 maxlen: 29
2a0f:d9c0::/29 maxlen: 29
2a0f:e1c7:100::/48 maxlen: 48
2a0f:e202:97::/48 maxlen: 48
2a0f:e440::/29 maxlen: 29
2a11:3240::/29 maxlen: 29
2a11:4800::/29 maxlen: 29
2a11:8700::/29 maxlen: 29
2a11:e580::/29 maxlen: 29
2a12:3f00::/29 maxlen: 29
2a12:4b00::/29 maxlen: 29
2a12:5900::/29 maxlen: 29
2a12:cd00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:75:08:e5:03:17:5b:0a:1e:f8:23:4d:9b:16:af:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 15 09:45:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef7004ad7ffbdd8c8690d3d7367645354f7b25ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a4:56:4a:9c:a5:1b:14:a1:a5:18:bb:2e:3d:
0b:35:f6:40:e0:a5:29:d0:52:c5:20:7b:82:c7:01:
eb:1a:7f:5a:50:1d:c3:de:9e:04:75:05:9c:6f:de:
5d:aa:f8:08:ce:60:3d:27:c6:1a:48:21:cd:13:a5:
76:8d:81:5b:24:4e:e8:9d:bc:7c:7d:41:9b:6b:eb:
95:9d:5f:5b:34:a9:e3:5e:fc:db:89:6b:45:0b:79:
35:09:9d:cc:54:02:af:67:e4:a4:d1:b2:22:44:b2:
c7:05:e8:9c:f0:57:fd:c4:13:fd:d0:9f:c6:d9:c9:
d1:6e:d6:8b:bb:9f:d8:5e:a4:93:e8:c2:45:dd:a7:
3a:8d:2c:4e:6a:ca:2a:89:78:bb:34:c0:c3:5a:95:
2c:8d:f8:ab:28:ac:28:94:ab:2c:41:60:1b:4e:d9:
93:29:da:86:7a:ff:47:01:97:12:e9:94:03:38:ba:
a3:4d:cc:d7:6c:b3:04:de:da:2b:e2:81:17:07:83:
e0:fd:86:9a:e9:78:9f:ab:30:cb:84:20:98:27:bc:
1b:8d:a0:ce:11:b9:33:27:a6:91:af:26:fb:e1:b6:
37:f1:d6:8e:33:cd:1b:dd:8b:e5:1e:28:b5:c6:ea:
0e:fa:dc:58:2d:91:e8:4f:09:04:e7:fa:16:11:a5:
05:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:70:04:AD:7F:FB:DD:8C:86:90:D3:D7:36:76:45:35:4F:7B:25:ED
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/73AErX_73YyGkNPXNnZFNU97Je0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.20.0/24
IPv6:
2a09:17c0:b19a::/48
2a0e:1a83:88::/48
2a0f:1206:77::/48
2a0f:1540::/29
2a0f:1640::/29
2a0f:1940::/29
2a0f:2840::/29
2a0f:2940::/29
2a0f:2a40::/29
2a0f:2dc0::/29
2a0f:2e40::/29
2a0f:30c0::/29
2a0f:3140::/29
2a0f:3540::/29
2a0f:3740::/29
2a0f:d9c0::/29
2a0f:e1c7:100::/48
2a0f:e202:97::/48
2a0f:e440::/29
2a11:3240::/29
2a11:4800::/29
2a11:8700::/29
2a11:e580::/29
2a12:3f00::/29
2a12:4b00::/29
2a12:5900::/29
2a12:cd00::/29
Signature Algorithm: sha256WithRSAEncryption
69:03:97:0f:ad:ab:9e:72:08:f6:2b:8f:42:14:00:4b:48:f5:
5a:83:76:5b:5c:bd:d5:3d:5d:47:ae:8f:91:df:d9:3a:9b:4b:
cb:bc:6e:19:d4:18:46:2b:a5:ec:8d:66:22:f0:88:33:9c:b2:
e6:5b:f3:b3:e9:6d:78:78:bc:77:10:5d:13:24:b4:01:0c:4b:
58:ba:02:26:c4:5b:77:98:eb:9f:d4:2b:8d:f2:d1:ee:c1:83:
9d:05:a8:f2:b5:ba:7b:be:38:18:8a:56:4e:65:52:9c:e2:fd:
39:f9:98:0a:42:f0:9d:3a:a2:22:00:61:d4:37:7f:1e:b9:a8:
d9:96:d8:e2:3d:2a:c5:3f:be:55:8b:c9:10:0e:76:02:06:6e:
06:a2:2c:0d:8f:bc:3c:fd:db:9e:bf:f2:e2:81:50:be:88:5a:
ac:62:78:61:c8:e3:9b:85:18:ba:6f:60:9b:2e:ac:81:70:4d:
60:ca:32:e4:62:a5:e1:b6:d5:ac:8f:71:7f:a4:aa:c4:f7:ac:
b1:83:95:a3:00:14:83:d6:37:87:73:fb:94:e1:80:46:bf:50:
fc:94:8f:04:eb:6a:de:18:ee:3e:43:73:08:12:4d:ce:9d:bf:
82:07:d1:c6:96:2c:04:2c:3a:f5:8d:8f:fa:e8:cd:c2:fc:41:
4a:2b:47:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:48:53 2026 by rpki-client