Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/79ewZwVeqJa_6OFKsaBCzlR4dQo.roa
File: 79ewZwVeqJa_6OFKsaBCzlR4dQo.roa (raw, json)
Hash identifier: GCJMc76P2hzEViDNEVW03KBb/8x6w5GCLim7u1OKXe0=
Subject key identifier: EF:D7:B0:67:05:5E:A8:96:BF:E8:E1:4A:B1:A0:42:CE:54:78:75:0A
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019C566D5C461FB00D162A4952C46EA620BC
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/79ewZwVeqJa_6OFKsaBCzlR4dQo.roa
Signing time: Fri 13 Feb 2026 09:55:33 +0000
ROA not before: Fri 13 Feb 2026 09:55:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49981
IP address blocks: 45.146.129.0/24 maxlen: 24
185.99.99.0/24 maxlen: 24
193.8.94.0/24 maxlen: 24
195.85.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:56:6d:5c:46:1f:b0:0d:16:2a:49:52:c4:6e:a6:20:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 13 09:55:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=efd7b067055ea896bfe8e14ab1a042ce5478750a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:72:23:14:8d:ee:2d:93:75:6d:f0:ef:f3:e5:
f3:03:f1:54:a3:47:07:1d:d4:4d:eb:c8:9c:d7:27:
ac:fb:44:4b:10:59:f3:1e:d3:21:9d:a7:ef:48:57:
f8:9e:37:57:4c:82:66:80:55:c1:42:9c:e9:64:bc:
b1:42:90:06:7b:6a:64:de:c7:82:b5:cb:f3:ff:50:
84:b6:0d:ff:7a:2e:dd:2e:48:c5:b5:ac:58:e4:a4:
a5:b7:2d:e9:00:c3:e2:2b:15:d0:a8:15:31:8a:76:
21:77:72:ff:ee:00:0f:d3:62:28:b9:da:74:d2:b4:
eb:76:cc:f3:f6:1b:fa:b5:44:69:63:d3:9d:76:bf:
bd:0d:5c:d7:4a:a5:30:cf:c7:5b:c3:46:89:9e:16:
7d:69:c2:fe:82:56:12:7c:2f:cd:7f:c3:5f:12:fa:
c1:8e:c2:18:02:a6:ed:05:a8:f2:0b:5f:1e:33:3e:
14:56:bc:a3:85:15:b6:2c:9f:8a:90:2b:aa:91:3a:
b7:34:88:a3:c1:c6:90:7e:9f:0c:a0:ac:5a:86:52:
bd:8a:7b:a0:ac:c2:8d:cb:46:96:c5:cb:bc:77:7c:
fa:89:bf:14:be:36:2c:a9:8b:72:06:c5:36:48:65:
c6:12:6f:fd:a2:aa:f0:62:4f:4c:93:e6:c1:ee:e4:
49:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D7:B0:67:05:5E:A8:96:BF:E8:E1:4A:B1:A0:42:CE:54:78:75:0A
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/79ewZwVeqJa_6OFKsaBCzlR4dQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.129.0/24
185.99.99.0/24
193.8.94.0/24
195.85.197.0/24
Signature Algorithm: sha256WithRSAEncryption
09:e4:19:d9:fa:47:fc:f0:da:ea:28:59:d4:1e:ac:6f:20:61:
98:74:27:3e:52:9a:81:25:b2:4f:8f:ac:27:58:9c:de:48:16:
76:f1:d8:09:e2:b5:3d:65:b0:3f:b9:4e:30:5c:8e:f9:f4:e9:
dd:a3:6a:8f:89:a2:c2:24:90:0a:1f:db:ae:20:5b:49:14:6e:
5e:5a:3c:2a:0b:10:ef:29:6d:68:67:9d:75:35:bf:65:e5:27:
20:57:e6:40:e7:bb:85:01:b1:ef:c3:cf:7e:e7:51:9a:11:8b:
b0:ff:a3:8d:65:d6:2b:ed:3c:90:92:d5:20:93:73:92:64:ae:
a0:40:7a:0d:15:b6:86:3e:e3:96:3a:7e:07:e0:f1:ac:3c:5b:
cc:d2:19:40:59:14:ea:2c:8b:76:bf:c1:2e:83:1e:3c:0b:d9:
58:d6:89:88:68:f7:c9:c8:86:f9:44:f4:46:da:bb:43:5c:34:
a2:76:ec:06:3e:af:ea:4d:8c:05:c7:96:d7:b5:45:5f:4f:6d:
2e:b1:d9:30:1c:ec:0c:3f:4e:b2:df:ff:93:3c:5c:8e:7a:1f:
3a:f2:f0:92:79:bb:de:fd:49:a4:1d:52:b1:82:1d:0a:c2:40:
2e:26:f3:d1:85:72:0f:3c:0d:bf:71:a7:fc:85:c0:4c:29:6a:
b2:b6:2b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:52:19 2026 by rpki-client