Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/A8DfweI3N0i9IfUxTBr_PF8mLHk.roa
File: A8DfweI3N0i9IfUxTBr_PF8mLHk.roa (raw, json)
Hash identifier: YGHUqIErKFVrcm65+z+8+wmQLv0X6XBM/EbvlsiohCg=
Subject key identifier: 03:C0:DF:C1:E2:37:37:48:BD:21:F5:31:4C:1A:FF:3C:5F:26:2C:79
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019C53E0488F85FE119D77F2861A9BEFC823
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/A8DfweI3N0i9IfUxTBr_PF8mLHk.roa
Signing time: Thu 12 Feb 2026 22:02:13 +0000
ROA not before: Thu 12 Feb 2026 22:02:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213999
IP address blocks: 45.147.31.0/24 maxlen: 24
45.152.196.0/24 maxlen: 24
45.154.247.0/24 maxlen: 24
45.158.197.0/24 maxlen: 24
45.158.198.0/24 maxlen: 24
193.5.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:53:e0:48:8f:85:fe:11:9d:77:f2:86:1a:9b:ef:c8:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 12 22:02:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03c0dfc1e2373748bd21f5314c1aff3c5f262c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:c3:7e:2e:f8:d0:61:21:86:36:a7:5e:23:22:
06:f8:70:84:2d:c6:5a:2c:22:2d:4d:e3:36:fc:c2:
d8:39:65:ed:fe:27:c5:38:13:2c:8c:8d:7e:45:56:
51:a6:c0:01:c0:9e:50:83:fe:f2:d5:8e:7a:c8:bf:
9e:08:d2:7d:66:c4:51:b0:92:da:5a:a3:ca:41:4e:
44:81:99:9d:bd:07:16:d3:4a:a6:5f:a0:05:b5:80:
bc:cf:2b:85:d5:c5:ca:e3:14:75:b5:0a:cd:18:24:
80:f2:36:f8:c2:53:87:44:f8:dc:a6:a3:47:4e:40:
e3:9a:75:45:a4:c8:76:9e:c8:7d:7b:ee:42:d9:15:
d3:5f:60:9c:51:10:2c:1e:32:81:10:67:21:87:eb:
d0:71:a2:a6:33:e4:39:70:5f:e9:82:a0:29:ea:1a:
48:5c:89:74:31:00:fd:e7:7a:08:12:ca:a8:0a:bd:
8a:03:16:8e:10:b1:d2:bb:e4:a3:33:61:eb:d3:08:
c1:5a:7b:80:86:5a:91:c0:d7:9a:e4:2a:ca:a0:8f:
58:59:27:39:48:90:1d:3d:e0:f6:b8:17:09:c9:ad:
f3:7e:45:1e:5a:a4:ae:35:4f:4d:09:27:72:c3:38:
f7:03:c6:47:ca:b0:23:e6:ae:8e:66:f5:21:f5:3d:
eb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C0:DF:C1:E2:37:37:48:BD:21:F5:31:4C:1A:FF:3C:5F:26:2C:79
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/A8DfweI3N0i9IfUxTBr_PF8mLHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.31.0/24
45.152.196.0/24
45.154.247.0/24
45.158.197.0-45.158.198.255
193.5.250.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:93:4e:57:dd:82:9b:06:fe:80:51:91:85:35:12:05:93:c3:
cf:44:e0:e3:8b:2a:7e:b0:9f:53:30:4f:fd:f3:c9:ff:78:18:
26:81:cc:a2:ae:db:01:85:23:d1:44:f5:b6:dc:78:fa:08:c0:
41:9e:2e:ad:12:69:97:b1:dc:37:73:e1:75:d4:2e:49:f6:49:
e4:cb:49:65:c4:49:96:49:73:46:4a:13:54:fb:4c:f2:80:14:
08:ac:02:95:1d:59:8f:46:51:d6:ef:13:4f:52:08:4a:a9:b6:
35:78:be:cc:9d:70:6c:f0:63:d3:96:28:ab:15:d0:25:b7:32:
a1:38:01:05:b0:6a:c6:25:90:f4:d5:a7:4f:d1:5e:30:81:ba:
ad:f6:65:2d:28:a5:da:6c:c8:ac:7b:af:a3:cf:04:9e:75:47:
bb:4e:f3:62:50:e2:1d:e0:93:c8:55:69:93:ea:fa:9c:a9:a1:
fa:ae:1c:74:ac:61:9a:f9:ed:2e:71:d1:96:eb:fb:06:1d:85:
f7:cf:15:97:95:53:2c:a5:2c:ed:8c:9a:09:8a:09:77:e7:50:
9c:b7:aa:97:b0:99:53:63:49:12:20:1d:d3:c6:0b:93:8c:fe:
ef:62:59:76:1b:d6:5d:80:fa:1a:01:a9:de:32:f8:24:cc:f7:
cd:18:13:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:27:49 2026 by rpki-client