Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/BlNIqfd5oZRCjEl41QesCuzIi3c.roa
File: BlNIqfd5oZRCjEl41QesCuzIi3c.roa (raw, json)
Hash identifier: xmY3qwoC1etxBRXxD16bc3apUO1585gJM93QWc/QJoQ=
Subject key identifier: 06:53:48:A9:F7:79:A1:94:42:8C:49:78:D5:07:AC:0A:EC:C8:8B:77
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019D6E4F400CBB13BC2E0B0515453753CF2C
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/BlNIqfd5oZRCjEl41QesCuzIi3c.roa
Signing time: Wed 08 Apr 2026 18:16:20 +0000
ROA not before: Wed 08 Apr 2026 18:16:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203614
IP address blocks: 45.137.41.0/24 maxlen: 24
103.139.51.0/24 maxlen: 24
193.27.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6e:4f:40:0c:bb:13:bc:2e:0b:05:15:45:37:53:cf:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 8 18:16:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=065348a9f779a194428c4978d507ac0aecc88b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ce:e4:e6:5b:ea:f0:62:8c:44:ac:7e:91:b2:
5c:50:30:94:1e:4e:1c:fc:a4:68:2b:43:1d:fc:86:
00:09:75:09:23:1b:89:12:ed:93:a0:6b:53:5b:dd:
d2:97:d3:88:86:53:ae:e1:62:6e:61:de:42:5b:b6:
8a:dd:10:00:c3:f8:1f:e8:88:c8:fe:4c:8c:af:b2:
05:a9:cb:d5:c6:79:a7:6f:ce:9a:6a:52:5e:45:ea:
d1:04:22:ab:ab:88:c8:f4:b8:fa:5c:89:02:df:9b:
0e:66:f0:4b:b8:7a:02:25:16:a6:64:3d:bd:ec:8b:
b4:6e:cd:1c:da:06:13:e4:4d:37:3e:aa:cc:97:64:
95:b8:b4:fa:ff:7e:bc:d3:b4:7b:b7:62:46:cb:8e:
7a:f3:cf:51:20:4b:89:4e:a1:4c:07:ce:86:a1:66:
1d:7d:da:5c:cc:7a:3b:0f:f7:e2:66:99:af:89:b0:
28:55:07:a8:f7:bf:32:1c:93:41:aa:4a:18:0c:2d:
31:a2:4e:9c:7d:a2:88:30:2a:61:31:4e:9a:c0:2a:
81:0c:56:b2:fc:4e:09:91:81:d2:7f:17:9c:29:0f:
98:ae:ef:59:1d:ae:f7:6d:8b:13:b5:2b:e2:e0:18:
5c:05:4f:1f:d6:76:ea:e2:99:38:ef:73:b5:33:ae:
3e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:53:48:A9:F7:79:A1:94:42:8C:49:78:D5:07:AC:0A:EC:C8:8B:77
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/BlNIqfd5oZRCjEl41QesCuzIi3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.41.0/24
103.139.51.0/24
193.27.19.0/24
Signature Algorithm: sha256WithRSAEncryption
98:e4:a3:d9:b4:48:95:c0:b4:0a:06:c9:bd:ae:a6:a3:60:d1:
61:e6:4e:e3:99:7a:3c:a3:7b:e9:c1:a9:d7:78:19:f5:dc:21:
0d:43:40:b3:f5:3f:58:be:3b:d0:a1:bb:6e:b1:fa:80:b1:d9:
68:52:c8:51:13:8c:b5:58:5f:b7:ba:06:40:46:99:14:ff:d3:
d1:c6:98:12:81:3c:07:4c:f6:9f:1d:8b:12:c0:98:82:96:94:
28:2f:9a:87:f6:0f:c6:9c:19:65:c7:bd:8c:2b:07:e4:04:ac:
1a:cc:97:de:bd:42:7f:b6:6e:46:b6:eb:fb:b9:3a:24:bb:fd:
25:13:dd:ab:3b:1c:00:ec:55:5a:9b:4f:e7:45:04:ea:8a:d8:
cd:2a:56:00:2c:c1:c5:d5:b7:ee:f3:45:f6:41:ea:97:4b:7d:
cc:30:c5:fc:b9:64:4f:72:d9:22:2a:8d:0d:eb:be:4e:41:ce:
8b:22:c8:b0:77:46:89:99:7c:17:eb:62:f6:f8:82:71:88:12:
86:b0:62:fd:95:c1:de:d0:24:99:25:96:81:60:16:1a:e9:01:
34:f3:5b:87:f0:c2:2d:5b:4f:36:a7:44:76:a4:1e:31:3e:2f:
2b:df:ee:8a:f8:5f:c4:2c:ca:97:23:0e:e8:db:21:21:27:2e:
30:3f:35:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:38:34 2026 by rpki-client