Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/F1iyJbQqEoHe2xle059mZ-MJyiU.roa
File: F1iyJbQqEoHe2xle059mZ-MJyiU.roa (raw, json)
Hash identifier: rIV2L4AeMv6BBG2fvRqIAaBVeT93vfyYTXSDtf6TQuU=
Subject key identifier: 17:58:B2:25:B4:2A:12:81:DE:DB:19:5E:D3:9F:66:67:E3:09:CA:25
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019D9743E004FE4180995FD280997F0CE327
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/F1iyJbQqEoHe2xle059mZ-MJyiU.roa
Signing time: Thu 16 Apr 2026 17:08:21 +0000
ROA not before: Thu 16 Apr 2026 17:08:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207461
IP address blocks: 45.9.119.0/24 maxlen: 24
45.86.15.0/24 maxlen: 24
45.86.245.0/24 maxlen: 24
45.86.247.0/24 maxlen: 24
45.87.240.0/24 maxlen: 24
45.92.168.0/24 maxlen: 24
45.92.169.0/24 maxlen: 24
45.92.170.0/24 maxlen: 24
45.92.171.0/24 maxlen: 24
45.92.247.0/24 maxlen: 24
45.94.36.0/24 maxlen: 24
45.94.37.0/24 maxlen: 24
45.94.38.0/24 maxlen: 24
45.94.39.0/24 maxlen: 24
45.94.46.0/24 maxlen: 24
45.94.47.0/24 maxlen: 24
45.95.98.0/23 maxlen: 23
45.95.99.0/24 maxlen: 24
45.118.249.0/24 maxlen: 24
45.128.24.0/24 maxlen: 24
45.129.124.0/24 maxlen: 24
45.129.125.0/24 maxlen: 24
45.131.213.0/24 maxlen: 24
45.133.209.0/24 maxlen: 24
45.133.210.0/24 maxlen: 24
45.136.175.0/24 maxlen: 24
45.136.228.0/24 maxlen: 24
45.137.42.0/23 maxlen: 23
45.137.60.0/24 maxlen: 24
45.137.62.0/24 maxlen: 24
45.140.14.0/24 maxlen: 24
45.145.12.0/24 maxlen: 24
45.146.88.0/24 maxlen: 24
45.146.181.0/24 maxlen: 24
45.147.28.0/24 maxlen: 24
45.151.101.0/24 maxlen: 24
45.151.102.0/24 maxlen: 24
45.152.198.0/24 maxlen: 24
45.154.56.0/24 maxlen: 24
45.155.70.0/24 maxlen: 24
45.155.71.0/24 maxlen: 24
45.158.196.0/24 maxlen: 24
45.158.199.0/24 maxlen: 24
103.229.28.0/24 maxlen: 24
113.30.153.0/24 maxlen: 24
113.30.155.0/24 maxlen: 24
141.193.20.0/24 maxlen: 24
185.155.200.0/24 maxlen: 24
185.155.203.0/24 maxlen: 24
185.164.56.0/24 maxlen: 24
185.164.57.0/24 maxlen: 24
193.5.65.0/24 maxlen: 24
194.62.67.0/24 maxlen: 24
195.74.90.0/24 maxlen: 24
195.85.194.0/24 maxlen: 24
2a0a:2d06:10::/48 maxlen: 48
2a0a:2d07:e5::/48 maxlen: 48
2a0f:3d86:44::/48 maxlen: 48
2a0f:3d86:100::/48 maxlen: 48
2a0f:3d86:101::/48 maxlen: 48
2a0f:e1c0:37a::/48 maxlen: 48
2a0f:e1c0:a8b9::/48 maxlen: 48
2a13:8c86:120::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:43:e0:04:fe:41:80:99:5f:d2:80:99:7f:0c:e3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 16 17:08:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1758b225b42a1281dedb195ed39f6667e309ca25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:72:83:e5:96:69:c9:d4:38:2e:15:28:eb:23:
f1:2f:d2:bb:39:07:e7:32:3b:d4:d0:55:a3:95:fb:
12:d3:96:88:53:0d:a7:ef:70:56:eb:51:85:ad:1a:
81:1d:fb:87:de:a7:57:50:27:9d:48:d6:a6:96:46:
64:81:9c:8c:37:7c:46:68:95:d7:d0:cf:c3:c8:52:
ed:22:8f:96:cf:ec:87:2d:8a:76:7a:d4:e7:c8:05:
b4:9e:99:05:09:7d:b3:3a:ac:52:9a:df:b7:b0:6d:
e3:c6:27:95:de:4a:0d:e1:ef:e0:21:76:34:84:85:
db:66:74:25:83:9d:39:31:bc:4d:e6:ed:6a:ff:f8:
dd:99:0a:4e:5d:ca:ef:81:f9:67:ff:5f:93:bc:5d:
e4:c7:87:e4:7c:ee:9e:7f:14:d1:5d:a2:60:30:40:
07:ec:9c:26:07:04:d8:95:2f:ea:c8:73:28:c3:4a:
d8:75:35:64:46:d2:87:87:fc:af:46:e4:00:2f:fd:
29:90:ba:4d:fd:06:64:80:02:16:da:02:d1:2d:c2:
79:2c:b1:b8:d2:59:1f:eb:b1:65:fa:03:4d:e1:06:
59:e4:4a:dd:67:c8:fb:a1:fb:eb:b3:4d:57:88:c1:
55:af:ae:c9:66:bb:f0:55:29:ee:3e:a7:00:d8:0e:
26:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:58:B2:25:B4:2A:12:81:DE:DB:19:5E:D3:9F:66:67:E3:09:CA:25
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/F1iyJbQqEoHe2xle059mZ-MJyiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.119.0/24
45.86.15.0/24
45.86.245.0/24
45.86.247.0/24
45.87.240.0/24
45.92.168.0/22
45.92.247.0/24
45.94.36.0/22
45.94.46.0/23
45.95.98.0/23
45.118.249.0/24
45.128.24.0/24
45.129.124.0/23
45.131.213.0/24
45.133.209.0-45.133.210.255
45.136.175.0/24
45.136.228.0/24
45.137.42.0/23
45.137.60.0/24
45.137.62.0/24
45.140.14.0/24
45.145.12.0/24
45.146.88.0/24
45.146.181.0/24
45.147.28.0/24
45.151.101.0-45.151.102.255
45.152.198.0/24
45.154.56.0/24
45.155.70.0/23
45.158.196.0/24
45.158.199.0/24
103.229.28.0/24
113.30.153.0/24
113.30.155.0/24
141.193.20.0/24
185.155.200.0/24
185.155.203.0/24
185.164.56.0/23
193.5.65.0/24
194.62.67.0/24
195.74.90.0/24
195.85.194.0/24
IPv6:
2a0a:2d06:10::/48
2a0a:2d07:e5::/48
2a0f:3d86:44::/48
2a0f:3d86:100::/47
2a0f:e1c0:37a::/48
2a0f:e1c0:a8b9::/48
2a13:8c86:120::/48
Signature Algorithm: sha256WithRSAEncryption
6a:14:a6:dc:f1:7b:e2:03:a9:f1:53:96:58:11:b5:64:ab:da:
d0:34:1a:4c:64:ec:9f:0f:b2:07:a4:2b:9f:4d:93:5f:7d:f1:
03:b0:0e:02:06:fb:22:c9:ea:c4:8d:d6:5d:c3:0c:14:2d:ae:
27:2c:3b:a1:f4:10:6a:76:06:97:4a:6e:65:af:28:a6:52:8d:
1a:c1:7c:bc:72:a4:2f:59:de:22:39:49:8b:0c:62:c4:40:60:
6e:53:f5:a6:7f:5d:a7:cf:50:bf:32:a0:9a:9f:0e:79:7d:1c:
9d:76:52:c8:3b:cc:5d:1a:32:52:b9:88:d2:11:f7:1f:66:7d:
dd:52:c7:8b:b5:2f:c8:01:df:05:16:91:e8:fe:b1:96:b7:10:
a5:5b:54:d6:33:a3:20:55:8b:ef:2b:71:85:a9:1f:c1:7f:9c:
0f:1e:25:41:ce:0f:43:e0:49:20:86:ba:7a:d9:c9:2e:7f:bd:
98:a1:88:77:8b:52:0e:b2:12:95:57:f9:b4:c2:0b:de:88:fb:
4a:85:67:54:b8:5b:e3:5c:69:5d:b8:a5:ee:78:a3:e4:59:11:
b4:e8:3d:02:c2:0f:9f:2a:0b:47:67:5a:9b:6e:b8:c9:2f:0e:
f0:9f:42:0d:51:75:4a:2d:c3:fd:e2:17:7b:32:9f:a8:cb:2c:
98:e9:5c:db
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgISAZ2XQ+AE/kGAmV/SgJl/DOMnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYwNDE2MTcwODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzU4YjIyNWI0MmExMjgxZGVkYjE5NWVkMzlmNjY2N2UzMDljYTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7HKD5ZZpydQ4LhUo6yPxL9K7OQfn
MjvU0FWjlfsS05aIUw2n73BW61GFrRqBHfuH3qdXUCedSNamlkZkgZyMN3xGaJXX
0M/DyFLtIo+Wz+yHLYp2etTnyAW0npkFCX2zOqxSmt+3sG3jxieV3koN4e/gIXY0
hIXbZnQlg505MbxN5u1q//jdmQpOXcrvgfln/1+TvF3kx4fkfO6efxTRXaJgMEAH
7JwmBwTYlS/qyHMow0rYdTVkRtKHh/yvRuQAL/0pkLpN/QZkgAIW2gLRLcJ5LLG4
0lkf67Fl+gNN4QZZ5ErdZ8j7ofvrs01XiMFVr67JZrvwVSnuPqcA2A4mHQIDAQAB
o4IDYDCCA1wwHQYDVR0OBBYEFBdYsiW0KhKB3tsZXtOfZmfjCcolMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvRjFpeUpiUXFFb0hlMnhsZTA1OW1aLU1KeWlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBdAYIKwYBBQUHAQcBAf8EggFjMIIBXzCCARQEAgABMIIB
DAMEAC0JdwMEAC1WDwMEAC1W9QMEAC1W9wMEAC1X8AMEAi1cqAMEAC1c9wMEAi1e
JAMEAS1eLgMEAS1fYgMEAC12+QMEAC2AGAMEAS2BfAMEAC2D1TAMAwQALYXRAwQA
LYXSAwQALYivAwQALYjkAwQBLYkqAwQALYk8AwQALYk+AwQALYwOAwQALZEMAwQA
LZJYAwQALZK1AwQALZMcMAwDBAAtl2UDBAAtl2YDBAAtmMYDBAAtmjgDBAEtm0YD
BAAtnsQDBAAtnscDBABn5RwDBABxHpkDBABxHpsDBACNwRQDBAC5m8gDBAC5m8sD
BAG5pDgDBADBBUEDBADCPkMDBADDSloDBADDVcIwRQQCAAIwPwMHACoKLQYAEAMH
ACoKLQcA5QMHACoPPYYARAMHASoPPYYBAAMHACoP4cADegMHACoP4cCouQMHACoT
jIYBIDANBgkqhkiG9w0BAQsFAAOCAQEAahSm3PF74gOp8VOWWBG1ZKva0DQaTGTs
nw+yB6Qrn02TX33xA7AOAgb7IsnqxI3WXcMMFC2uJyw7ofQQanYGl0puZa8oplKN
GsF8vHKkL1neIjlJiwxixEBgblP1pn9dp89QvzKgmp8OeX0cnXZSyDvMXRoyUrmI
0hH3H2Z93VLHi7UvyAHfBRaR6P6xlrcQpVtU1jOjIFWL7ytxhakfwX+cDx4lQc4P
Q+BJIIa6etnJLn+9mKGId4tSDrISlVf5tMIL3oj7SoVnVLhb41xpXbil7nij5FkR
tOg9AsIPnyoLR2dam264yS8O8J9CDVF1Si3D/eIXezKfqMssmOlc2w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:39:59 2026 by rpki-client