Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/IEc2ExECH3lrYvg-j6J8_1RFK7U.roa
File: IEc2ExECH3lrYvg-j6J8_1RFK7U.roa (raw, json)
Hash identifier: 4GrPk6K0r8jzRTSbqxVkFlhiTAFVTIKcIxc1oykWVTg=
Subject key identifier: 20:47:36:13:11:02:1F:79:6B:62:F8:3E:8F:A2:7C:FF:54:45:2B:B5
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019D91EB27E7EFD6085F69CFCC250803A157
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/IEc2ExECH3lrYvg-j6J8_1RFK7U.roa
Signing time: Wed 15 Apr 2026 16:13:20 +0000
ROA not before: Wed 15 Apr 2026 16:13:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215428
IP address blocks: 45.142.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:91:eb:27:e7:ef:d6:08:5f:69:cf:cc:25:08:03:a1:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 15 16:13:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2047361311021f796b62f83e8fa27cff54452bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1e:64:6a:c4:42:8e:fd:74:59:51:40:c6:6c:
38:83:f5:a9:7e:6a:86:47:7c:48:ab:b5:f7:6c:fa:
ea:ac:6f:38:9b:39:86:d8:f1:a8:a6:9c:80:cf:e5:
50:fb:f9:e9:f2:97:6d:dd:34:66:8a:e8:0d:49:2a:
e8:7d:22:d6:a1:61:a3:aa:be:b9:9c:3f:c0:3d:a7:
bc:f4:ab:d8:ac:81:41:60:e5:21:e1:1f:54:66:2f:
fd:d1:67:61:0e:9d:ae:dc:94:ce:70:5d:a8:76:b1:
45:2f:e1:33:a4:74:93:e1:f1:07:bd:92:ba:46:df:
07:cf:73:ca:d1:83:76:a4:ef:c8:dd:ca:b2:6a:6f:
a9:a7:02:93:ea:1b:70:39:18:20:e7:b6:d8:92:14:
87:b0:b5:6e:41:e2:a7:61:46:02:92:c8:7a:8f:6b:
3c:14:cb:dc:8a:25:80:6f:b6:2a:04:d7:9b:44:ab:
24:4e:bc:5e:f4:19:f2:c4:47:f0:70:2b:db:7f:51:
a2:c6:62:69:37:58:cf:b2:cf:1b:1f:5f:f5:a5:b6:
74:f3:29:5d:af:98:7c:ad:8f:54:61:94:78:2b:49:
fa:a0:aa:f2:ed:78:05:4c:b8:5c:f2:99:92:3f:60:
b6:4f:b7:79:e4:a5:a1:45:ac:28:ef:30:f3:67:03:
7c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:47:36:13:11:02:1F:79:6B:62:F8:3E:8F:A2:7C:FF:54:45:2B:B5
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/IEc2ExECH3lrYvg-j6J8_1RFK7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.30.0/24
Signature Algorithm: sha256WithRSAEncryption
54:d2:bc:b3:05:fc:a1:2c:b6:40:cf:a2:73:b0:8d:7c:a1:c8:
59:48:59:cb:31:0d:28:7b:c7:1c:c7:53:db:1e:f8:46:60:99:
ec:77:a4:bd:16:de:7d:49:6d:ef:2b:eb:05:71:2e:18:05:b1:
57:68:70:51:fc:c8:f8:e9:c9:d2:f7:b0:5b:f6:a0:56:70:62:
71:a0:e6:1f:f1:d6:81:24:82:35:71:76:f1:23:98:d2:5a:5e:
54:e2:74:09:78:21:89:4d:f3:ba:32:a1:b2:49:08:c7:54:10:
bf:24:24:4d:a9:86:c4:46:fa:01:15:f7:b5:f6:d5:12:c1:0b:
fd:63:0e:d4:88:f8:a5:e8:0c:aa:8c:9d:9e:d4:2d:19:ca:66:
7d:1a:8e:7c:d0:5c:b8:03:45:9f:f7:f1:a4:b9:18:ff:72:73:
07:15:f1:cc:22:be:1b:69:c7:3f:4a:1d:98:88:01:65:90:f5:
4b:f4:3d:bc:6a:f7:d3:ae:7f:7a:a7:4c:5e:da:08:40:ee:fc:
55:e8:b7:61:d4:4b:73:4e:a1:06:89:ce:19:02:ab:47:0a:6b:
59:b0:17:45:e6:6f:33:d6:e7:ea:3e:58:0b:29:0a:63:6f:7b:
30:7c:46:4f:75:4d:6c:68:68:03:2d:84:1a:ff:62:15:9b:82:
99:1a:42:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:25:22 2026 by rpki-client