Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ImG3mq-kHD9ZXqEHCdhFuZd_xfg.roa
File: ImG3mq-kHD9ZXqEHCdhFuZd_xfg.roa (raw, json)
Hash identifier: +UwGnlUQpn5DVg1pwhqqQMQWhEE2bwaGOZ1FY3tMuR4=
Subject key identifier: 22:61:B7:9A:AF:A4:1C:3F:59:5E:A1:07:09:D8:45:B9:97:7F:C5:F8
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A0781ADE129C28CF5BD7BFA9AAF4EDE4A4
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ImG3mq-kHD9ZXqEHCdhFuZd_xfg.roa
Signing time: Sun 06 Sep 2026 19:03:41 +0000
ROA not before: Sun 06 Sep 2026 19:03:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215540
IP address blocks: 45.130.127.0/24 maxlen: 24
45.142.31.0/24 maxlen: 24
45.148.101.0/24 maxlen: 24
45.148.102.0/24 maxlen: 24
45.148.103.0/24 maxlen: 24
45.149.144.0/24 maxlen: 24
45.155.68.0/24 maxlen: 24
80.253.251.0/24 maxlen: 24
113.30.152.0/24 maxlen: 24
185.99.96.0/24 maxlen: 24
185.214.74.0/24 maxlen: 24
185.242.247.0/24 maxlen: 24
193.39.208.0/24 maxlen: 24
195.66.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:78:1a:de:12:9c:28:cf:5b:d7:bf:a9:aa:f4:ed:e4:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 6 19:03:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2261b79aafa41c3f595ea10709d845b9977fc5f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:58:cd:01:17:d9:aa:9a:69:1e:e1:14:82:bb:
5e:59:e0:98:17:b9:81:73:9d:6c:e7:d7:10:ad:08:
35:c4:cb:64:ba:01:c5:68:d1:a2:e3:93:7c:71:e3:
ce:f4:ae:cd:ab:ad:7a:32:bf:19:0f:4c:a5:c4:fb:
ec:27:a3:38:7d:34:a7:49:97:81:3d:2b:34:c5:99:
c8:45:45:9c:fa:89:2a:10:39:05:a3:5c:b4:ae:66:
3e:fb:ee:0e:07:b1:bc:f3:77:12:9e:8b:2c:0b:d8:
b8:9b:ac:b6:01:27:91:a0:24:0e:1e:8b:1e:6a:64:
43:cc:d0:60:53:aa:90:15:1c:94:92:54:94:ac:6b:
fd:76:5e:35:a5:2e:a8:1c:b0:4a:59:57:47:16:49:
3d:b0:71:9c:3e:29:21:a8:97:1d:d5:a2:e1:4c:69:
56:05:19:0a:e1:10:0a:0b:78:fd:b1:fc:96:c0:09:
b2:79:59:22:33:a3:ee:12:69:4b:69:b7:4a:d2:af:
4e:c6:cb:42:8b:26:22:6d:dd:0c:2f:f8:35:4e:7d:
f1:31:9b:6c:ad:6d:83:c4:c8:12:23:4d:89:b3:56:
dc:bf:b9:87:55:32:07:60:d3:aa:4c:2e:d5:51:47:
2b:14:67:1d:f9:ed:10:45:b7:af:18:a4:95:1c:8f:
c1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:61:B7:9A:AF:A4:1C:3F:59:5E:A1:07:09:D8:45:B9:97:7F:C5:F8
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ImG3mq-kHD9ZXqEHCdhFuZd_xfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.127.0/24
45.142.31.0/24
45.148.101.0-45.148.103.255
45.149.144.0/24
45.155.68.0/24
80.253.251.0/24
113.30.152.0/24
185.99.96.0/24
185.214.74.0/24
185.242.247.0/24
193.39.208.0/24
195.66.25.0/24
Signature Algorithm: sha256WithRSAEncryption
10:9b:0e:6d:64:35:a9:a4:32:8e:22:fd:3e:70:86:0e:1d:95:
0e:54:12:ae:b0:b4:87:bc:94:ac:0e:19:0d:0b:d3:68:50:cd:
47:dd:30:f5:f7:a4:c2:6a:7f:ea:03:c6:61:de:ea:26:14:05:
23:a8:b7:4b:9b:71:a9:0e:4b:9d:cb:7c:ba:8b:10:2a:03:19:
af:d6:fc:bf:a3:1c:9e:0d:b5:66:15:f5:9d:19:c1:7f:50:c6:
5a:83:d1:6d:84:b0:a8:c5:eb:10:e9:54:0b:5a:e7:a9:9a:bd:
17:3f:71:5a:07:19:47:78:ed:c9:6b:66:83:98:b9:16:1f:6d:
00:f9:2e:c8:34:f7:72:f4:c4:43:67:af:e8:9e:97:4e:c9:81:
bc:19:a1:5a:64:ec:f2:7d:be:43:58:12:1d:df:fd:9f:d5:43:
3a:3a:b5:1b:7f:8a:8c:ed:0f:0d:d6:0d:74:df:8d:6a:1d:3f:
a8:f6:c0:a5:9c:fb:cb:21:53:24:94:2a:82:a1:68:34:1b:48:
ed:70:1c:22:57:4d:12:53:3d:44:26:9a:5e:dd:3b:05:42:41:
95:e5:8c:2a:65:6c:48:75:a3:94:8d:ef:49:dc:77:4e:60:95:
3a:d3:83:36:a8:3d:80:a3:c3:8e:0a:5e:60:60:5e:d3:20:ed:
26:a6:fc:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:11:59 2026 by rpki-client