Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JYOEVhGW6lDeim34_LN2rK2DBIA.roa
File: JYOEVhGW6lDeim34_LN2rK2DBIA.roa (raw, json)
Hash identifier: Hogv+npsIT0h2zyybm+G/wntPEfN7NNkkYZ6EuhKur4=
Subject key identifier: 25:83:84:56:11:96:EA:50:DE:8A:6D:F8:FC:B3:76:AC:AD:83:04:80
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019EB170AD120148323FD038BBB803F70129
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JYOEVhGW6lDeim34_LN2rK2DBIA.roa
Signing time: Wed 10 Jun 2026 12:10:12 +0000
ROA not before: Wed 10 Jun 2026 12:10:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210644
IP address blocks: 45.9.117.0/24 maxlen: 24
45.9.119.0/24 maxlen: 24
45.86.245.0/24 maxlen: 24
45.92.247.0/24 maxlen: 24
45.94.37.0/24 maxlen: 24
45.94.39.0/24 maxlen: 24
45.129.124.0/24 maxlen: 24
45.129.126.0/24 maxlen: 24
45.131.215.0/24 maxlen: 24
45.133.209.0/24 maxlen: 24
45.133.210.0/24 maxlen: 24
45.136.175.0/24 maxlen: 24
45.136.228.0/24 maxlen: 24
45.137.42.0/24 maxlen: 24
45.137.43.0/24 maxlen: 24
45.137.60.0/24 maxlen: 24
45.137.81.0/24 maxlen: 24
45.140.13.0/24 maxlen: 24
45.141.177.0/24 maxlen: 24
45.145.13.0/24 maxlen: 24
45.145.14.0/24 maxlen: 24
45.155.71.0/24 maxlen: 24
185.99.98.0/24 maxlen: 24
185.126.64.0/24 maxlen: 24
193.8.215.0/24 maxlen: 24
193.32.8.0/24 maxlen: 24
195.74.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b1:70:ad:12:01:48:32:3f:d0:38:bb:b8:03:f7:01:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 10 12:10:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=258384561196ea50de8a6df8fcb376acad830480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f9:b3:07:5d:f9:1d:97:e7:d8:a6:b1:7c:e6:
6e:7a:04:25:cc:a7:bd:49:46:39:5f:ab:8a:70:66:
9e:87:b6:c6:47:1b:2d:9d:66:61:50:94:99:c2:05:
fb:91:17:91:fb:fb:4f:d5:b8:df:1d:b2:b4:a3:69:
3d:0c:cc:4b:f6:7f:2e:6f:22:2c:f3:25:d1:bf:af:
1a:e7:79:2d:65:5d:17:13:c1:1f:f7:43:36:ad:b4:
e9:c2:7c:99:b6:f7:81:7a:c9:fe:74:59:e7:63:fa:
44:13:32:05:a8:d9:88:1f:28:27:97:10:d3:6f:1a:
0d:2d:7d:1a:e0:09:07:e2:d7:88:72:fd:2a:82:f9:
89:8b:46:a2:72:21:77:d0:ae:c2:de:b8:bb:5a:a1:
59:d7:18:0b:dd:92:2c:b0:de:f4:d7:00:54:e9:b5:
6a:f6:03:2a:c9:38:3c:f4:95:42:a1:7d:7c:83:2e:
4a:d5:3b:75:c8:c8:c7:3b:7e:da:43:6c:62:a3:cd:
f0:33:a5:e7:db:6d:1d:d7:0b:8d:63:c6:1e:48:b4:
fd:3a:72:55:c2:6f:dc:29:f9:68:8d:61:d0:1f:73:
a2:7a:d8:3b:7d:0d:38:87:2a:24:df:b5:c6:65:9d:
76:6a:f1:d1:49:1a:c4:56:09:2a:c2:64:f6:51:10:
71:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:83:84:56:11:96:EA:50:DE:8A:6D:F8:FC:B3:76:AC:AD:83:04:80
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JYOEVhGW6lDeim34_LN2rK2DBIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.117.0/24
45.9.119.0/24
45.86.245.0/24
45.92.247.0/24
45.94.37.0/24
45.94.39.0/24
45.129.124.0/24
45.129.126.0/24
45.131.215.0/24
45.133.209.0-45.133.210.255
45.136.175.0/24
45.136.228.0/24
45.137.42.0/23
45.137.60.0/24
45.137.81.0/24
45.140.13.0/24
45.141.177.0/24
45.145.13.0-45.145.14.255
45.155.71.0/24
185.99.98.0/24
185.126.64.0/24
193.8.215.0/24
193.32.8.0/24
195.74.90.0/24
Signature Algorithm: sha256WithRSAEncryption
45:dc:33:c0:fc:36:1c:66:d1:ec:7a:2c:01:9b:38:0d:35:68:
35:73:33:b4:e6:9b:6f:78:23:5a:fe:6b:8d:c0:5b:f8:d9:e3:
63:ef:3e:44:29:7c:35:9d:b1:39:34:fe:ab:17:38:8f:de:11:
13:d3:4a:f7:c7:2b:4e:56:29:7f:f8:32:a6:9a:d3:99:45:24:
90:6c:d6:d0:de:fc:5f:2d:d1:6b:06:00:8a:48:f2:e8:d6:d1:
1a:17:00:b8:37:d6:53:dd:47:23:c2:73:10:d8:b6:e7:42:3c:
bb:c9:be:b2:58:e7:f8:99:8f:63:e3:d4:1e:b6:84:4f:1f:d6:
0b:2c:a7:c0:f7:64:db:36:8f:13:b1:a3:82:5f:82:12:4f:fb:
be:e9:0e:a2:e9:d0:49:9e:3f:45:e9:f4:75:95:43:f6:8f:b7:
fd:0b:bb:d7:fc:b5:c5:13:f8:84:7b:57:71:48:22:33:41:94:
fd:87:82:94:0d:17:4e:23:e3:ad:9b:f8:3f:02:94:ec:e8:3a:
7a:19:db:60:ea:64:c4:d9:9c:b5:b0:a1:2a:33:eb:01:31:43:
6a:c2:f6:c8:68:46:cd:48:4d:42:12:e3:1e:5c:8a:03:a2:b8:
24:29:44:c4:79:9e:3f:7a:e1:bb:92:0e:b3:da:a8:c4:2b:bc:
65:51:5b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:53:56 2026 by rpki-client