Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Of3DWZH1V8aMdGLKSstXlTtcSgs.roa
File: Of3DWZH1V8aMdGLKSstXlTtcSgs.roa (raw, json)
Hash identifier: 8DNRN7MgPKgk8fi5JOqtzG5BgKnYyAyxNTx4YqTSIp0=
Subject key identifier: 39:FD:C3:59:91:F5:57:C6:8C:74:62:CA:4A:CB:57:95:3B:5C:4A:0B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A17881F74BC22570CD5F88CC3AF3C10598
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Of3DWZH1V8aMdGLKSstXlTtcSgs.roa
Signing time: Mon 26 Oct 2026 13:59:05 +0000
ROA not before: Mon 26 Oct 2026 13:59:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49981
IP address blocks: 45.91.211.0/24 maxlen: 24
45.146.129.0/24 maxlen: 24
185.99.99.0/24 maxlen: 24
193.8.1.0/24 maxlen: 24
193.8.94.0/24 maxlen: 24
195.85.197.0/24 maxlen: 24
2a0f:3045::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:81:f7:4b:c2:25:70:cd:5f:88:cc:3a:f3:c1:05:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 26 13:59:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=39fdc35991f557c68c7462ca4acb57953b5c4a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:04:60:0c:6c:8c:3c:8b:1d:fd:eb:aa:25:a1:
ed:83:a6:a5:af:c4:68:c9:04:b3:55:b1:3a:be:70:
12:16:41:f2:9d:52:ce:bf:44:25:7d:a3:d2:4c:53:
23:a5:4d:04:eb:f5:ba:7a:2d:63:14:01:76:7c:b2:
32:1a:75:7b:1e:29:39:fc:cc:d3:2b:b8:06:e6:d2:
d9:dc:f6:4d:b7:2c:bc:fb:eb:f7:3f:40:f9:18:52:
40:c2:33:e6:6b:32:c7:62:21:ba:f2:29:2d:21:49:
6f:22:e4:2b:d8:63:78:63:94:98:03:f0:91:10:71:
56:cd:3a:9f:cb:f9:47:b3:16:6f:b5:97:21:21:25:
b6:b0:3d:77:95:52:57:20:a7:59:b0:34:f9:54:8e:
48:1b:86:fd:ac:e6:7a:aa:14:1e:52:37:0b:28:89:
ff:86:ec:76:95:4b:f2:62:ae:6a:42:cd:95:bf:00:
09:42:97:30:01:38:ba:61:05:0a:ed:fc:ae:ec:9f:
94:2f:09:44:fa:6a:64:8f:96:53:66:07:e3:62:e4:
23:46:f5:14:3a:19:46:ff:5f:c2:41:f4:7e:37:4a:
2a:70:49:44:e8:d3:91:b8:29:53:65:07:d0:25:02:
bb:39:ba:b4:4a:48:6f:db:07:84:36:4d:ce:dc:e9:
ae:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FD:C3:59:91:F5:57:C6:8C:74:62:CA:4A:CB:57:95:3B:5C:4A:0B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Of3DWZH1V8aMdGLKSstXlTtcSgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.211.0/24
45.146.129.0/24
185.99.99.0/24
193.8.1.0/24
193.8.94.0/24
195.85.197.0/24
IPv6:
2a0f:3045::/32
Signature Algorithm: sha256WithRSAEncryption
60:37:52:d1:f7:6d:2d:26:04:94:40:85:43:ee:3e:15:94:b4:
ab:fc:19:fb:2e:8b:8a:9f:61:50:95:15:e5:5d:95:76:db:06:
9a:1b:ad:be:b5:b5:57:27:3f:e7:07:68:cd:4b:8d:7c:1e:77:
55:2a:bd:54:ad:19:34:48:17:0e:0e:b6:b1:6e:d2:7f:e9:bb:
e9:cf:df:38:ea:e4:67:8e:f6:f9:b4:9b:c8:70:f8:ad:cd:d3:
42:52:d9:46:32:8a:47:df:7c:33:a7:81:a7:cd:ec:07:b1:b7:
15:ee:52:09:41:e3:14:27:96:bb:25:45:2e:99:d8:c4:31:fd:
42:f6:a8:50:f0:1f:0a:92:63:1a:a2:3b:d1:a9:6e:07:92:9b:
0a:73:fc:c9:f4:ac:ac:76:76:f3:16:14:e4:77:38:aa:87:54:
01:3f:c7:a5:cf:0d:ab:3c:e3:ff:6b:bb:8b:0a:42:99:66:17:
7a:f5:8f:09:c9:74:82:55:de:09:1f:22:33:fd:34:6c:3c:7f:
a5:db:24:76:ca:ec:96:de:1e:be:d4:52:7b:5b:ad:b6:68:41:
7c:72:46:26:aa:05:34:ac:4a:bb:66:58:c9:1a:be:af:47:19:
0c:c4:c6:b5:b1:13:7d:8c:ca:99:d3:b2:4a:e4:ad:cf:41:eb:
30:0d:3e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:10:06 2026 by rpki-client