Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/P7DJr8DyQgixp6MgZmQ4G4QniK0.roa
File: P7DJr8DyQgixp6MgZmQ4G4QniK0.roa (raw, json)
Hash identifier: Lwyd2pv0TNWtsWyLXbTOQD6dkIN/Ocsn0L0d8zcVLA4=
Subject key identifier: 3F:B0:C9:AF:C0:F2:42:08:B1:A7:A3:20:66:64:38:1B:84:27:88:AD
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A0A482E9AD0A71B2D152ACF25F5BBC1B27
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/P7DJr8DyQgixp6MgZmQ4G4QniK0.roa
Signing time: Tue 15 Sep 2026 10:00:37 +0000
ROA not before: Tue 15 Sep 2026 10:00:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28753
IP address blocks: 45.130.124.0/24 maxlen: 24
192.166.153.0/24 maxlen: 24
2a04:9f40::/29 maxlen: 29
2a06:1184:101::/48 maxlen: 48
2a06:3bc0::/29 maxlen: 29
2a07:8a40::/29 maxlen: 29
2a09:7b00::/29 maxlen: 29
2a0a:2d06:102::/48 maxlen: 48
2a0a:7d00::/29 maxlen: 29
2a0c:4880::/29 maxlen: 29
2a0c:7886:99::/48 maxlen: 48
2a0c:9240::/29 maxlen: 29
2a0d:2ac0::/29 maxlen: 29
2a0e:5800::/29 maxlen: 29
2a0f:17c0::/29 maxlen: 29
2a0f:2500::/29 maxlen: 29
2a0f:d200::/29 maxlen: 29
2a0f:db40::/29 maxlen: 29
2a11:8880::/29 maxlen: 29
2a13:1380::/29 maxlen: 29
2a13:18c6:66::/48 maxlen: 48
2a13:2cc0::/29 maxlen: 29
2a13:2d40::/29 maxlen: 29
2a13:2dc0::/29 maxlen: 29
2a13:2e40::/29 maxlen: 29
2a13:3380::/29 maxlen: 29
2a13:4900::/29 maxlen: 29
2a13:5b80::/29 maxlen: 29
2a13:7900::/29 maxlen: 29
2a13:7d80::/29 maxlen: 29
2a13:8200::/29 maxlen: 29
2a13:d100::/29 maxlen: 29
2a13:d700::/29 maxlen: 29
2a13:d900::/29 maxlen: 29
2a13:f900::/29 maxlen: 29
2a13:fb00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:82:e9:ad:0a:71:b2:d1:52:ac:f2:5f:5b:bc:1b:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 15 10:00:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3fb0c9afc0f24208b1a7a3206664381b842788ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c2:0f:b3:16:bf:2e:3d:18:81:33:cc:f3:54:
23:ec:80:9d:5c:31:08:58:44:df:63:fe:20:4a:53:
98:ca:fe:17:39:f8:34:49:cb:0d:25:8d:a7:cc:c6:
f9:ac:6a:dd:a4:ff:69:5f:02:32:1d:09:79:e0:40:
3d:e0:9d:a4:bf:e1:c0:9e:95:f6:96:05:b0:6d:16:
0e:77:f7:0e:50:64:19:d5:08:b5:9f:b5:a8:82:7b:
7a:51:74:b4:13:8d:33:dd:84:b4:6c:1b:aa:23:11:
6e:77:44:b4:5b:8a:30:2a:4c:cd:f4:a3:ac:c3:0f:
9c:d2:85:27:b7:be:e4:8d:39:89:33:9f:06:f2:6f:
aa:bb:6c:d1:d7:7b:ca:ee:54:1c:3d:3f:61:54:a2:
62:9d:a7:fc:11:a6:4d:da:3a:28:3d:19:56:0c:56:
09:ea:3e:86:e7:21:40:86:59:f6:17:dd:a2:ef:25:
dd:65:8b:8a:1e:ac:b4:0e:4f:28:dc:87:b6:7c:59:
8c:cc:9e:a8:df:d8:b6:27:9c:90:84:77:1a:21:be:
80:4b:28:a2:37:b5:4f:dc:31:07:ae:56:b7:a2:66:
c9:fe:67:8b:1a:c5:b0:36:b7:5b:37:84:ff:da:b4:
ee:a0:c3:9b:b2:a0:6b:44:0a:57:52:cb:49:8d:4c:
3e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B0:C9:AF:C0:F2:42:08:B1:A7:A3:20:66:64:38:1B:84:27:88:AD
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/P7DJr8DyQgixp6MgZmQ4G4QniK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.124.0/24
192.166.153.0/24
IPv6:
2a04:9f40::/29
2a06:1184:101::/48
2a06:3bc0::/29
2a07:8a40::/29
2a09:7b00::/29
2a0a:2d06:102::/48
2a0a:7d00::/29
2a0c:4880::/29
2a0c:7886:99::/48
2a0c:9240::/29
2a0d:2ac0::/29
2a0e:5800::/29
2a0f:17c0::/29
2a0f:2500::/29
2a0f:d200::/29
2a0f:db40::/29
2a11:8880::/29
2a13:1380::/29
2a13:18c6:66::/48
2a13:2cc0::/29
2a13:2d40::/29
2a13:2dc0::/29
2a13:2e40::/29
2a13:3380::/29
2a13:4900::/29
2a13:5b80::/29
2a13:7900::/29
2a13:7d80::/29
2a13:8200::/29
2a13:d100::/29
2a13:d700::/29
2a13:d900::/29
2a13:f900::/29
2a13:fb00::/29
Signature Algorithm: sha256WithRSAEncryption
b9:bc:c0:0f:d3:76:04:ea:29:dd:0e:21:41:a8:af:64:3b:ee:
e8:38:bf:f6:62:f8:27:3a:29:b2:ad:70:1c:dd:3e:b0:79:30:
06:f6:0c:da:8f:ee:c7:c9:db:d1:1a:02:70:27:51:39:8c:08:
31:fa:f8:02:ed:a3:04:59:c3:7b:05:ed:10:08:e4:65:f7:52:
09:59:36:0f:61:74:b2:67:9b:2d:90:64:e4:33:b8:52:44:fa:
0a:fc:a4:2c:79:32:b6:40:4e:49:d8:80:15:94:1a:b6:b4:99:
55:1b:40:85:60:f2:99:21:19:8f:bb:ee:5f:fd:13:e0:b4:0e:
cd:be:53:32:4a:9f:c9:62:aa:31:89:70:3b:a1:56:30:0d:b5:
6c:cf:1d:eb:26:24:43:7c:f7:8b:d5:0a:8a:2e:5d:64:9f:cd:
0b:f5:4b:9e:cb:c2:e8:c7:52:80:bb:e0:5b:ba:95:e0:85:ab:
88:21:18:33:e5:79:68:3f:b1:f6:9d:e4:ac:b9:14:b7:64:d9:
df:7f:0b:cc:ad:be:79:11:c6:92:36:ee:be:f4:ec:eb:07:aa:
86:03:52:b4:00:ae:51:c7:2f:5b:45:22:40:49:30:f2:1a:79:
66:58:04:36:b1:6f:0f:de:cd:bf:96:9c:f2:81:5e:ce:12:80:
71:bb:11:05
-----BEGIN CERTIFICATE-----
MIIGCTCCBPGgAwIBAgISAaCkgumtCnGy0VKs8l9bvBsnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYwOTE1MTAwMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZmIwYzlhZmMwZjI0MjA4YjFhN2EzMjA2NjY0MzgxYjg0Mjc4OGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMIPsxa/Lj0YgTPM81Qj7ICdXDEI
WETfY/4gSlOYyv4XOfg0ScsNJY2nzMb5rGrdpP9pXwIyHQl54EA94J2kv+HAnpX2
lgWwbRYOd/cOUGQZ1Qi1n7Wognt6UXS0E40z3YS0bBuqIxFud0S0W4owKkzN9KOs
ww+c0oUnt77kjTmJM58G8m+qu2zR13vK7lQcPT9hVKJinaf8EaZN2jooPRlWDFYJ
6j6G5yFAhln2F92i7yXdZYuKHqy0Dk8o3Ie2fFmMzJ6o39i2J5yQhHcaIb6ASyii
N7VP3DEHrla3ombJ/meLGsWwNrdbN4T/2rTuoMObsqBrRApXUstJjUw+RwIDAQAB
o4IDFTCCAxEwHQYDVR0OBBYEFD+wya/A8kIIsaejIGZkOBuEJ4itMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvUDdESnI4RHlRZ2l4cDZNZ1ptUTRHNFFuaUswLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBKQYIKwYBBQUHAQcBAf8EggEYMIIBFDASBAIAATAMAwQA
LYJ8AwQAwKaZMIH9BAIAAjCB9gMFAyoEn0ADBwAqBhGEAQEDBQMqBjvAAwUDKgeK
QAMFAyoJewADBwAqCi0GAQIDBQMqCn0AAwUDKgxIgAMHACoMeIYAmQMFAyoMkkAD
BQMqDSrAAwUDKg5YAAMFAyoPF8ADBQMqDyUAAwUDKg/SAAMFAyoP20ADBQMqEYiA
AwUDKhMTgAMHACoTGMYAZgMFAyoTLMADBQMqEy1AAwUDKhMtwAMFAyoTLkADBQMq
EzOAAwUDKhNJAAMFAyoTW4ADBQMqE3kAAwUDKhN9gAMFAyoTggADBQMqE9EAAwUD
KhPXAAMFAyoT2QADBQMqE/kAAwUDKhP7ADANBgkqhkiG9w0BAQsFAAOCAQEAubzA
D9N2BOop3Q4hQaivZDvu6Di/9mL4Jzopsq1wHN0+sHkwBvYM2o/ux8nb0RoCcCdR
OYwIMfr4Au2jBFnDewXtEAjkZfdSCVk2D2F0smebLZBk5DO4UkT6CvykLHkytkBO
SdiAFZQatrSZVRtAhWDymSEZj7vuX/0T4LQOzb5TMkqfyWKqMYlwO6FWMA21bM8d
6yYkQ3z3i9UKii5dZJ/NC/VLnsvC6MdSgLvgW7qV4IWriCEYM+V5aD+x9p3krLkU
t2TZ338LzK2+eRHGkjbuvvTs6weqhgNStACuUccvW0UiQEkw8hp5ZlgENrFvD97N
v5ac8oFezhKAcbsRBQ==
-----END CERTIFICATE-----
Generated at Mon Sep 28 06:48:18 2026 by rpki-client