Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Rv6XBmsbgMIKwZgyVOQYR8iiSzU.roa
File: Rv6XBmsbgMIKwZgyVOQYR8iiSzU.roa (raw, json)
Hash identifier: 0QE5dogHoug4KA6eOTDzMHpXFEjSrVQk6d3fLriEXyU=
Subject key identifier: 46:FE:97:06:6B:1B:80:C2:0A:C1:98:32:54:E4:18:47:C8:A2:4B:35
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019C957BD8B9EFEF31CB6A04807F1D65E661
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Rv6XBmsbgMIKwZgyVOQYR8iiSzU.roa
Signing time: Wed 25 Feb 2026 15:47:27 +0000
ROA not before: Wed 25 Feb 2026 15:47:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58931
IP address blocks: 45.146.88.0/24 maxlen: 24
193.8.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:95:7b:d8:b9:ef:ef:31:cb:6a:04:80:7f:1d:65:e6:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 25 15:47:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46fe97066b1b80c20ac1983254e41847c8a24b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:db:0d:3b:12:b2:35:98:0a:53:12:04:46:c9:
f9:6d:3c:9c:74:25:78:a6:c9:da:bd:c2:b3:7d:c4:
a1:9a:41:11:08:8d:b5:7e:79:56:92:99:f3:36:11:
ba:5b:c4:26:a6:54:a6:06:cd:25:b8:a8:ea:67:99:
f8:e1:99:50:d1:f8:1b:39:5a:6b:63:ae:b8:07:d9:
d3:f2:32:5e:86:e9:06:6a:86:f4:d4:f9:5d:c3:0f:
55:9c:01:38:de:50:a4:b9:05:70:40:7d:48:93:b6:
0d:e3:b7:31:3a:f8:61:8d:8b:b4:f5:04:67:37:c8:
f3:16:68:73:a0:bd:b0:e2:e5:c5:ee:a5:8b:ee:99:
97:ee:63:b8:8c:ba:54:e3:03:e4:7c:cc:5c:2e:28:
6a:24:59:aa:2b:27:9f:ad:ef:89:57:7b:e2:95:df:
97:4a:5a:9a:54:80:d5:d0:ce:32:00:47:71:37:f3:
ee:74:af:81:c2:3e:95:f2:ca:46:eb:76:21:3c:c9:
33:27:76:e2:2a:24:a1:58:41:76:34:34:90:12:aa:
6b:9d:44:cc:f8:c5:16:c8:8f:5e:6f:da:2f:77:45:
47:60:e5:6e:73:ee:ca:45:8f:58:74:af:3c:59:e5:
82:9f:74:ab:fe:1b:8d:2e:dd:55:0a:67:7b:b2:49:
1e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FE:97:06:6B:1B:80:C2:0A:C1:98:32:54:E4:18:47:C8:A2:4B:35
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Rv6XBmsbgMIKwZgyVOQYR8iiSzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.88.0/24
193.8.238.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:e7:51:4a:a8:a0:68:bf:f9:73:19:df:0c:c7:43:f8:97:bd:
9a:96:02:76:f8:39:66:f4:cd:23:b0:9a:ab:ac:8a:7c:75:80:
4a:27:32:01:a9:bb:01:cf:19:77:81:36:6e:7d:bb:be:71:d9:
2b:ea:11:8b:32:18:17:d9:45:16:dd:83:93:6b:2a:08:29:e2:
af:8c:77:60:cd:02:a5:ee:38:96:75:6f:ad:56:f0:3a:d9:84:
1f:f7:ac:94:4e:e2:35:9f:ef:e8:f9:f7:af:7d:cd:c7:ef:f3:
5b:83:a9:a6:13:7d:21:0d:20:a0:a9:ff:9e:df:23:25:c0:06:
77:c1:43:c2:2a:95:03:d2:7a:e0:c6:de:09:a7:f2:c7:5a:56:
03:a6:44:4f:4e:8d:65:87:eb:7d:56:26:6e:a5:7d:5d:ac:39:
c8:9f:66:9f:8d:6a:82:bf:1d:06:bf:d9:bf:28:7b:5d:fb:80:
31:dc:d5:8a:70:d3:21:54:38:95:5f:92:90:91:09:db:44:94:
9b:b2:48:e5:e4:71:4a:92:e5:0f:03:1c:d6:02:8b:f0:67:94:
21:78:69:a7:f2:d3:7a:24:bc:17:00:13:c4:31:bc:81:e5:15:
12:18:7d:cc:e9:64:72:7d:08:8d:34:a9:f0:76:8f:40:51:ae:
fd:35:1f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:06:13 2026 by rpki-client