Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/VfwtfNdoAo-YmTLwJ6iUoB_pS3Y.roa
File: VfwtfNdoAo-YmTLwJ6iUoB_pS3Y.roa (raw, json)
Hash identifier: pIesxZdZjqYWBoent2ShGO5xQvJuHQpHV5nvCa2RJ5g=
Subject key identifier: 55:FC:2D:7C:D7:68:02:8F:98:99:32:F0:27:A8:94:A0:1F:E9:4B:76
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A0A9F8C497F104FBABE3F4EFF3D98B2088
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/VfwtfNdoAo-YmTLwJ6iUoB_pS3Y.roa
Signing time: Wed 16 Sep 2026 11:27:27 +0000
ROA not before: Wed 16 Sep 2026 11:27:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200823
IP address blocks: 45.12.62.0/24 maxlen: 24
45.95.99.0/24 maxlen: 24
45.131.214.0/24 maxlen: 24
45.139.84.0/24 maxlen: 24
45.151.106.0/24 maxlen: 24
45.153.219.0/24 maxlen: 24
93.190.247.0/24 maxlen: 24
103.114.43.0/24 maxlen: 24
103.227.84.0/24 maxlen: 24
193.41.68.0/24 maxlen: 24
194.33.61.0/24 maxlen: 24
194.35.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:f8:c4:97:f1:04:fb:ab:e3:f4:ef:f3:d9:8b:20:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 16 11:27:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55fc2d7cd768028f989932f027a894a01fe94b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c2:fb:1d:bf:78:c6:72:3a:29:98:25:de:bf:
16:4b:44:f9:25:f7:d9:e3:48:4d:04:35:92:92:74:
ed:d2:06:57:cd:b2:77:ca:8c:20:cd:4c:9a:34:6a:
aa:cb:ad:5a:8b:28:52:91:a7:bd:31:f8:da:0d:f1:
50:bc:f3:6e:da:70:6f:ee:4f:a0:6f:b4:6f:6f:fd:
5e:53:87:97:83:4e:71:15:d2:9e:19:6a:1c:2e:c6:
c8:b0:8e:e9:5a:38:79:f5:77:e2:95:7a:6c:61:0f:
01:2c:b4:9e:c1:5b:1f:45:84:23:9c:bb:c2:ef:2b:
a7:cb:25:46:d5:9d:f4:54:ad:1b:34:51:80:19:ad:
df:2c:19:e1:c8:71:93:00:18:3a:36:36:69:2e:51:
6a:a6:9a:e9:7f:2f:e0:89:1c:02:3d:56:c4:0d:a9:
e1:d1:fc:e6:e7:34:a7:c8:2b:3b:33:d5:bf:16:ad:
b4:13:eb:c9:1d:73:b9:38:49:b8:c9:ed:c5:02:71:
fb:e4:99:6d:a4:96:a9:34:93:dc:b2:de:13:92:5b:
f9:9b:02:d0:36:f5:37:43:c8:1a:34:8e:07:ba:50:
a8:8e:eb:99:d4:58:ce:a9:28:53:a2:11:e3:d2:bc:
d0:41:d2:92:d2:a3:97:30:54:bc:1c:7a:5f:ec:34:
cd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FC:2D:7C:D7:68:02:8F:98:99:32:F0:27:A8:94:A0:1F:E9:4B:76
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/VfwtfNdoAo-YmTLwJ6iUoB_pS3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.62.0/24
45.95.99.0/24
45.131.214.0/24
45.139.84.0/24
45.151.106.0/24
45.153.219.0/24
93.190.247.0/24
103.114.43.0/24
103.227.84.0/24
193.41.68.0/24
194.33.61.0/24
194.35.226.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:f9:88:54:c6:d7:49:4f:93:b3:4f:8c:dc:d6:40:ca:a6:2b:
99:8d:35:d2:cf:34:88:8f:4b:d7:0f:86:03:24:2b:f2:61:e2:
67:b6:20:a8:52:c4:10:88:d2:32:28:02:ba:55:3b:1c:08:80:
aa:70:93:65:c6:5f:75:1e:86:c3:e3:e6:e5:77:66:ef:80:1c:
95:c2:bd:ae:8b:15:64:64:7c:8a:33:3f:1e:37:bf:9c:2d:c6:
71:da:93:a6:dc:cb:bb:16:da:ca:a2:37:b4:3b:32:95:b1:6c:
b4:47:6b:65:bd:f9:2a:6d:a2:46:40:e3:27:0f:b3:8f:9e:4e:
75:a3:c0:7e:22:ef:be:e1:30:fd:e8:a3:20:47:1e:79:0a:02:
1b:5b:1e:94:4d:72:8b:29:af:34:00:8d:65:3f:a1:bf:97:5d:
f8:f9:29:07:69:77:1f:e5:43:d0:64:07:fa:38:62:96:0b:73:
9e:ff:f1:14:08:8d:c0:a6:01:89:b9:89:3d:43:7f:a3:01:af:
f7:60:e1:02:e6:93:ed:af:fa:94:04:27:52:1d:00:55:51:5a:
4c:d6:c0:ad:ed:ab:54:4a:23:c5:10:b5:0c:6b:ac:d1:72:0f:
dd:de:93:6d:79:dd:01:5b:38:1d:bf:e2:69:d4:b5:a9:c1:f3:
4f:36:ce:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:27:37 2026 by rpki-client