Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_9Oi94ITLToc8XBFbL3hL1r06Kw.roa
File: _9Oi94ITLToc8XBFbL3hL1r06Kw.roa (raw, json)
Hash identifier: DRkVDxvehchTeBeAKGvMFlTL02PEFl1NFc5JctNtbFA=
Subject key identifier: FF:D3:A2:F7:82:13:2D:3A:1C:F1:70:45:6C:BD:E1:2F:5A:F4:E8:AC
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019C5110AD5B493E8343EAEA0AEA88659604
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_9Oi94ITLToc8XBFbL3hL1r06Kw.roa
Signing time: Thu 12 Feb 2026 08:56:13 +0000
ROA not before: Thu 12 Feb 2026 08:56:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29066
IP address blocks: 2.56.102.0/24 maxlen: 24
2.59.23.0/24 maxlen: 24
45.86.14.0/24 maxlen: 24
45.133.220.0/24 maxlen: 24
45.133.221.0/24 maxlen: 24
45.133.222.0/24 maxlen: 24
45.133.223.0/24 maxlen: 24
45.152.203.0/24 maxlen: 24
193.39.244.0/24 maxlen: 24
2a07:f300::/29 maxlen: 29
2a0f:4a00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:51:10:ad:5b:49:3e:83:43:ea:ea:0a:ea:88:65:96:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 12 08:56:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ffd3a2f782132d3a1cf170456cbde12f5af4e8ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:37:65:ff:5b:de:ca:a1:a9:1f:36:9c:2d:ac:
21:3d:10:72:94:05:22:7d:0a:3f:da:f7:05:e1:00:
ea:0d:7d:02:fe:66:20:1c:2b:f1:e5:5e:13:99:7f:
52:21:b7:1e:e6:af:c7:0d:4c:70:72:5e:4a:50:74:
a4:ce:4c:f5:18:a9:ac:26:b1:38:88:b6:f7:99:e6:
c2:b0:1f:00:93:14:00:2d:47:89:6e:8a:3b:0a:6c:
ee:76:69:35:56:65:d4:42:e9:8e:16:4d:8f:27:cd:
c3:ad:ca:8a:37:a9:86:e4:44:e2:c2:f8:7d:9e:e0:
2f:62:47:ae:c6:9a:20:23:18:13:6f:c7:3e:b9:b0:
5a:7f:8a:8b:f1:c3:75:91:4b:10:4b:76:af:3f:b0:
dc:ad:78:f6:6f:21:f6:7b:2f:01:4b:c9:b0:13:af:
29:08:b3:dd:27:c8:92:97:aa:e8:14:b5:58:4c:74:
54:ca:d2:cb:c4:b5:ac:77:81:d2:e9:c9:27:e3:02:
87:5e:a9:cc:4b:7a:48:48:ed:f9:5e:38:1a:83:6a:
2c:2f:d1:3a:59:82:84:d5:c9:00:07:d1:4d:cc:f2:
62:39:17:a2:63:08:bc:13:11:dc:05:59:74:36:cd:
78:5b:7b:50:92:cc:d1:2a:97:de:39:82:6c:19:60:
7d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D3:A2:F7:82:13:2D:3A:1C:F1:70:45:6C:BD:E1:2F:5A:F4:E8:AC
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_9Oi94ITLToc8XBFbL3hL1r06Kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.102.0/24
2.59.23.0/24
45.86.14.0/24
45.133.220.0/22
45.152.203.0/24
193.39.244.0/24
IPv6:
2a07:f300::/29
2a0f:4a00::/29
Signature Algorithm: sha256WithRSAEncryption
c6:ae:66:fe:44:cf:cf:6c:a7:1c:e8:07:ab:0b:d3:27:42:9f:
6b:2f:29:bd:68:e5:c1:1f:dc:ac:06:f3:3f:f5:e3:48:06:0a:
25:c6:92:4d:0e:14:21:fd:ea:be:d6:aa:67:02:74:06:04:12:
d6:95:9d:ed:31:5a:ae:67:70:1c:c7:05:11:a3:e8:9c:42:e4:
21:62:1c:4d:77:cf:98:ab:e9:bb:52:c6:35:2b:4f:3c:34:24:
db:e5:e0:eb:fc:a5:e2:c9:fc:33:6d:7b:84:c8:ea:38:ae:a8:
41:37:f2:09:39:1b:96:c4:8d:0e:8e:85:48:20:88:04:85:0b:
8a:f4:88:c2:66:9e:f2:c4:b6:ef:7d:d1:b6:14:75:50:a5:16:
ef:c6:97:57:ac:db:24:76:90:b3:a4:f2:e4:21:8d:90:f6:50:
17:d0:1b:37:20:f9:b6:18:4e:3a:95:f1:13:d1:dc:ce:03:a2:
79:96:dd:a0:97:09:24:13:7c:cd:c7:ec:e7:14:b9:c5:bd:32:
39:84:a9:11:77:09:33:bb:94:71:72:d2:e4:d5:4a:6c:bb:e1:
73:79:4a:57:d4:14:f1:0e:cc:47:6b:2a:53:3d:b1:de:82:c0:
f6:06:b6:c4:15:3a:de:99:c8:d0:ce:81:db:5a:d6:0a:cd:6d:
35:81:d8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:25:10 2026 by rpki-client