Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/hZDNtnBkkpvUwaGmO4fVUAqoYrI.roa
File: hZDNtnBkkpvUwaGmO4fVUAqoYrI.roa (raw, json)
Hash identifier: NTYJT1KIJglTyEi2e3p+WKAESQlD5y4xQNfT1DPXhwA=
Subject key identifier: 85:90:CD:B6:70:64:92:9B:D4:C1:A1:A6:3B:87:D5:50:0A:A8:62:B2
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019C2D9ABE5CA533FC33101E708FF0ECE315
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/hZDNtnBkkpvUwaGmO4fVUAqoYrI.roa
Signing time: Thu 05 Feb 2026 11:40:41 +0000
ROA not before: Thu 05 Feb 2026 11:40:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395954
IP address blocks: 45.145.58.0/24 maxlen: 24
45.147.100.0/24 maxlen: 24
45.147.101.0/24 maxlen: 24
45.147.102.0/24 maxlen: 24
45.147.103.0/24 maxlen: 24
45.152.201.0/24 maxlen: 24
45.155.200.0/24 maxlen: 24
45.155.201.0/24 maxlen: 24
45.155.202.0/24 maxlen: 24
45.155.203.0/24 maxlen: 24
193.8.8.0/24 maxlen: 24
194.41.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2d:9a:be:5c:a5:33:fc:33:10:1e:70:8f:f0:ec:e3:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 5 11:40:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8590cdb67064929bd4c1a1a63b87d5500aa862b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c4:32:26:56:fa:7d:27:92:09:c0:c5:26:e2:
25:46:d6:3d:c5:f2:7d:01:76:07:69:24:00:b9:1b:
a1:16:7a:8c:dc:ce:74:54:0b:4e:d3:dd:ac:f6:58:
3b:e9:e3:1a:d2:97:77:93:41:5b:d2:81:94:d4:f6:
ba:2d:87:e2:64:af:65:ca:42:68:73:88:02:2b:91:
02:d1:bc:38:88:15:f0:0b:82:99:95:44:4b:ac:07:
d2:8d:99:45:03:11:fc:dc:da:89:dd:d6:1d:c4:7c:
21:1a:59:7c:93:48:99:16:b8:82:c7:b3:50:20:03:
7e:71:59:13:a8:ed:df:f9:e5:b7:b4:3a:21:ec:82:
02:03:89:6d:b1:70:26:a7:3e:91:46:fa:3b:e4:7f:
3f:69:c5:df:ac:6d:9d:d6:2a:81:2f:b1:41:35:2a:
b3:9c:62:77:e0:45:56:1c:d0:9d:27:e4:a0:0a:ae:
20:3c:b2:a4:67:2a:ce:17:ea:26:cf:12:2a:d0:ad:
58:22:64:e7:59:b2:ad:3a:ec:8b:91:30:fb:69:34:
ca:94:ea:79:8c:ff:7a:e3:28:70:06:cd:6a:66:09:
09:d1:08:2b:9b:df:dc:a3:26:73:fd:8c:5a:e8:71:
5e:be:fc:91:d4:8d:78:8d:f3:cf:f3:bb:1f:62:21:
9b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:90:CD:B6:70:64:92:9B:D4:C1:A1:A6:3B:87:D5:50:0A:A8:62:B2
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/hZDNtnBkkpvUwaGmO4fVUAqoYrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.58.0/24
45.147.100.0/22
45.152.201.0/24
45.155.200.0/22
193.8.8.0/24
194.41.56.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:c1:f5:94:a9:94:87:ca:01:f0:3b:b5:53:5f:e7:19:e8:18:
9d:94:d3:b0:57:ee:d9:ff:50:4a:69:38:eb:1f:9a:9f:a7:fc:
4e:59:7c:d9:9b:6b:57:02:fa:45:2c:14:8f:57:f8:5b:94:ab:
05:66:dd:ad:94:46:c5:c1:14:9c:11:70:c8:ad:e0:b9:3a:65:
06:02:65:17:7c:b1:f3:d6:ba:9d:04:6d:af:7e:b0:44:61:7f:
c7:d7:bc:a6:07:64:57:e5:d4:39:2a:65:1b:7d:85:bc:8f:d2:
fe:4a:68:0c:f3:ac:d6:7d:83:cf:73:be:fb:6c:13:eb:e2:39:
98:e5:cc:18:db:91:e9:76:6d:6d:fe:ac:eb:fb:8f:3b:78:8b:
ee:a0:12:bc:7f:f7:44:cc:5b:66:8f:d5:bd:a1:67:b4:81:d7:
3f:b2:6c:5e:02:ae:e4:82:42:46:88:11:51:13:f1:c8:f9:8b:
ec:c8:d2:79:96:c3:37:3c:7a:22:e0:52:fd:e3:a1:7f:26:6a:
43:1c:91:09:5b:eb:00:cf:a2:3d:b3:4d:0d:89:5f:ef:0b:75:
9b:57:db:0b:ba:0a:a9:6a:08:30:e8:b8:4f:1d:e2:05:ad:2b:
22:07:1f:f5:b9:f2:6c:ee:ea:8d:4e:21:9b:70:b2:50:55:ea:
a3:f6:33:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:04:50 2026 by rpki-client