Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/icdPWUKBwkHEvucI5uSX0kGquwA.roa
File: icdPWUKBwkHEvucI5uSX0kGquwA.roa (raw, json)
Hash identifier: z4yN7QccHEj+/jYZaQmRxoFOsRDU3piBZ5ZvHWUfOcg=
Subject key identifier: 89:C7:4F:59:42:81:C2:41:C4:BE:E7:08:E6:E4:97:D2:41:AA:BB:00
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019C4275ABA988938FF7DC0C005E69B02917
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/icdPWUKBwkHEvucI5uSX0kGquwA.roa
Signing time: Mon 09 Feb 2026 12:52:13 +0000
ROA not before: Mon 09 Feb 2026 12:52:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149457
IP address blocks: 45.157.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:75:ab:a9:88:93:8f:f7:dc:0c:00:5e:69:b0:29:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 9 12:52:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=89c74f594281c241c4bee708e6e497d241aabb00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8c:2a:5a:ff:ec:67:b7:7e:f5:0c:bd:a6:28:
cb:3b:f4:1a:10:eb:40:67:87:26:c3:e4:65:30:bc:
40:2f:38:f5:95:59:49:e5:f9:af:39:ee:57:9a:09:
c0:bb:78:a1:c2:89:71:1d:72:66:e2:27:ef:cf:40:
df:87:a7:ef:21:16:b2:4f:65:58:39:9c:f2:d7:3b:
ed:4a:b1:c7:aa:56:d8:82:aa:fc:14:ef:fa:63:3e:
c9:7b:bd:af:cd:10:a6:5d:53:3c:0e:2a:2e:d8:90:
e5:bb:2d:b9:58:93:f3:b0:a0:e2:34:39:d1:03:00:
2a:85:71:54:e3:23:c5:75:97:3e:b5:ba:5a:38:dc:
62:3d:de:d4:8e:66:c1:bf:fa:60:6c:73:e6:be:30:
d4:96:ac:0e:b8:56:3d:c5:54:23:73:b9:64:28:cb:
7c:37:b3:67:bf:64:82:f5:41:38:31:4f:0e:e2:d5:
13:af:f5:84:e4:f7:95:00:e1:f4:ea:6a:a3:21:d0:
f3:06:53:3e:9a:45:fa:6e:3e:2c:83:89:17:ba:e8:
7f:fd:fc:15:2e:4a:47:37:de:d3:a7:bc:d6:82:fe:
19:c7:06:c2:fd:d3:8f:76:d2:44:70:ef:53:e7:5d:
f3:51:9a:4a:a0:71:51:0f:24:3c:6b:ac:53:3d:b1:
99:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C7:4F:59:42:81:C2:41:C4:BE:E7:08:E6:E4:97:D2:41:AA:BB:00
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/icdPWUKBwkHEvucI5uSX0kGquwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.37.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:94:ae:91:a9:27:3f:79:85:f6:31:90:6f:cd:56:20:f2:59:
db:37:52:36:15:63:cb:05:af:29:b7:de:45:e0:c1:a4:b7:33:
31:22:14:ec:59:c8:1e:1b:b2:43:52:08:75:09:8d:b8:88:f5:
22:75:17:3b:1a:75:84:b6:6a:88:5f:c0:f6:ff:9d:04:f7:f1:
39:83:e6:b2:ef:0e:8c:b1:7c:34:74:63:b9:5b:d5:6f:2b:bb:
f5:5c:12:2e:04:aa:b5:fc:81:50:22:6c:a0:fa:4d:bb:df:3a:
4f:ef:65:21:af:1b:f9:27:94:d2:ec:17:38:73:c7:72:5b:c9:
26:73:84:30:9b:97:ea:e6:b6:4e:00:82:2e:02:c7:aa:85:b2:
64:28:d6:b8:e9:06:ef:a7:06:7c:d6:46:ec:7e:99:1b:90:3b:
99:17:1d:13:12:d3:4c:01:16:e2:26:fb:9a:66:c7:6b:7f:09:
99:f9:c9:b3:41:19:f1:c5:45:98:59:36:25:b6:4e:a1:b8:68:
2b:5f:c4:e9:60:6f:3b:c2:67:cf:6e:f0:53:5b:4f:b2:78:7b:
5f:d4:c9:04:a2:e3:41:c5:d0:b8:fc:91:70:70:15:b6:ac:c4:
7f:f7:0a:0c:93:05:66:c7:96:79:30:69:1d:d8:77:93:88:db:
05:9d:d0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:38:33 2026 by rpki-client