Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/jLU8nA6DpO0oHhOpVEc5XgeEiPY.roa
File: jLU8nA6DpO0oHhOpVEc5XgeEiPY.roa (raw, json)
Hash identifier: 4Qej+ZU4CKCxTGQm6SR7VrW79fXUj4kJV76hINBYZ7M=
Subject key identifier: 8C:B5:3C:9C:0E:83:A4:ED:28:1E:13:A9:54:47:39:5E:07:84:88:F6
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019EB5CF73D3256700A51BA6D375742033A2
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/jLU8nA6DpO0oHhOpVEc5XgeEiPY.roa
Signing time: Thu 11 Jun 2026 08:32:12 +0000
ROA not before: Thu 11 Jun 2026 08:32:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207461
IP address blocks: 45.86.247.0/24 maxlen: 24
45.92.168.0/24 maxlen: 24
45.92.169.0/24 maxlen: 24
45.92.171.0/24 maxlen: 24
45.94.46.0/24 maxlen: 24
45.94.47.0/24 maxlen: 24
45.95.98.0/23 maxlen: 23
45.95.99.0/24 maxlen: 24
45.128.24.0/24 maxlen: 24
45.129.125.0/24 maxlen: 24
45.131.213.0/24 maxlen: 24
45.137.42.0/23 maxlen: 23
45.137.62.0/24 maxlen: 24
45.140.14.0/24 maxlen: 24
45.146.88.0/24 maxlen: 24
45.146.181.0/24 maxlen: 24
45.147.28.0/24 maxlen: 24
45.154.56.0/24 maxlen: 24
45.158.196.0/24 maxlen: 24
45.158.199.0/24 maxlen: 24
103.229.28.0/24 maxlen: 24
141.193.20.0/24 maxlen: 24
185.155.203.0/24 maxlen: 24
185.164.56.0/24 maxlen: 24
185.164.57.0/24 maxlen: 24
193.5.65.0/24 maxlen: 24
194.62.67.0/24 maxlen: 24
2a0a:2d06:10::/48 maxlen: 48
2a0a:2d07:e5::/48 maxlen: 48
2a0f:3d86:44::/48 maxlen: 48
2a0f:3d86:100::/48 maxlen: 48
2a0f:3d86:101::/48 maxlen: 48
2a0f:e1c0:37a::/48 maxlen: 48
2a0f:e1c0:a8b9::/48 maxlen: 48
2a13:8c86:120::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:cf:73:d3:25:67:00:a5:1b:a6:d3:75:74:20:33:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 11 08:32:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8cb53c9c0e83a4ed281e13a95447395e078488f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a0:1a:36:a4:23:de:52:69:bd:de:07:0a:7d:
6a:40:83:5e:36:44:03:d0:4a:4a:14:20:08:19:5c:
0c:b4:85:44:55:f2:b1:05:9c:4e:45:07:2d:a5:1d:
b4:c9:6c:55:92:3c:92:cc:f7:84:61:57:22:6f:b8:
65:58:98:b5:17:81:9f:c6:a4:e4:04:76:18:fe:1f:
d7:55:ac:a2:83:51:90:ae:a1:c5:36:0c:2d:ad:7c:
ab:9e:05:65:e9:18:6e:f6:b3:48:f4:76:bb:8b:0d:
a1:81:66:08:bf:ac:bf:2c:22:1e:fc:40:e4:88:43:
e9:02:34:51:db:16:10:4c:b0:59:6d:ea:2f:5f:23:
a2:f2:c3:1c:51:d0:17:9e:60:0d:75:e7:c0:1b:97:
58:6b:fd:6b:3b:a4:cd:8b:d2:ca:df:ce:90:1e:cf:
4a:3e:30:a0:5d:46:83:65:66:9b:46:bb:d2:5b:2a:
7f:a9:dc:09:3d:de:33:a9:78:a7:e7:76:42:a7:ed:
f4:04:43:0d:17:6c:70:7c:cd:fb:aa:c0:10:6d:14:
91:df:34:95:a7:97:27:c7:94:c2:8f:b7:41:8f:2f:
55:fd:2e:8e:93:77:52:28:6c:c8:6a:ef:73:f4:45:
42:e5:6b:e6:30:27:44:00:c6:40:79:30:f5:cb:89:
d4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B5:3C:9C:0E:83:A4:ED:28:1E:13:A9:54:47:39:5E:07:84:88:F6
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/jLU8nA6DpO0oHhOpVEc5XgeEiPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.247.0/24
45.92.168.0/23
45.92.171.0/24
45.94.46.0/23
45.95.98.0/23
45.128.24.0/24
45.129.125.0/24
45.131.213.0/24
45.137.42.0/23
45.137.62.0/24
45.140.14.0/24
45.146.88.0/24
45.146.181.0/24
45.147.28.0/24
45.154.56.0/24
45.158.196.0/24
45.158.199.0/24
103.229.28.0/24
141.193.20.0/24
185.155.203.0/24
185.164.56.0/23
193.5.65.0/24
194.62.67.0/24
IPv6:
2a0a:2d06:10::/48
2a0a:2d07:e5::/48
2a0f:3d86:44::/48
2a0f:3d86:100::/47
2a0f:e1c0:37a::/48
2a0f:e1c0:a8b9::/48
2a13:8c86:120::/48
Signature Algorithm: sha256WithRSAEncryption
58:9c:b4:2a:89:3f:b4:88:47:47:af:48:04:82:a0:c7:a0:79:
d1:b3:47:ed:42:b2:37:4f:9a:74:f4:26:42:08:e3:ee:91:97:
cd:b7:36:96:6c:a8:22:5d:87:28:fa:71:ec:49:6c:26:ad:0e:
b5:ab:6c:fb:87:bb:19:38:13:ae:43:a9:d8:a1:00:ea:92:93:
3e:27:78:df:6f:42:97:30:1c:47:f7:f1:b7:6b:9d:67:0b:32:
9b:6f:69:86:69:fe:b9:27:0f:aa:e0:0f:5c:8f:ee:4f:17:8f:
89:9e:54:58:4e:4a:3a:d0:21:b3:1e:1a:93:c4:0c:2f:a6:4d:
5f:30:4f:8a:e4:be:72:c2:00:fb:21:1d:7a:4e:42:13:68:d0:
e0:30:cb:02:be:57:b4:41:ac:fd:6b:c6:8b:2a:ba:fa:16:92:
37:1c:5f:10:b0:d5:06:e8:69:02:89:43:e7:63:1d:1b:26:af:
5f:48:fc:41:7b:c6:ce:c1:a4:a8:ef:19:77:0b:30:d3:12:37:
aa:52:52:6c:db:31:88:ff:b0:45:83:38:69:bf:eb:3e:75:c7:
25:ce:9c:9c:23:2f:d9:58:fc:48:34:4b:74:5e:b5:37:64:21:
33:19:cc:ae:4a:0b:12:6f:33:4f:92:a0:5c:77:12:3e:f0:bb:
15:19:80:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:54:13 2026 by rpki-client