Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/lQFIs3K8_xhkjPmjLRXhw87NMRw.roa
File: lQFIs3K8_xhkjPmjLRXhw87NMRw.roa (raw, json)
Hash identifier: sWTzpMIaZV5LZtzk9Zy8F2A27/R8yYx9leANVbYMLXc=
Subject key identifier: 95:01:48:B3:72:BC:FF:18:64:8C:F9:A3:2D:15:E1:C3:CE:CD:31:1C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019EA7A99AB7EA4B9FB9DCEE44633007F4CA
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/lQFIs3K8_xhkjPmjLRXhw87NMRw.roa
Signing time: Mon 08 Jun 2026 14:36:10 +0000
ROA not before: Mon 08 Jun 2026 14:36:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203374
IP address blocks: 45.94.36.0/24 maxlen: 24
103.91.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a7:a9:9a:b7:ea:4b:9f:b9:dc:ee:44:63:30:07:f4:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 8 14:36:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=950148b372bcff18648cf9a32d15e1c3cecd311c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:84:7b:45:b3:95:53:2a:91:de:b9:cf:83:37:
e0:41:2d:65:36:4b:75:c5:2f:89:c0:83:11:0c:d6:
b0:29:55:3b:a5:73:fc:86:98:8b:a4:ed:3b:cc:0d:
bb:7f:21:b0:d6:73:b0:3a:b8:41:75:32:ae:2c:e1:
f8:2f:3c:57:48:5e:47:90:94:eb:53:cd:c7:c9:13:
8c:85:e4:d9:8d:8f:05:a9:97:85:b6:08:0b:d4:a3:
39:96:f3:98:c0:4f:ad:2b:b3:50:7e:f6:f9:95:48:
5e:64:d1:88:09:aa:c4:6f:ca:96:be:4f:0b:99:74:
eb:bb:8e:40:0d:59:3a:8d:02:2f:f5:9e:0b:8d:50:
c9:3c:7e:71:6e:6d:4c:41:31:66:44:f2:f7:c6:78:
64:10:c2:4b:57:0e:9f:ea:e6:8c:d7:57:ee:72:e4:
b5:1b:26:c0:ca:c2:53:d5:c7:7d:d6:4c:9b:07:14:
7a:4c:17:cf:22:7d:91:d5:e6:87:51:35:ef:1f:14:
7b:95:e1:9e:8d:b0:f2:29:2c:6c:45:01:83:66:a6:
7c:ad:53:f5:11:db:70:31:61:7a:0a:e6:d3:95:03:
0a:bf:77:1f:79:72:4f:7a:fe:7f:97:63:ce:35:44:
f1:03:b7:32:de:06:93:04:d8:7d:16:48:15:b4:80:
aa:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:01:48:B3:72:BC:FF:18:64:8C:F9:A3:2D:15:E1:C3:CE:CD:31:1C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/lQFIs3K8_xhkjPmjLRXhw87NMRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.36.0/24
103.91.147.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:03:a4:78:d1:39:7e:66:ce:22:26:c0:e3:93:2a:b0:46:f8:
60:9b:99:e5:ea:39:ff:2d:36:d3:36:fb:be:4b:23:d3:2c:81:
9f:f8:59:b8:39:10:4b:90:2d:08:64:33:b0:c6:09:f9:9b:24:
70:78:2b:f6:5b:f3:7d:ee:f6:80:2c:ad:48:10:6f:46:a2:02:
97:e2:cb:10:26:99:1a:e2:e8:9a:60:55:52:a6:a2:ed:ad:85:
eb:50:69:e2:b2:c1:cf:e3:82:8d:a5:c3:dd:43:69:91:03:c9:
73:4a:d5:a2:37:93:43:22:a4:0c:44:84:0d:ff:51:1e:44:83:
ee:e1:4f:5d:ee:6b:d9:a2:12:60:ea:3c:4d:2b:b0:6a:9f:d9:
a1:e5:26:f2:fb:58:74:c7:ac:3d:b6:a3:ec:e2:9d:31:2d:30:
3c:04:a6:dc:5d:87:d6:42:21:60:4a:7e:c2:29:a6:b9:3f:97:
ed:ee:25:0d:b4:3e:a0:b2:1a:e7:b3:8a:a7:8b:b1:fd:51:97:
a1:73:3e:8c:a5:76:dc:6b:ee:9e:df:75:fb:a7:c1:5b:5c:5e:
27:30:cd:e8:ef:04:8f:d9:c2:7d:99:6a:4c:c9:1a:58:13:49:
8e:32:a2:8e:b6:33:78:ca:cb:36:af:3e:c0:be:1f:da:d4:b3:
2e:87:14:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:53:58 2026 by rpki-client