Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/oF4-F0DM4IT3FCxP0k3nBSykHqY.roa
File: oF4-F0DM4IT3FCxP0k3nBSykHqY.roa (raw, json)
Hash identifier: FB79/Z140ZUaWMg7d9q4ZCyRblfjMigInToUhmtCIrU=
Subject key identifier: A0:5E:3E:17:40:CC:E0:84:F7:14:2C:4F:D2:4D:E7:05:2C:A4:1E:A6
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A1A19AF7EC525095A47D21FA0CAE1041DC
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/oF4-F0DM4IT3FCxP0k3nBSykHqY.roa
Signing time: Tue 03 Nov 2026 13:30:50 +0000
ROA not before: Tue 03 Nov 2026 13:30:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30633
IP address blocks: 5.181.40.0/24 maxlen: 24
5.181.41.0/24 maxlen: 24
45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
45.145.57.0/24 maxlen: 24
80.253.250.0/24 maxlen: 24
103.139.50.0/24 maxlen: 24
193.27.23.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a06:1184:33::/48 maxlen: 48
2a06:1184:77::/48 maxlen: 48
2a06:35c0:2123::/48 maxlen: 48
2a06:35c2::/32 maxlen: 32
2a0a:2d06:99::/48 maxlen: 48
2a0c:7886:33::/48 maxlen: 48
2a0c:7886:66::/48 maxlen: 48
2a0e:15c7:55::/48 maxlen: 48
2a0e:f200:154::/48 maxlen: 48
2a0e:f200:164::/48 maxlen: 48
2a0e:f200:174::/48 maxlen: 48
2a0e:f200:184::/48 maxlen: 48
2a0e:f201::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81::/32 maxlen: 32
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2d81::/32 maxlen: 32
2a0f:2e80::/29 maxlen: 29
2a0f:3d80::/48 maxlen: 48
2a0f:3d84::/32 maxlen: 32
2a0f:7d02:1::/48 maxlen: 48
2a0f:e1c6::/32 maxlen: 32
2a0f:e1c7:2::/48 maxlen: 48
2a0f:e7c2::/32 maxlen: 32
2a10:32c0::/29 maxlen: 29
2a10:32c0::/32 maxlen: 32
2a10:32c1::/32 maxlen: 32
2a10:32c2::/32 maxlen: 32
2a10:32c4::/32 maxlen: 32
2a10:32c5::/32 maxlen: 32
2a10:32c6::/32 maxlen: 32
2a10:32c7::/32 maxlen: 32
2a10:35c0::/29 maxlen: 29
2a10:35c0::/32 maxlen: 32
2a10:35c1::/32 maxlen: 32
2a10:35c2::/32 maxlen: 32
2a10:35c3::/32 maxlen: 32
2a10:35c4::/32 maxlen: 32
2a10:35c5::/32 maxlen: 32
2a10:35c6::/32 maxlen: 32
2a10:35c7::/32 maxlen: 32
2a10:6d40::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a13:18c0:1::/48 maxlen: 48
2a13:18c6:55::/48 maxlen: 48
2a13:c900:44::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:37:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a1:9a:f7:ec:52:50:95:a4:7d:21:fa:0c:ae:10:41:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 3 13:30:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a05e3e1740cce084f7142c4fd24de7052ca41ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0a:bf:02:df:3a:f9:ab:fc:78:10:95:31:f4:
4b:7e:e0:f6:08:08:a5:14:19:37:3f:d4:a5:be:01:
d5:72:f3:bd:6a:2e:ba:76:93:51:f3:c5:d4:da:a9:
a6:db:f0:61:65:e1:c3:05:30:10:a7:05:1e:37:c3:
a0:5c:dd:5c:90:b6:16:fb:4b:0b:14:dd:0f:19:61:
e2:78:a2:eb:d5:f4:88:45:03:ff:79:6a:6d:1f:eb:
76:4c:f8:ce:54:b9:c6:fb:8e:9f:c9:28:97:06:c3:
f1:17:af:f3:2d:15:d7:cb:70:fa:64:36:b4:eb:0c:
2f:b6:70:00:fd:ae:d5:e5:69:af:ef:77:90:81:d1:
9e:40:17:df:ac:a4:22:ad:a3:f3:4d:61:35:71:24:
22:3a:a3:f3:72:b9:9c:4f:cb:30:b7:10:52:97:af:
4b:6d:c3:94:7b:73:d9:f1:e1:92:a4:10:b8:32:94:
33:91:e9:93:b8:8d:ef:51:7f:81:9f:c0:68:65:89:
c0:55:b9:04:05:5f:f8:b5:96:03:8d:7a:1c:59:ee:
01:65:89:9b:c7:de:4e:25:01:ee:61:7c:d1:a8:2d:
72:cd:97:dc:ac:4b:15:56:2b:e9:bb:b1:65:be:1e:
4e:87:3a:e8:e9:15:44:98:be:dc:03:68:a5:3d:3d:
79:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5E:3E:17:40:CC:E0:84:F7:14:2C:4F:D2:4D:E7:05:2C:A4:1E:A6
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/oF4-F0DM4IT3FCxP0k3nBSykHqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.40.0/23
45.129.127.0/24
45.135.37.0/24
45.145.57.0/24
80.253.250.0/24
103.139.50.0/24
193.27.23.0/24
193.164.199.0/24
IPv6:
2a06:1184:33::/48
2a06:1184:77::/48
2a06:35c0:2123::/48
2a06:35c2::/32
2a0a:2d06:99::/48
2a0c:7886:33::/48
2a0c:7886:66::/48
2a0e:15c7:55::/48
2a0e:f200:154::/48
2a0e:f200:164::/48
2a0e:f200:174::/48
2a0e:f200:184::/48
2a0e:f201::/32
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81::/32
2a0f:2d81::/32
2a0f:2e80::/29
2a0f:3d80::/48
2a0f:3d84::/32
2a0f:7d02:1::/48
2a0f:e1c6::/32
2a0f:e1c7:2::/48
2a0f:e7c2::/32
2a10:32c0::/29
2a10:35c0::/29
2a10:6d40::/29
2a11:fd80::/29
2a12:ac40::/31
2a13:18c0:1::/48
2a13:18c6:55::/48
2a13:c900:44::/48
Signature Algorithm: sha256WithRSAEncryption
42:a8:61:b4:3b:37:9a:07:e0:bf:a6:bd:e7:2d:71:56:f6:71:
af:95:2f:3d:52:09:69:42:1c:a7:70:0d:cc:f8:f2:93:49:27:
bb:52:0c:81:0b:98:96:d1:ba:9d:51:8c:e2:97:9c:72:b5:02:
b7:ae:73:4f:64:40:f5:72:df:6f:af:08:fa:89:34:f0:00:f6:
18:a1:24:a3:fc:47:22:78:bb:80:54:62:ef:10:0e:49:f1:1e:
fa:51:5b:b7:48:be:61:fe:39:1a:a0:05:c3:97:ce:75:cc:ce:
ba:be:04:8e:98:e3:67:41:f8:d5:3e:7e:04:2f:fc:08:e1:66:
59:32:bb:dd:fe:bc:2f:4a:b5:07:71:83:d6:3f:6d:d4:95:6d:
3d:9b:21:0c:12:44:47:cf:3d:70:da:8f:02:13:94:d5:56:99:
33:97:53:de:3f:a6:4d:9f:45:10:9a:9f:ab:c9:ad:2a:7a:ef:
34:1d:e1:93:ef:6a:53:b5:43:d3:08:48:79:28:42:1a:7e:e0:
6e:91:d3:d6:6d:1f:ee:44:dc:32:01:f0:2a:fc:e5:ae:8c:de:
85:34:3e:bd:94:99:a5:07:16:cb:06:bc:ab:e5:d5:65:3f:01:
70:b5:22:5f:a7:e3:f3:4a:37:07:9f:e7:c9:ed:63:15:fe:1f:
76:f6:89:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:52:20 2026 by rpki-client