Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pxHemjnk6GQZ1BXcWzjhHRO1yOk.roa
File: pxHemjnk6GQZ1BXcWzjhHRO1yOk.roa (raw, json)
Hash identifier: cMPzuKAgN+i7Q4piNJdLHT1Gmt1ENzj0JY6b1cjv9kA=
Subject key identifier: A7:11:DE:9A:39:E4:E8:64:19:D4:15:DC:5B:38:E1:1D:13:B5:C8:E9
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019A4E92044C326B7013A5B434DFC865702A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pxHemjnk6GQZ1BXcWzjhHRO1yOk.roa
Signing time: Tue 04 Nov 2025 11:13:03 +0000
ROA not before: Tue 04 Nov 2025 11:13:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19318
IP address blocks: 45.128.244.0/24 maxlen: 24
45.128.245.0/24 maxlen: 24
45.128.246.0/24 maxlen: 24
45.128.247.0/24 maxlen: 24
2a0f:1207::/32 maxlen: 32
2a0f:2f80::/29 maxlen: 29
2a0f:35c0::/29 maxlen: 29
2a10:6d00::/29 maxlen: 29
2a11:7440::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:92:04:4c:32:6b:70:13:a5:b4:34:df:c8:65:70:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 4 11:13:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a711de9a39e4e86419d415dc5b38e11d13b5c8e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:32:41:cf:b5:8a:cc:61:d7:07:4c:db:1c:3a:
74:92:97:ef:4f:83:78:98:e6:01:3c:4e:fe:8d:b0:
6c:01:15:03:43:c4:92:29:e8:dd:d0:ef:60:55:4f:
0d:c4:8b:71:fc:99:07:59:6e:a4:95:32:34:6b:16:
74:2a:ce:58:4a:43:57:31:be:fd:bb:98:a8:f7:4f:
99:dc:31:01:5e:1d:cd:08:99:70:e1:dc:36:18:d7:
77:fa:54:c8:15:7a:65:2e:d3:ec:73:5c:9d:36:35:
fc:b7:5a:ff:32:ae:8e:a6:0a:9a:c1:96:2b:77:c9:
33:bf:e3:9b:af:57:70:4b:56:bf:9d:40:3f:8b:64:
bc:41:85:6b:3d:b6:20:e0:1b:76:c9:ad:9d:d0:e8:
92:10:53:36:77:c8:5f:63:91:b2:7c:7c:85:3c:c2:
d3:d9:8c:59:6f:26:65:b6:18:4f:24:a3:c2:17:2c:
fd:27:06:a8:31:76:04:08:6e:b2:59:b6:06:54:cc:
e2:96:5d:9a:de:71:58:d3:e1:8d:45:63:79:0c:42:
eb:7a:07:8d:0c:48:8a:7a:11:6d:c3:8d:51:4c:0c:
f9:d2:11:d4:d7:a6:2a:10:06:55:67:bf:fc:a1:d2:
07:52:da:30:18:f5:2d:14:2d:d1:81:87:a5:27:4e:
a9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:11:DE:9A:39:E4:E8:64:19:D4:15:DC:5B:38:E1:1D:13:B5:C8:E9
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pxHemjnk6GQZ1BXcWzjhHRO1yOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.244.0/22
IPv6:
2a0f:1207::/32
2a0f:2f80::/29
2a0f:35c0::/29
2a10:6d00::/29
2a11:7440::/29
Signature Algorithm: sha256WithRSAEncryption
1e:d1:9b:a3:cc:1d:69:08:c9:9f:c9:2c:5d:a7:a3:b3:f8:ef:
32:64:ba:6a:2a:d3:36:73:28:a3:e8:63:8e:a6:39:24:a7:c5:
d3:77:02:24:07:62:02:9d:e5:7d:c9:29:e1:58:3d:83:6b:b6:
f3:aa:c2:cb:80:20:e7:9c:05:0e:a5:18:11:3c:69:0c:f3:30:
17:1e:33:42:dd:a6:17:72:a2:a3:9b:09:63:f7:58:74:34:87:
99:49:a1:b5:ab:4a:e2:86:8c:b1:83:fd:4c:97:99:ab:93:cd:
78:f2:77:2d:4f:6e:76:c0:66:51:37:2a:91:13:fd:40:c3:94:
23:a8:1a:5d:52:39:4e:3d:bb:9e:a7:4d:dc:05:08:88:ee:2f:
ae:58:82:ab:41:1c:b5:b8:34:3b:57:62:43:cb:cf:77:a7:a8:
fb:a8:ac:a5:a7:24:05:58:82:f4:8b:42:81:32:33:12:79:c4:
23:d5:ef:61:e6:c4:98:7e:d1:18:3c:9d:86:5f:91:2e:a9:d0:
03:76:12:94:17:7c:8f:dc:d5:da:19:ed:ef:03:e5:ec:70:55:
3d:df:74:25:79:4f:b2:1b:7c:64:80:c1:12:f8:4b:36:30:0f:
c4:47:72:92:68:11:d9:bf:07:38:06:14:83:77:c2:71:2e:c5:
90:bc:d5:62
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgISAZpOkgRMMmtwE6W0NN/IZXAqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUxMTA0MTExMzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzExZGU5YTM5ZTRlODY0MTlkNDE1ZGM1YjM4ZTExZDEzYjVjOGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8TJBz7WKzGHXB0zbHDp0kpfvT4N4
mOYBPE7+jbBsARUDQ8SSKejd0O9gVU8NxItx/JkHWW6klTI0axZ0Ks5YSkNXMb79
u5io90+Z3DEBXh3NCJlw4dw2GNd3+lTIFXplLtPsc1ydNjX8t1r/Mq6OpgqawZYr
d8kzv+Obr1dwS1a/nUA/i2S8QYVrPbYg4Bt2ya2d0OiSEFM2d8hfY5GyfHyFPMLT
2YxZbyZlthhPJKPCFyz9JwaoMXYECG6yWbYGVMzill2a3nFY0+GNRWN5DELregeN
DEiKehFtw41RTAz50hHU16YqEAZVZ7/8odIHUtowGPUtFC3RgYelJ06pAwIDAQAB
o4ICNDCCAjAwHQYDVR0OBBYEFKcR3po55OhkGdQV3Fs44R0TtcjpMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvcHhIZW1qbms2R1FaMUJYY1d6amhIUk8xeU9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTAMBAIAATAGAwQCLYD0MCkE
AgACMCMDBQAqDxIHAwUDKg8vgAMFAyoPNcADBQMqEG0AAwUDKhF0QDANBgkqhkiG
9w0BAQsFAAOCAQEAHtGbo8wdaQjJn8ksXaejs/jvMmS6airTNnMoo+hjjqY5JKfF
03cCJAdiAp3lfckp4Vg9g2u286rCy4Ag55wFDqUYETxpDPMwFx4zQt2mF3Kio5sJ
Y/dYdDSHmUmhtatK4oaMsYP9TJeZq5PNePJ3LU9udsBmUTcqkRP9QMOUI6gaXVI5
Tj27nqdN3AUIiO4vrliCq0Ectbg0O1diQ8vPd6eo+6ispackBViC9ItCgTIzEnnE
I9XvYebEmH7RGDydhl+RLqnQA3YSlBd8j9zV2hnt7wPl7HBVPd90JXlPsht8ZIDB
EvhLNjAPxEdykmgR2b8HOAYUg3fCcS7FkLzVYg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:23:39 2025 by rpki-client