Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/saNnDOI6UecK2eYPycIy2mUtnYs.roa
File: saNnDOI6UecK2eYPycIy2mUtnYs.roa (raw, json)
Hash identifier: EytId8x/p4tKLG1IUIWJO3dsoA4F+Ii22D32DuCWuVo=
Subject key identifier: B1:A3:67:0C:E2:3A:51:E7:0A:D9:E6:0F:C9:C2:32:DA:65:2D:9D:8B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019D3E09BCCC7CED911B5811FFBEC3E8017A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/saNnDOI6UecK2eYPycIy2mUtnYs.roa
Signing time: Mon 30 Mar 2026 09:18:38 +0000
ROA not before: Mon 30 Mar 2026 09:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 45.87.243.0/24 maxlen: 24
45.146.128.0/24 maxlen: 24
2a06:1180:36af::/48 maxlen: 48
2a09:17c0:1000::/48 maxlen: 48
2a0e:c785:1::/48 maxlen: 48
2a0f:e6c7::/32 maxlen: 32
2a12:ac43:baca::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3e:09:bc:cc:7c:ed:91:1b:58:11:ff:be:c3:e8:01:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 30 09:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1a3670ce23a51e70ad9e60fc9c232da652d9d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:40:d1:c9:56:09:fd:56:f9:27:46:73:ca:9d:
55:b3:11:94:46:a5:cf:07:81:ec:08:ff:70:6c:b9:
79:b4:97:74:af:81:8e:42:de:5c:fa:47:1b:ae:b6:
87:df:6a:12:bf:b0:14:8c:0d:b7:89:5b:9d:bc:08:
bf:12:40:66:f2:c8:32:63:2a:84:c7:f4:60:52:ec:
16:6e:e2:06:d8:96:b6:2f:c7:69:fc:76:44:fb:fc:
eb:95:ec:c3:e7:fd:3f:23:3f:40:d3:0e:3b:ba:3a:
77:e4:70:08:20:9b:6a:9c:c0:d7:37:c4:7a:c1:fa:
9a:50:6b:ce:d1:3f:4f:7c:48:e0:a9:9f:c8:97:97:
01:21:a0:7e:f8:c3:22:4d:56:ea:68:05:06:08:a6:
14:35:c6:a8:ca:53:40:37:9e:e3:d7:b3:3c:dc:72:
94:de:20:e7:b4:2c:2a:0d:e8:3a:24:fd:ea:bf:84:
67:45:d2:e9:89:9e:26:5f:3a:71:04:f9:d0:d0:7e:
a0:0c:11:89:84:54:5c:0a:a5:d1:f4:39:9f:de:04:
81:07:80:05:da:b7:2f:0a:d7:be:d1:64:75:6d:c6:
11:be:eb:f6:23:8c:7f:a1:04:e9:95:bc:72:90:ea:
b3:ac:76:41:de:cf:93:18:2b:2c:9c:1b:c9:b5:82:
44:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A3:67:0C:E2:3A:51:E7:0A:D9:E6:0F:C9:C2:32:DA:65:2D:9D:8B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/saNnDOI6UecK2eYPycIy2mUtnYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.243.0/24
45.146.128.0/24
IPv6:
2a06:1180:36af::/48
2a09:17c0:1000::/48
2a0e:c785:1::/48
2a0f:e6c7::/32
2a12:ac43:baca::/48
Signature Algorithm: sha256WithRSAEncryption
b4:f0:f2:12:d7:dc:c5:1e:ae:c7:4a:49:ee:04:63:60:9c:58:
fb:6e:4a:1f:ed:39:c1:3b:cf:eb:a4:13:9c:05:1d:c0:e2:b8:
62:e2:5e:15:3f:65:a3:81:2f:9a:4d:f7:22:7d:0b:22:c9:db:
e8:ab:50:52:32:91:47:62:00:81:3a:29:de:9b:b2:0f:44:b3:
ff:86:7e:97:14:a7:80:ec:49:e1:e7:97:6f:55:88:68:e8:8b:
89:ef:1a:b3:b7:ba:9a:10:1d:68:c9:58:c4:b5:f6:70:70:0f:
64:2c:40:e5:3a:dc:28:16:0c:45:78:b7:64:09:4a:16:b5:83:
48:85:f8:c5:1d:52:91:6e:a4:e8:47:3f:4d:35:be:09:4d:26:
4a:b3:14:25:40:2a:1f:11:ae:2e:53:75:85:02:bd:54:6b:a4:
36:8a:4e:b8:8a:7b:f5:2d:68:9d:bb:dd:99:46:dc:7e:ac:b7:
ab:77:c5:2b:5a:27:2a:6e:90:48:f5:e8:d8:bf:4f:8b:e2:ee:
e1:43:78:6c:79:25:aa:ea:53:e7:e6:ce:e3:09:55:c6:4f:51:
da:e9:15:93:f9:af:8a:d0:69:2e:2d:e5:10:54:6a:e0:62:5a:
61:e7:3e:88:a5:c3:d7:6f:85:32:1a:c5:24:4a:af:5b:98:f7:
50:09:e7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:35:28 2026 by rpki-client