Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sfacvczcxxo0Cbk-bX4OAeaiMxI.roa
File: sfacvczcxxo0Cbk-bX4OAeaiMxI.roa (raw, json)
Hash identifier: TzeM0+oOYE7c0RXlbZE0lfT1RLGMDtwj0fDjUJtjF8M=
Subject key identifier: B1:F6:9C:BD:CC:DC:C7:1A:34:09:B9:3E:6D:7E:0E:01:E6:A2:33:12
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A08C722D6C975D5EB6BAA44FD416CF2885
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sfacvczcxxo0Cbk-bX4OAeaiMxI.roa
Signing time: Thu 10 Sep 2026 17:51:27 +0000
ROA not before: Thu 10 Sep 2026 17:51:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201784
IP address blocks: 45.87.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:72:2d:6c:97:5d:5e:b6:ba:a4:4f:d4:16:cf:28:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 10 17:51:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1f69cbdccdcc71a3409b93e6d7e0e01e6a23312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:92:e1:61:56:44:fb:6d:cc:20:5b:8c:52:3f:
75:54:05:01:ff:7d:06:80:c5:06:88:46:08:d1:8b:
81:9c:4d:b6:29:24:28:a0:58:44:b9:d9:12:28:13:
6f:33:1e:55:55:17:68:08:05:02:90:cc:f6:ad:10:
c4:c8:51:2a:a7:9c:ca:5c:6f:82:48:42:bb:d4:85:
8e:b2:63:05:1c:77:be:79:8c:9c:5b:ba:b3:13:b2:
08:c8:77:f0:40:cc:80:3c:6d:fa:34:d5:77:34:bb:
3d:72:1a:e2:5e:fa:e3:3f:24:df:80:d2:5a:8f:dc:
fc:37:2b:43:1f:26:90:8f:0a:20:49:9f:71:a1:d7:
70:23:f7:d6:57:36:2f:bc:fe:bb:ff:73:9b:b0:d0:
95:e0:a2:44:3e:85:f0:d1:bf:65:3e:31:7f:fc:b3:
61:99:74:c4:7a:1b:ce:d9:06:32:59:a1:cb:15:59:
18:38:01:1f:db:85:01:a0:1a:d8:17:e1:bc:08:e7:
54:63:c7:77:de:c8:75:5f:cc:ee:c1:72:2f:59:30:
d8:ac:87:62:92:50:ab:3d:d3:6d:56:f5:7b:89:45:
29:64:be:bf:a7:a8:2e:c6:9a:ab:a1:dd:f0:48:e7:
ce:95:78:70:11:82:34:d0:ec:b5:ab:ba:27:b3:14:
53:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F6:9C:BD:CC:DC:C7:1A:34:09:B9:3E:6D:7E:0E:01:E6:A2:33:12
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sfacvczcxxo0Cbk-bX4OAeaiMxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.248.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:e2:e2:30:1f:b4:d2:7f:84:7e:61:87:48:68:5a:9e:2d:57:
f1:9d:31:bb:2a:3b:ff:78:de:fd:94:74:94:0d:c3:0a:c0:71:
83:a1:ef:82:b2:15:53:6f:48:39:b6:57:68:b1:d7:40:db:94:
ff:cf:34:e7:fb:03:d9:c7:f7:9c:8c:5d:cd:82:8f:3e:dc:c3:
4e:85:84:98:4c:70:bc:12:a1:1b:f2:be:19:d5:e8:15:08:cf:
07:d0:51:a9:41:7c:bc:63:a3:dd:62:47:71:61:ba:3f:89:be:
bc:c1:57:65:b7:fb:f7:e6:c1:10:26:ec:a7:5b:0c:18:33:ac:
b8:e8:ed:35:1f:9b:80:f4:5d:ba:c8:c8:92:5e:98:29:b1:3c:
2e:7a:c4:f2:73:0c:a1:1e:9a:d1:19:d5:66:ba:3a:e4:e5:78:
41:68:8f:67:f5:05:a6:2f:07:b9:b1:67:c8:c2:d1:25:cd:5d:
c8:5a:d5:a6:ca:4b:ee:04:77:c9:3e:1a:53:4b:22:98:15:5b:
ac:2a:46:ec:03:2a:24:ad:12:ae:13:de:b8:a4:d1:51:02:e8:
8c:97:f9:0d:ae:de:80:4f:e4:80:85:d3:68:5c:19:28:f5:4f:
91:81:84:a2:dc:64:38:85:32:89:05:24:29:7e:9c:e8:f1:61:
b6:81:b5:72
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCMci1sl11etrqkT9QWzyiFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYwOTEwMTc1MTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMWY2OWNiZGNjZGNjNzFhMzQwOWI5M2U2ZDdlMGUwMWU2YTIzMzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45LhYVZE+23MIFuMUj91VAUB/30G
gMUGiEYI0YuBnE22KSQooFhEudkSKBNvMx5VVRdoCAUCkMz2rRDEyFEqp5zKXG+C
SEK71IWOsmMFHHe+eYycW7qzE7IIyHfwQMyAPG36NNV3NLs9chriXvrjPyTfgNJa
j9z8NytDHyaQjwogSZ9xoddwI/fWVzYvvP67/3ObsNCV4KJEPoXw0b9lPjF//LNh
mXTEehvO2QYyWaHLFVkYOAEf24UBoBrYF+G8COdUY8d33sh1X8zuwXIvWTDYrIdi
klCrPdNtVvV7iUUpZL6/p6guxpqrod3wSOfOlXhwEYI00Oy1q7onsxRTnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLH2nL3M3McaNAm5Pm1+DgHmojMSMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvc2ZhY3ZjemN4eG8wQ2JrLWJYNE9BZWFpTXhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVf4MA0G
CSqGSIb3DQEBCwUAA4IBAQC54uIwH7TSf4R+YYdIaFqeLVfxnTG7Kjv/eN79lHSU
DcMKwHGDoe+CshVTb0g5tldosddA25T/zzTn+wPZx/ecjF3Ngo8+3MNOhYSYTHC8
EqEb8r4Z1egVCM8H0FGpQXy8Y6PdYkdxYbo/ib68wVdlt/v35sEQJuynWwwYM6y4
6O01H5uA9F26yMiSXpgpsTwuesTycwyhHprRGdVmujrk5XhBaI9n9QWmLwe5sWfI
wtElzV3IWtWmykvuBHfJPhpTSyKYFVusKkbsAyokrRKuE964pNFRAuiMl/kNrt6A
T+SAhdNoXBko9U+RgYSi3GQ4hTKJBSQpfpzo8WG2gbVy
-----END CERTIFICATE-----
Generated at Mon Sep 21 12:38:50 2026 by rpki-client