Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/smYRWY6H4uBJqxq3KWe1GTNfPrU.roa
File: smYRWY6H4uBJqxq3KWe1GTNfPrU.roa (raw, json)
Hash identifier: mhV0zYFofy9ku40YgckkMQ6nXIq+Dqs2jsK8FF4NJpI=
Subject key identifier: B2:66:11:59:8E:87:E2:E0:49:AB:1A:B7:29:67:B5:19:33:5F:3E:B5
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019A4ADBB2674C32BBDF1511D4A83E6B66DD
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/smYRWY6H4uBJqxq3KWe1GTNfPrU.roa
Signing time: Mon 03 Nov 2025 17:55:03 +0000
ROA not before: Mon 03 Nov 2025 17:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207461
IP address blocks: 45.94.36.0/24 maxlen: 24
45.94.37.0/24 maxlen: 24
45.94.38.0/24 maxlen: 24
45.94.47.0/24 maxlen: 24
45.131.213.0/24 maxlen: 24
45.133.209.0/24 maxlen: 24
45.133.210.0/24 maxlen: 24
193.5.65.0/24 maxlen: 24
2a0f:3d86:100::/48 maxlen: 48
2a13:8c86:120::/48 maxlen: 48
2a13:c900:99::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4a:db:b2:67:4c:32:bb:df:15:11:d4:a8:3e:6b:66:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 3 17:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b26611598e87e2e049ab1ab72967b519335f3eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:20:24:47:7c:00:ba:e5:bd:63:58:3f:53:53:
97:4d:14:7e:7e:61:de:8d:65:c2:f1:81:c5:ff:9d:
8e:05:e2:26:b6:bd:43:14:16:42:ba:aa:23:59:13:
9c:0f:88:c0:27:87:23:6c:8f:7f:d2:41:98:8c:5a:
98:0e:fa:03:46:6f:aa:66:54:1b:73:69:36:11:00:
ee:52:76:e8:48:cb:e7:87:81:95:ba:0b:73:07:17:
7f:4c:cf:a4:42:d0:c8:ef:a8:90:f5:a9:18:bf:f4:
6a:1e:d2:f8:11:40:bd:b1:f2:65:58:dc:fa:a2:da:
42:36:06:b3:31:92:d5:94:f1:ec:d5:47:7a:0b:9e:
8e:0d:ca:82:94:e9:ec:af:33:03:f1:cb:54:af:37:
ae:13:0b:5d:da:79:53:9c:ee:6d:90:c9:15:14:54:
8c:4e:98:3d:8b:0f:11:1f:ff:4e:be:ce:25:b8:bf:
70:62:c3:32:af:79:e1:36:35:8b:ab:0f:34:d3:55:
f1:f8:ca:3d:c0:5b:47:43:c2:07:27:3d:38:6b:7d:
70:62:55:c2:75:09:ed:7e:19:d8:8d:33:c6:f2:9c:
bd:ee:f8:8c:49:fa:cb:1c:22:2e:db:f1:fa:ee:46:
09:4b:f5:5a:22:e9:a4:7c:9f:28:8f:92:7d:2f:f4:
6d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:66:11:59:8E:87:E2:E0:49:AB:1A:B7:29:67:B5:19:33:5F:3E:B5
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/smYRWY6H4uBJqxq3KWe1GTNfPrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.36.0-45.94.38.255
45.94.47.0/24
45.131.213.0/24
45.133.209.0-45.133.210.255
193.5.65.0/24
IPv6:
2a0f:3d86:100::/48
2a13:8c86:120::/48
2a13:c900:99::/48
Signature Algorithm: sha256WithRSAEncryption
02:2a:23:1f:67:b4:5e:6c:29:2f:49:98:f0:da:0e:6b:2e:f1:
90:ad:34:fe:5a:59:6a:f0:85:40:e6:9b:bb:80:59:0e:3a:ba:
df:64:f6:87:65:26:55:1d:d5:59:cb:7e:e8:b3:40:b1:1f:78:
af:84:47:ee:52:15:2b:a9:bf:e7:8a:7a:75:92:e0:8f:88:28:
20:20:71:8f:05:14:50:27:ee:e4:12:19:3d:d5:3b:87:f4:14:
d0:f2:67:da:cb:98:97:ca:7f:02:94:11:37:4f:11:76:f9:96:
6b:f2:60:68:1d:6f:fb:71:21:a8:d8:4b:57:03:65:2e:ef:bf:
60:b7:e0:46:42:a0:29:a0:7b:f1:5e:cb:37:60:66:00:6d:61:
17:71:7e:32:8e:69:6d:d0:57:12:b0:cc:09:44:28:0d:e0:40:
00:e8:ab:fa:ec:d9:37:1f:ac:d5:65:be:2b:9a:65:c8:53:5d:
0b:c8:a3:46:e1:1e:07:92:45:c2:bf:e0:5e:c1:37:d8:04:9a:
5e:0d:cf:a9:78:0a:07:b4:e8:94:1b:0e:9f:f9:ee:55:2f:d0:
74:95:f1:8e:3e:92:4e:48:3a:5e:ef:49:85:01:31:04:fe:6e:
43:36:27:30:ff:53:35:55:1d:ef:c4:2d:d2:2a:ae:ce:da:c4:
24:f7:59:2e
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgISAZpK27JnTDK73xUR1Kg+a2bdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUxMTAzMTc1NTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjY2MTE1OThlODdlMmUwNDlhYjFhYjcyOTY3YjUxOTMzNWYzZWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiAkR3wAuuW9Y1g/U1OXTRR+fmHe
jWXC8YHF/52OBeImtr1DFBZCuqojWROcD4jAJ4cjbI9/0kGYjFqYDvoDRm+qZlQb
c2k2EQDuUnboSMvnh4GVugtzBxd/TM+kQtDI76iQ9akYv/RqHtL4EUC9sfJlWNz6
otpCNgazMZLVlPHs1Ud6C56ODcqClOnsrzMD8ctUrzeuEwtd2nlTnO5tkMkVFFSM
Tpg9iw8RH/9Ovs4luL9wYsMyr3nhNjWLqw8001Xx+Mo9wFtHQ8IHJz04a31wYlXC
dQntfhnYjTPG8py97viMSfrLHCIu2/H67kYJS/VaIumkfJ8oj5J9L/RtywIDAQAB
o4ICVDCCAlAwHQYDVR0OBBYEFLJmEVmOh+LgSasatylntRkzXz61MB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvc21ZUldZNkg0dUJKcXhxM0tXZTFHVE5mUHJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGoGCCsGAQUFBwEHAQH/BFswWTA0BAIAATAuMAwDBAItXiQD
BAAtXiYDBAAtXi8DBAAtg9UwDAMEAC2F0QMEAC2F0gMEAMEFQTAhBAIAAjAbAwcA
Kg89hgEAAwcAKhOMhgEgAwcAKhPJAACZMA0GCSqGSIb3DQEBCwUAA4IBAQACKiMf
Z7RebCkvSZjw2g5rLvGQrTT+Wllq8IVA5pu7gFkOOrrfZPaHZSZVHdVZy37os0Cx
H3ivhEfuUhUrqb/ninp1kuCPiCggIHGPBRRQJ+7kEhk91TuH9BTQ8mfay5iXyn8C
lBE3TxF2+ZZr8mBoHW/7cSGo2EtXA2Uu779gt+BGQqApoHvxXss3YGYAbWEXcX4y
jmlt0FcSsMwJRCgN4EAA6Kv67Nk3H6zVZb4rmmXIU10LyKNG4R4HkkXCv+BewTfY
BJpeDc+peAoHtOiUGw6f+e5VL9B0lfGOPpJOSDpe70mFATEE/m5DNicw/1M1VR3v
xC3SKq7O2sQk91ku
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:59:08 2025 by rpki-client