Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/fewnXSLMyeuj5RIDMf4bCgnSM1s.roa
File: fewnXSLMyeuj5RIDMf4bCgnSM1s.roa (raw, json)
Hash identifier: DwSeUh2lYXexZDCOVyQ6Vp+226nA0LN4nfzw3aa27OY=
Subject key identifier: 7D:EC:27:5D:22:CC:C9:EB:A3:E5:12:03:31:FE:1B:0A:09:D2:33:5B
Certificate issuer: /CN=ed624c590027a5a8c9eeb369726e4a630cdf414c
Certificate serial: 019D49444DD082684BE5C22120841A3EC8A1
Authority key identifier: ED:62:4C:59:00:27:A5:A8:C9:EE:B3:69:72:6E:4A:63:0C:DF:41:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7WJMWQAnpajJ7rNpcm5KYwzfQUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/fewnXSLMyeuj5RIDMf4bCgnSM1s.roa
Signing time: Wed 01 Apr 2026 13:38:26 +0000
ROA not before: Wed 01 Apr 2026 13:38:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 45.89.128.0/22 maxlen: 22
2a0b:a200::/48 maxlen: 48
2a0b:a200:1::/48 maxlen: 48
2a0b:a200:2::/48 maxlen: 48
2a0b:a200:3::/48 maxlen: 48
2a0b:a200:4::/48 maxlen: 48
2a0b:a200:5::/48 maxlen: 48
2a0b:a200:6::/48 maxlen: 48
2a0b:a200:7::/48 maxlen: 48
2a0b:a200:8::/48 maxlen: 48
2a0b:a200:9::/48 maxlen: 48
2a0b:a200:a::/48 maxlen: 48
2a0b:a200:b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/7WJMWQAnpajJ7rNpcm5KYwzfQUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/7WJMWQAnpajJ7rNpcm5KYwzfQUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7WJMWQAnpajJ7rNpcm5KYwzfQUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:49:44:4d:d0:82:68:4b:e5:c2:21:20:84:1a:3e:c8:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed624c590027a5a8c9eeb369726e4a630cdf414c
Validity
Not Before: Apr 1 13:38:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7dec275d22ccc9eba3e5120331fe1b0a09d2335b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:58:15:6e:43:9d:60:64:4e:dc:fe:e6:e9:bf:
d2:4e:9c:74:4b:08:7a:9b:1a:c1:80:09:ec:99:c8:
58:1e:75:1a:d4:64:ee:af:dd:e8:3b:26:c9:ec:50:
08:d7:35:54:28:4c:8d:38:0e:10:ee:ca:ed:c6:24:
ad:e3:41:7a:54:42:dd:5b:d2:70:c6:02:e3:7a:4f:
be:f9:ee:bc:a1:ec:ae:ac:ae:6b:cc:c2:c7:f2:11:
8c:d0:38:e9:93:d7:59:67:27:4c:7e:a5:9c:fd:7d:
5e:cb:30:76:0c:a4:86:2e:f3:3e:52:57:85:24:63:
f8:92:9a:a4:c4:af:d2:db:93:cd:4a:b9:84:b9:12:
7e:08:5a:ae:fc:3a:dd:d7:35:7e:9b:ca:d2:98:e3:
93:ec:e8:ca:87:4d:a8:0f:eb:0a:50:14:09:8f:ff:
23:eb:1b:6e:4a:6b:9b:c1:15:e9:36:87:2c:7b:d5:
94:d1:dc:6f:6f:62:22:aa:69:a0:58:84:d8:42:25:
f6:d4:f9:3f:fd:94:01:b8:1d:c1:55:d2:66:09:e0:
78:7f:e0:e9:dd:08:2e:34:21:cf:83:10:e0:42:77:
d6:c5:bb:ac:0d:36:01:32:c1:d7:36:39:b7:6d:40:
a6:85:dc:89:1f:d7:a2:08:d8:e8:c3:d1:d1:11:c5:
fe:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:EC:27:5D:22:CC:C9:EB:A3:E5:12:03:31:FE:1B:0A:09:D2:33:5B
X509v3 Authority Key Identifier:
keyid:ED:62:4C:59:00:27:A5:A8:C9:EE:B3:69:72:6E:4A:63:0C:DF:41:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WJMWQAnpajJ7rNpcm5KYwzfQUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/fewnXSLMyeuj5RIDMf4bCgnSM1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/7WJMWQAnpajJ7rNpcm5KYwzfQUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.128.0/22
IPv6:
2a0b:a200::-2a0b:a200:b:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
b1:51:32:35:0c:83:a4:56:2e:4a:29:e2:d8:24:b4:d7:83:b5:
14:91:0b:78:a4:1d:b4:3f:99:ea:df:7e:c9:4f:02:de:17:d6:
2c:a4:6b:08:2d:b4:b7:c1:f6:c3:5f:02:2d:13:3e:d0:b3:2a:
eb:4e:2d:38:73:d5:5f:44:1b:72:86:1c:a1:73:ad:3d:47:91:
f1:7a:2e:0c:a3:f1:3c:0c:79:a9:82:81:77:14:b2:95:8d:cf:
96:9d:6b:ae:ec:1b:e3:2a:e7:41:fb:0b:1c:63:9d:16:b4:a0:
3f:75:a5:97:65:e0:19:d1:48:6d:d1:e5:3d:34:0b:82:d0:dd:
a7:e4:69:4b:d5:d2:42:d5:a3:60:47:12:ca:c7:43:1c:2f:43:
62:cc:79:56:f4:f2:6e:d2:37:5d:93:f9:de:25:03:3f:08:63:
c1:8b:d2:39:de:d2:0f:bf:5e:f2:ef:b8:12:24:26:30:ad:2d:
5a:15:60:0a:af:09:07:34:e3:e3:a6:b3:c0:3d:2c:eb:47:ca:
8a:84:2e:8d:d0:a4:7c:ac:d4:10:1d:12:df:e9:4c:42:b8:28:
7a:a5:6e:99:5c:3f:aa:c2:2d:a5:6c:02:4a:79:66:a0:aa:3d:
52:fa:7e:ea:2f:79:ac:a4:a3:9b:81:bf:32:94:33:2e:57:9b:
dd:25:3c:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ1JRE3QgmhL5cIhIIQaPsihMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNjI0YzU5MDAyN2E1YThjOWVlYjM2OTcyNmU0YTYzMGNk
ZjQxNGMwHhcNMjYwNDAxMTMzODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGVjMjc1ZDIyY2NjOWViYTNlNTEyMDMzMWZlMWIwYTA5ZDIzMzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVgVbkOdYGRO3P7m6b/STpx0Swh6
mxrBgAnsmchYHnUa1GTur93oOybJ7FAI1zVUKEyNOA4Q7srtxiSt40F6VELdW9Jw
xgLjek+++e68oeyurK5rzMLH8hGM0Djpk9dZZydMfqWc/X1eyzB2DKSGLvM+UleF
JGP4kpqkxK/S25PNSrmEuRJ+CFqu/Drd1zV+m8rSmOOT7OjKh02oD+sKUBQJj/8j
6xtuSmubwRXpNocse9WU0dxvb2IiqmmgWITYQiX21Pk//ZQBuB3BVdJmCeB4f+Dp
3QguNCHPgxDgQnfWxbusDTYBMsHXNjm3bUCmhdyJH9eiCNjow9HREcX+0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3sJ10izMnro+USAzH+GwoJ0jNbMB8GA1UdIwQY
MBaAFO1iTFkAJ6Woye6zaXJuSmMM30FMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1dKTVdRQW5wYWpKN3JOcGNtNUtZd3pmUVV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy84ZGI2N2EtYzRmYy00YzJjLTk5Nzgt
YTdiZTVmYTBmZjY1LzEvZmV3blhTTE15ZXVqNVJJRE1mNGJDZ25TTTFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy84ZGI2N2EtYzRmYy00YzJjLTk5NzgtYTdiZTVmYTBmZjY1
LzEvN1dKTVdRQW5wYWpKN3JOcGNtNUtZd3pmUVV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAMBAIAATAGAwQCLVmAMBcE
AgACMBEwDwMEASoLogMHAioLogAACDANBgkqhkiG9w0BAQsFAAOCAQEAsVEyNQyD
pFYuSini2CS014O1FJELeKQdtD+Z6t9+yU8C3hfWLKRrCC20t8H2w18CLRM+0LMq
604tOHPVX0QbcoYcoXOtPUeR8XouDKPxPAx5qYKBdxSylY3Plp1rruwb4yrnQfsL
HGOdFrSgP3Wll2XgGdFIbdHlPTQLgtDdp+RpS9XSQtWjYEcSysdDHC9DYsx5VvTy
btI3XZP53iUDPwhjwYvSOd7SD79e8u+4EiQmMK0tWhVgCq8JBzTj46azwD0s60fK
ioQujdCkfKzUEB0S3+lMQrgoeqVumVw/qsItpWwCSnlmoKo9Uvp+6i95rKSjm4G/
MpQzLleb3SU8Jw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:33:40 2026 by rpki-client