Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/tVmfZeWdVMnwiX3UKcOJh8Hr-Uc.roa
File: tVmfZeWdVMnwiX3UKcOJh8Hr-Uc.roa (raw, json)
Hash identifier: /3YflutobnpMb4cvv5YYiqUDPoXca6VxOl9t+YmVV6w=
Subject key identifier: B5:59:9F:65:E5:9D:54:C9:F0:89:7D:D4:29:C3:89:87:C1:EB:F9:47
Certificate issuer: /CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16
Certificate serial: 019FD7B4BD2C2DAD8B53727770A6A26ACD93
Authority key identifier: D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/tVmfZeWdVMnwiX3UKcOJh8Hr-Uc.roa
Signing time: Thu 06 Aug 2026 15:32:54 +0000
ROA not before: Thu 06 Aug 2026 15:32:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36224
IP address blocks: 164.138.69.0/24 maxlen: 24
185.33.114.0/24 maxlen: 24
185.36.78.0/24 maxlen: 24
202.162.49.0/24 maxlen: 24
202.162.51.0/24 maxlen: 24
202.162.52.0/24 maxlen: 24
202.162.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d7:b4:bd:2c:2d:ad:8b:53:72:77:70:a6:a2:6a:cd:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16
Validity
Not Before: Aug 6 15:32:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5599f65e59d54c9f0897dd429c38987c1ebf947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f9:e5:2f:1b:54:15:f0:80:c6:2a:77:65:98:
28:4d:65:40:0b:89:49:26:07:25:d1:38:5a:84:fa:
25:d0:b7:2b:c1:91:32:5d:46:09:1b:7b:68:86:38:
77:25:50:81:c0:c3:86:26:0a:c4:5e:53:11:4a:59:
1a:ab:6d:be:ae:ee:3b:10:b0:42:d6:db:97:ad:94:
d0:30:8a:bc:0d:a8:3a:6d:5c:16:77:74:14:a0:71:
ae:25:cd:b2:1f:81:92:ac:92:02:66:86:d7:41:73:
bd:5b:0b:40:69:b1:36:a5:cb:60:8b:0a:bf:93:8e:
ac:68:aa:1e:8b:2d:1c:35:6c:f0:21:6b:1b:81:b3:
71:63:74:14:80:65:4c:d2:5d:0a:eb:ca:8c:19:71:
96:bf:7e:97:b4:4c:20:ab:5d:99:e0:91:eb:39:1c:
47:2a:a0:f6:b6:21:64:24:74:23:9a:db:2d:6f:21:
2d:be:07:4a:ce:f8:12:39:ed:93:fc:b4:e6:87:2a:
0a:55:5e:a3:02:2f:70:12:4d:27:94:24:d7:61:90:
b8:b7:06:15:fa:8f:f8:92:12:aa:50:d7:8a:19:76:
d2:a4:ae:db:19:fb:8b:3c:0c:d1:c7:a9:f8:f1:6c:
d3:af:5b:f3:b1:2c:4e:4d:28:f3:2e:43:cf:ab:c4:
68:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:59:9F:65:E5:9D:54:C9:F0:89:7D:D4:29:C3:89:87:C1:EB:F9:47
X509v3 Authority Key Identifier:
keyid:D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/tVmfZeWdVMnwiX3UKcOJh8Hr-Uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.138.69.0/24
185.33.114.0/24
185.36.78.0/24
202.162.49.0/24
202.162.51.0-202.162.52.255
202.162.54.0/24
Signature Algorithm: sha256WithRSAEncryption
21:97:e3:4d:14:25:f2:10:25:85:fc:6a:47:95:84:a9:a5:f1:
1a:1f:9b:81:ba:41:f3:81:09:02:9a:df:eb:bd:ba:03:ae:7c:
89:60:2e:5a:7b:11:8b:86:ce:dd:b3:34:d4:7b:df:62:af:c6:
33:e5:64:e5:37:1b:a5:b3:25:c4:f5:2f:27:7d:86:6c:9a:f0:
34:8c:a6:a2:89:63:58:4b:a6:89:45:ad:40:c7:1f:a7:7d:ba:
5b:33:55:dc:10:dd:e7:30:f3:1d:34:31:11:10:ec:f1:b3:70:
bb:99:72:bb:ed:0a:55:64:0e:57:c8:50:19:1a:30:25:9e:fc:
87:c1:26:47:f8:63:7f:57:ec:77:f5:56:43:b4:ad:2b:36:8f:
a7:c5:75:71:e7:21:5a:6d:a7:a0:72:4d:cb:11:c3:40:c0:73:
57:04:37:b0:55:45:5d:78:08:da:8e:e5:0c:d1:3f:7c:fb:a4:
75:06:bb:6d:89:12:dd:12:99:e8:94:2f:00:a6:5a:c7:ea:51:
1e:a6:c3:3a:7b:0d:7d:9a:23:16:e6:4e:1d:b4:66:63:d2:67:
02:35:a7:41:a0:41:e9:e7:5b:ad:30:ac:33:e4:f2:b3:47:c8:
b8:a9:71:a9:54:8f:38:85:dd:1c:01:89:80:1b:23:04:07:36:
f6:9a:47:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:14:24 2026 by rpki-client