Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TKv30IODjlCott8yPr2ypkHm3bo.roa
File: TKv30IODjlCott8yPr2ypkHm3bo.roa (raw, json)
Hash identifier: arWNvkt5UPhUejv4HBj8+ST3UXmkJvm+qMKx6D8Hw6Q=
Subject key identifier: 4C:AB:F7:D0:83:83:8E:50:A8:B6:DF:32:3E:BD:B2:A6:41:E6:DD:BA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A0ED9D8E1233C9A12D781F544EC472C3C7
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TKv30IODjlCott8yPr2ypkHm3bo.roa
Signing time: Tue 29 Sep 2026 14:42:00 +0000
ROA not before: Tue 29 Sep 2026 14:42:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214668
IP address blocks: 45.8.92.0/24 maxlen: 24
81.161.238.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
193.37.41.0/24 maxlen: 24
193.37.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:9d:8e:12:33:c9:a1:2d:78:1f:54:4e:c4:72:c3:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 29 14:42:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4cabf7d083838e50a8b6df323ebdb2a641e6ddba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e9:36:1f:e2:19:e5:db:8a:a8:80:a0:68:4c:
d0:a4:b2:87:9c:2f:12:01:db:88:50:9c:c9:f1:9f:
bc:5a:58:d3:45:27:6d:cd:cf:47:2f:22:4c:8a:54:
f8:e8:65:44:bb:55:01:5c:e8:51:0b:ea:78:56:58:
14:48:42:67:42:a2:53:53:67:56:86:67:a1:ac:6c:
2f:d0:54:fc:9f:24:16:33:48:d6:0e:7e:2f:74:2b:
98:92:4a:24:b3:6c:74:0f:45:78:02:df:56:0f:c8:
4b:e1:8f:2e:21:40:99:26:ee:53:6a:c3:a6:31:b3:
1a:96:ca:22:6a:d2:17:1f:10:0d:08:b8:52:a0:d3:
1c:74:61:de:6f:06:0c:2e:63:7b:4d:52:f5:89:7e:
de:60:d2:a1:ff:0e:d1:bd:91:55:6f:50:79:98:36:
b0:31:71:1a:bd:01:f6:e8:c2:44:b7:4e:87:e2:ed:
41:fb:fa:9c:f0:7d:12:bf:1a:30:c6:79:38:73:61:
ef:2c:06:b6:49:0b:61:e6:cd:a3:44:7b:7e:1c:8a:
c6:fe:71:3d:7f:1d:cf:06:2c:e8:15:47:ad:5d:a9:
5a:33:6f:2b:c1:a6:ba:fb:f8:df:74:47:ad:0c:9b:
cd:14:8d:54:30:92:4b:51:01:66:f3:9c:2c:9b:fc:
16:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AB:F7:D0:83:83:8E:50:A8:B6:DF:32:3E:BD:B2:A6:41:E6:DD:BA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TKv30IODjlCott8yPr2ypkHm3bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.92.0/24
81.161.238.0/24
185.222.160.0/24
193.37.41.0/24
193.37.44.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:24:6d:b0:69:1f:ff:52:f1:e3:52:3c:a2:55:b4:67:bd:04:
98:8d:41:05:72:44:0a:89:63:17:03:81:ad:20:5c:3f:11:de:
56:1f:e6:30:83:ac:eb:28:95:5d:39:f6:12:1c:44:f0:7c:97:
0b:84:00:cb:27:c8:7b:76:4c:a5:19:37:41:8b:e9:87:b1:a5:
dc:dc:1e:6a:34:28:4c:dc:76:67:b5:46:60:7e:ed:e3:f8:ce:
96:41:2d:1e:7b:cd:64:c0:fb:53:74:3c:f1:c7:41:39:ff:0c:
40:b9:52:62:0a:b3:d8:fe:27:8e:c6:c8:78:01:95:dd:e8:a3:
bd:f5:f4:e3:61:ee:cc:04:2e:91:fa:b8:97:8e:c6:4d:08:46:
eb:43:ef:60:d3:6d:6d:ab:04:c3:f9:2f:f6:54:38:5b:23:5c:
7b:1b:46:cc:b9:1a:83:21:e7:27:3f:65:c6:22:2f:ca:d3:8e:
d2:5f:96:80:88:23:86:2f:f9:7e:e8:24:13:a6:11:b0:38:bb:
5d:db:98:2e:12:ff:ac:92:1f:c6:95:8a:ef:0d:e2:b5:f2:ce:
47:7b:a8:da:ac:4b:cf:76:e0:d1:22:2b:44:d6:33:d8:60:3c:
02:70:ed:63:4e:ae:55:f6:d6:64:7f:d0:be:2b:b3:7f:af:91:
ed:47:c7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 12:26:31 2026 by rpki-client