Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/tEGWV7uL1kkHXg1ce3d2Kqonfd4.roa
File: tEGWV7uL1kkHXg1ce3d2Kqonfd4.roa (raw, json)
Hash identifier: H7F35wb/tEcv0crUOG6mGjm4GMsLSs07Lj956J4LD2M=
Subject key identifier: B4:41:96:57:BB:8B:D6:49:07:5E:0D:5C:7B:77:76:2A:AA:27:7D:DE
Certificate issuer: /CN=2dfef2b839ad07786833b1bedca8b0b19203e111
Certificate serial: 019ECA260C32CEF738CEEA026E099834482F
Authority key identifier: 2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/tEGWV7uL1kkHXg1ce3d2Kqonfd4.roa
Signing time: Mon 15 Jun 2026 07:19:11 +0000
ROA not before: Mon 15 Jun 2026 07:19:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395793
IP address blocks: 185.145.240.0/24 maxlen: 24
185.145.241.0/24 maxlen: 24
185.145.242.0/24 maxlen: 24
185.145.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ca:26:0c:32:ce:f7:38:ce:ea:02:6e:09:98:34:48:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dfef2b839ad07786833b1bedca8b0b19203e111
Validity
Not Before: Jun 15 07:19:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4419657bb8bd649075e0d5c7b77762aaa277dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a8:c1:59:f5:cf:99:49:d5:8b:52:36:98:c0:
6a:77:b8:f0:c6:18:5f:0f:01:9c:cf:ed:6d:2d:10:
09:3c:cd:b8:b5:e1:04:66:c3:4e:4e:08:f2:d2:0f:
af:79:75:23:20:6a:04:eb:a9:98:0e:81:2e:ad:ca:
e1:ca:c0:7b:5b:67:81:2b:cf:2a:52:b9:e4:5d:0c:
8c:c5:6d:19:79:3c:ab:69:fd:75:ac:a2:2c:b1:27:
41:41:55:3a:ab:f0:34:7b:91:ed:da:3d:f9:e4:e7:
8d:d9:ca:29:a4:51:0d:79:b7:94:91:60:dc:ea:47:
36:9f:92:af:cc:da:8b:a2:ad:70:b7:b6:eb:b5:27:
35:79:53:58:39:e4:c1:f8:6c:91:70:57:ec:d1:da:
96:d6:91:09:df:82:1a:5f:ff:aa:d8:2d:ca:6f:f9:
86:05:7f:a2:f3:71:a9:8e:45:03:ed:d6:7c:7d:77:
dd:8c:b4:37:f7:d6:a3:a5:fd:b1:a8:17:d8:8e:53:
c8:ba:a3:49:1b:e6:3c:42:8a:0c:11:89:b8:13:75:
88:12:f9:ca:9a:7b:0e:a7:b3:20:93:6e:b6:a3:60:
6e:a4:b4:9e:4c:55:a0:9b:ed:24:40:69:a3:d3:3d:
7a:da:a8:30:b7:ac:45:0c:42:fe:ab:e0:e7:c7:df:
8c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:41:96:57:BB:8B:D6:49:07:5E:0D:5C:7B:77:76:2A:AA:27:7D:DE
X509v3 Authority Key Identifier:
keyid:2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/tEGWV7uL1kkHXg1ce3d2Kqonfd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.240.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:e9:5a:5a:e5:e7:7a:83:c5:fe:ae:59:9c:34:43:41:70:f9:
6d:6e:28:bb:70:cd:c9:ed:04:31:27:2e:9c:82:84:5d:d4:f4:
52:f0:d4:3f:d3:da:8c:de:35:a8:50:d0:22:5f:b9:09:0b:e4:
0e:ff:68:06:92:44:0a:53:09:04:6d:8b:e3:d3:1d:6b:85:94:
27:cf:5a:b2:0c:8c:7e:f3:89:49:5e:c6:df:01:cf:d6:18:16:
f2:4a:5c:5f:f9:43:9e:8a:ac:51:41:8b:1e:66:56:66:51:97:
05:9d:d8:50:65:7d:7c:2e:3f:c4:b2:42:6b:52:74:2f:4c:a7:
5b:95:94:95:df:13:f6:56:bb:5e:75:0e:9d:27:23:1a:8d:1d:
6e:21:65:03:48:2f:82:9c:6e:c1:ff:ec:27:e9:76:07:43:a2:
bb:35:97:2c:0e:5d:1b:eb:be:8f:b2:83:dd:70:03:23:61:dd:
ae:8a:fd:73:82:3d:04:e6:b3:7b:6f:2f:e5:91:84:7a:57:bc:
f8:76:a7:ce:89:58:a2:ce:e5:d0:3c:b8:0c:a2:ba:42:55:28:
c6:ac:33:5c:d7:34:49:42:91:d1:4c:de:c4:9d:75:82:0a:13:
80:f4:fe:61:25:bf:71:ae:22:db:f4:3b:ef:f0:7e:bf:11:70:
e0:ce:7a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:14:57 2026 by rpki-client