Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/tzjOgbZH3N3SUFmrOvuJg_R3cWE.roa
File: tzjOgbZH3N3SUFmrOvuJg_R3cWE.roa (raw, json)
Hash identifier: BylWL8+SKa85X8oT5hG2guV60mf/3A/saj8SBn58cHk=
Subject key identifier: B7:38:CE:81:B6:47:DC:DD:D2:50:59:AB:3A:FB:89:83:F4:77:71:61
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01A0388927A6F1E95EDAB1E654D295DF9C7B
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/tzjOgbZH3N3SUFmrOvuJg_R3cWE.roa
Signing time: Tue 25 Aug 2026 10:48:27 +0000
ROA not before: Tue 25 Aug 2026 10:48:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41745
IP address blocks: 5.181.21.0/24 maxlen: 32
5.181.22.0/24 maxlen: 32
5.181.23.0/24 maxlen: 32
45.14.245.0/24 maxlen: 24
45.14.246.0/24 maxlen: 24
45.14.247.0/24 maxlen: 24
45.89.63.0/24 maxlen: 32
45.140.146.0/24 maxlen: 24
45.140.147.0/24 maxlen: 24
45.140.167.0/24 maxlen: 32
45.144.28.0/24 maxlen: 32
45.144.29.0/24 maxlen: 32
45.144.232.0/24 maxlen: 32
45.144.233.0/24 maxlen: 32
45.144.234.0/24 maxlen: 32
45.144.235.0/24 maxlen: 32
45.155.54.0/24 maxlen: 24
45.155.55.0/24 maxlen: 24
91.211.114.0/24 maxlen: 24
109.107.155.0/24 maxlen: 32
138.124.180.0/24 maxlen: 24
138.124.182.0/24 maxlen: 24
138.124.183.0/24 maxlen: 24
138.124.184.0/24 maxlen: 24
146.19.230.0/24 maxlen: 32
185.33.24.0/24 maxlen: 32
194.39.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:89:27:a6:f1:e9:5e:da:b1:e6:54:d2:95:df:9c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Aug 25 10:48:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b738ce81b647dcddd25059ab3afb8983f4777161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:15:bc:37:95:5e:54:68:15:11:38:40:c4:4f:
e5:20:9c:9e:04:13:53:2e:0a:29:f8:a4:d8:dc:23:
59:74:1d:a9:91:7f:c1:76:b5:22:eb:f2:15:d9:a8:
e0:2b:5a:42:3c:fb:e4:ff:3e:a9:47:75:61:d0:49:
0c:57:2b:2e:6f:96:49:ec:3f:b0:6d:57:80:da:4c:
56:5c:e3:98:ea:3c:a4:f0:a7:06:82:ab:f8:48:58:
09:d0:6c:83:5f:bd:66:5b:56:84:fe:c2:8c:95:f0:
de:f6:a6:5b:40:99:b8:21:47:a6:57:0f:62:09:b7:
12:e3:c7:cd:e8:32:7b:03:55:0b:d4:73:b2:3e:c4:
e3:0e:30:bb:d1:a5:00:2a:2d:3b:27:b7:d5:8d:bf:
81:cd:fb:ab:7e:dc:03:db:19:ce:ee:ad:54:e0:3c:
ca:78:c6:b5:58:f9:13:3b:46:f6:f2:9b:08:37:2b:
d7:62:f1:71:63:24:a2:23:ae:76:4b:b4:e9:ed:8a:
50:c1:98:53:3d:bf:09:99:a6:b0:eb:6f:a3:af:91:
0a:02:da:d1:da:7f:0e:86:73:eb:5e:e0:32:cd:79:
8f:b6:34:e0:09:48:f6:7e:a6:de:8c:dd:0c:7d:ef:
f2:65:25:ba:bf:01:64:c0:13:1a:3b:82:7b:e4:e4:
73:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:38:CE:81:B6:47:DC:DD:D2:50:59:AB:3A:FB:89:83:F4:77:71:61
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/tzjOgbZH3N3SUFmrOvuJg_R3cWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.21.0-5.181.23.255
45.14.245.0-45.14.247.255
45.89.63.0/24
45.140.146.0/23
45.140.167.0/24
45.144.28.0/23
45.144.232.0/22
45.155.54.0/23
91.211.114.0/24
109.107.155.0/24
138.124.180.0/24
138.124.182.0-138.124.184.255
146.19.230.0/24
185.33.24.0/24
194.39.110.0/24
Signature Algorithm: sha256WithRSAEncryption
48:bd:04:be:39:6c:a2:86:54:16:f6:d6:cd:11:8b:69:28:4b:
c8:96:ae:88:3d:63:00:ad:a4:48:df:d5:5a:ad:96:71:bb:fb:
52:1d:86:41:cb:eb:93:29:0e:85:10:2a:21:9a:78:ca:e1:59:
db:ab:52:fd:fb:a7:c4:1c:87:62:69:7f:05:f5:ee:06:bb:e2:
60:6c:5f:b3:78:f6:0e:f6:eb:16:5a:21:d5:3c:87:42:51:ed:
6f:ba:9a:ff:e6:9e:ef:1f:76:c9:02:94:cb:06:6e:5d:96:97:
51:08:b3:e7:0c:f4:74:a9:ce:86:b8:e2:26:99:13:25:bc:43:
6c:ee:87:ee:37:01:0d:9d:63:cd:56:4f:2f:91:7b:be:be:25:
69:5f:8c:f3:3b:ae:08:ea:6d:7a:e9:cc:30:60:c3:b6:a7:78:
94:7c:dd:30:06:f3:6b:dc:48:af:f1:6b:ed:da:ef:a1:79:96:
9e:6f:02:ed:65:24:a3:e0:29:2e:2a:6e:f3:72:46:24:bc:8d:
f9:fc:83:6f:11:6d:3b:30:62:4c:e9:8a:f3:c4:75:0f:97:e7:
76:1a:e6:c4:d9:6d:85:4e:71:45:5c:69:ab:d6:8d:59:5a:5d:
15:1d:6e:a3:b4:a6:04:43:13:7f:22:84:05:2c:23:28:2e:08:
68:af:69:d6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:58:20 2026 by rpki-client