Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/DrTZeYl6G3BClyR1Egb-LctePTA.roa
File: DrTZeYl6G3BClyR1Egb-LctePTA.roa (raw, json)
Hash identifier: UGUcupvK6UuHaQTScmUmQRJexC+Ivt/BD46vFFBiWd0=
Subject key identifier: 0E:B4:D9:79:89:7A:1B:70:42:97:24:75:12:06:FE:2D:CB:5E:3D:30
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 01A032DFE0EE13958A07E52F423BD7B54079
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/DrTZeYl6G3BClyR1Egb-LctePTA.roa
Signing time: Mon 24 Aug 2026 08:25:27 +0000
ROA not before: Mon 24 Aug 2026 08:25:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 5.180.4.0/22 maxlen: 22
5.182.28.0/22 maxlen: 22
45.86.16.0/22 maxlen: 22
89.39.242.0/24 maxlen: 24
91.242.72.0/23 maxlen: 24
91.242.74.0/23 maxlen: 23
91.242.94.0/24 maxlen: 24
91.242.95.0/24 maxlen: 24
91.242.103.0/24 maxlen: 24
94.231.198.0/24 maxlen: 24
146.19.50.0/24 maxlen: 24
178.175.176.0/22 maxlen: 22
185.180.145.0/24 maxlen: 24
185.212.11.0/24 maxlen: 24
185.214.166.0/24 maxlen: 24
194.50.206.0/23 maxlen: 24
195.138.103.0/24 maxlen: 24
195.138.104.0/22 maxlen: 22
195.138.105.0/24 maxlen: 24
195.138.106.0/24 maxlen: 24
195.138.112.0/24 maxlen: 24
195.138.120.0/24 maxlen: 24
195.138.122.0/23 maxlen: 23
213.134.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 20:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:32:df:e0:ee:13:95:8a:07:e5:2f:42:3b:d7:b5:40:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Aug 24 08:25:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0eb4d979897a1b70429724751206fe2dcb5e3d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cb:36:32:03:ba:5f:13:14:20:4f:cf:96:de:
34:ad:6e:bc:23:d5:13:69:f6:86:a3:e6:d6:07:5c:
4c:f8:21:9c:be:5a:f8:7d:d7:67:af:ed:c4:07:e3:
ca:e8:da:ee:32:5a:8c:da:1f:d7:3a:23:48:85:48:
c4:a3:f7:7c:ca:d5:83:78:ff:0a:90:77:5d:93:a1:
a4:d2:45:9a:9a:e5:b6:d4:9a:48:e6:0d:67:9a:4c:
3b:3f:23:c5:bd:2f:82:75:e8:c7:91:27:a6:ad:82:
81:1e:e4:b8:33:c9:f6:8b:b2:a5:ca:f3:bd:7e:c5:
91:78:eb:6b:6b:39:f6:c7:40:b8:ad:a6:08:8c:16:
da:71:98:49:1b:21:02:a0:f4:03:c1:64:3e:15:2d:
82:75:f0:59:b4:b0:4a:d3:de:b0:1b:2d:c3:24:61:
5d:7b:4c:ef:3c:37:2f:f7:11:20:58:29:b4:a6:2a:
79:1e:1b:05:82:95:cc:a8:6b:8f:dd:7a:dd:25:19:
22:04:ac:8e:0a:69:97:e8:b0:b0:17:88:16:f5:63:
a6:17:fe:b4:8e:00:cc:b4:08:8c:6d:8d:f0:fb:03:
7c:7d:e6:5f:c4:0f:d7:48:b1:91:85:81:f7:74:e5:
6e:f5:ee:b8:1a:eb:bc:9b:91:ea:ab:07:33:29:8a:
a2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B4:D9:79:89:7A:1B:70:42:97:24:75:12:06:FE:2D:CB:5E:3D:30
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/DrTZeYl6G3BClyR1Egb-LctePTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.4.0/22
5.182.28.0/22
45.86.16.0/22
89.39.242.0/24
91.242.72.0/22
91.242.94.0/23
91.242.103.0/24
94.231.198.0/24
146.19.50.0/24
178.175.176.0/22
185.180.145.0/24
185.212.11.0/24
185.214.166.0/24
194.50.206.0/23
195.138.103.0-195.138.107.255
195.138.112.0/24
195.138.120.0/24
195.138.122.0/23
213.134.25.0/24
Signature Algorithm: sha256WithRSAEncryption
95:d2:db:f6:09:fa:08:d8:30:27:7d:0d:f6:32:c7:c9:91:3e:
08:73:54:71:51:6b:06:22:bd:2f:2e:38:2c:5b:db:0b:bb:74:
ce:71:bb:1c:7e:9e:ed:e3:aa:58:f8:d9:b1:0c:ea:49:40:32:
6b:c6:10:2a:14:6f:b8:be:4f:7a:b1:67:c6:eb:03:ed:d4:cf:
00:80:07:16:b8:a1:ed:55:32:a6:40:e8:d7:9c:fa:0c:3b:8f:
02:2c:6f:23:f0:29:9f:b5:7f:fe:82:5b:ba:8b:42:70:f0:34:
c2:05:e7:fb:aa:73:61:8f:aa:08:0f:a5:5d:75:43:df:c9:81:
ef:7e:20:e3:da:f5:68:47:67:cd:53:7c:bf:67:bd:39:3b:3c:
90:de:47:c3:0c:31:47:ec:03:26:7c:85:79:84:fe:c3:7b:7c:
f1:c4:ed:57:85:98:1a:ad:45:fe:af:58:c2:a4:50:fd:33:0c:
a3:a6:2f:8e:e7:fe:03:ff:c4:f7:76:3a:22:ae:de:6c:57:72:
67:0c:7d:ea:f7:3d:9c:52:d5:dc:49:e8:ad:2f:24:3a:44:c8:
49:b0:e9:71:b3:1c:ab:c2:a3:5d:da:3f:ec:c9:07:0b:0f:35:
a4:1a:2a:5a:45:7b:1f:95:bd:3c:02:ca:c0:c1:6b:c7:00:52:
04:89:1e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:47:54 2026 by rpki-client