Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/TUi_-2XPEoa2M0xX-cjqu1dIi08.roa
File: TUi_-2XPEoa2M0xX-cjqu1dIi08.roa (raw, json)
Hash identifier: WVUNmIeFhPV1QJDfEJTlisjQRB3eS/NqWGAiLpWc6j0=
Subject key identifier: 4D:48:BF:FB:65:CF:12:86:B6:33:4C:57:F9:C8:EA:BB:57:48:8B:4F
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 01A08BF8FBCFB6514B32CEFC019341ECE2D3
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/TUi_-2XPEoa2M0xX-cjqu1dIi08.roa
Signing time: Thu 10 Sep 2026 15:39:05 +0000
ROA not before: Thu 10 Sep 2026 15:39:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 269800
IP address blocks: 77.246.242.0/24 maxlen: 24
91.242.69.0/24 maxlen: 24
91.242.82.0/24 maxlen: 24
91.242.124.0/24 maxlen: 24
92.249.25.0/24 maxlen: 24
95.141.251.0/24 maxlen: 24
130.193.3.0/24 maxlen: 24
185.51.120.0/24 maxlen: 24
185.147.48.0/24 maxlen: 24
193.221.211.0/24 maxlen: 24
194.50.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:f8:fb:cf:b6:51:4b:32:ce:fc:01:93:41:ec:e2:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Sep 10 15:39:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d48bffb65cf1286b6334c57f9c8eabb57488b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:05:3c:a7:93:4c:c6:5e:59:4c:2a:66:05:c1:
4f:64:15:b6:6f:3f:46:cf:26:e8:69:02:cb:6d:1a:
5e:c5:ae:be:6f:d4:85:11:4f:62:8d:58:23:4b:cb:
28:10:cc:27:a5:e6:67:81:73:89:95:1b:1a:27:b7:
23:a6:b3:6d:07:7d:c2:f3:4f:37:d9:f3:65:24:82:
c2:79:d7:e4:cd:c6:25:9f:7d:af:26:be:e9:67:01:
8f:48:f2:a4:ce:76:6c:fb:ac:a8:51:91:bd:ec:c8:
c9:18:53:59:81:da:83:e6:93:a8:05:61:25:51:b5:
b2:47:46:57:a9:c4:51:3b:ed:8c:48:04:ed:e8:f1:
46:fe:f3:a3:53:1a:d2:83:72:9b:73:5a:7c:d2:b8:
b2:55:41:b3:2b:ef:62:3b:be:cc:c8:1e:e8:01:eb:
4a:10:4a:00:51:d2:ca:dd:12:ef:17:11:6c:68:39:
02:ea:78:d0:f0:ed:de:99:db:41:58:f4:c9:01:42:
1d:47:cb:d2:78:9c:73:3f:91:2e:f8:d3:b2:a6:d6:
ba:fc:fe:55:b2:6e:9a:a5:4b:86:30:57:54:6c:7d:
9a:72:bc:d1:96:41:e4:45:62:ac:9b:fc:20:0f:ad:
a9:c3:5b:12:d2:67:ac:a6:62:81:16:4b:3e:d4:bf:
b2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:48:BF:FB:65:CF:12:86:B6:33:4C:57:F9:C8:EA:BB:57:48:8B:4F
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/TUi_-2XPEoa2M0xX-cjqu1dIi08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.242.0/24
91.242.69.0/24
91.242.82.0/24
91.242.124.0/24
92.249.25.0/24
95.141.251.0/24
130.193.3.0/24
185.51.120.0/24
185.147.48.0/24
193.221.211.0/24
194.50.206.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:fc:53:ff:c0:23:73:11:3b:54:7e:b6:a5:27:84:a6:fe:87:
a6:68:42:41:cc:d5:01:17:1f:ac:2d:d3:b1:ba:da:21:ba:00:
e9:e2:77:f1:12:20:f3:75:cd:1c:2a:09:95:09:e9:12:58:85:
a1:59:2b:8a:2e:b6:25:80:52:c7:30:5e:80:97:f9:3c:8d:0d:
93:44:0b:d1:eb:31:70:8b:fd:97:41:62:fd:ef:dd:5d:a9:ed:
8a:27:ff:6b:c0:ee:22:77:9c:d8:39:c7:08:4f:92:40:b8:d1:
65:01:c7:b2:9d:5a:96:a8:d9:8a:36:30:03:43:b6:c8:b4:fb:
15:80:ec:69:5d:88:df:d2:ae:54:42:5d:22:e3:56:8b:41:8b:
ea:8d:0f:9f:61:12:19:fd:71:0b:96:70:f6:e4:4d:45:f0:2d:
ec:46:a6:62:16:dc:75:75:79:8d:6d:77:e3:7f:f4:fa:2c:bd:
49:32:bd:1f:fe:e2:e0:f8:d0:f2:7f:14:9f:1f:29:28:16:6b:
68:f4:86:c2:9c:7e:19:5e:35:7c:e4:14:0e:17:d3:37:68:cc:
d8:81:10:f1:60:7a:19:7a:30:e6:50:5c:ef:c6:c1:bc:de:b4:
a9:73:eb:17:c5:df:d7:0b:e5:62:c9:41:64:db:97:5d:ae:08:
ca:9a:67:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:39:07 2026 by rpki-client