Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/TURon6JiNs0lgTZSDniUslEGz9E.roa
File: TURon6JiNs0lgTZSDniUslEGz9E.roa (raw, json)
Hash identifier: eXgvunaSwK3PiegbOluPRt7fixoWf2ckeL+bp42GNpc=
Subject key identifier: 4D:44:68:9F:A2:62:36:CD:25:81:36:52:0E:78:94:B2:51:06:CF:D1
Certificate issuer: /CN=c27358682df3df8bdc7024507f92ecfc5ae097bb
Certificate serial: 019FAE38ED4BD9C0CA3D39FF66AECABD608F
Authority key identifier: C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/TURon6JiNs0lgTZSDniUslEGz9E.roa
Signing time: Wed 29 Jul 2026 14:13:14 +0000
ROA not before: Wed 29 Jul 2026 14:13:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15703
IP address blocks: 80.247.220.0/24 maxlen: 24
87.233.0.0/16 maxlen: 24
193.28.152.0/24 maxlen: 24
213.193.193.0/24 maxlen: 24
213.193.210.0/24 maxlen: 24
213.193.234.0/24 maxlen: 24
213.193.247.0/24 maxlen: 24
213.239.136.0/24 maxlen: 24
2001:990::/32 maxlen: 32
2001:9a8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 05:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:38:ed:4b:d9:c0:ca:3d:39:ff:66:ae:ca:bd:60:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c27358682df3df8bdc7024507f92ecfc5ae097bb
Validity
Not Before: Jul 29 14:13:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d44689fa26236cd258136520e7894b25106cfd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:65:1c:ed:0d:8a:33:86:c7:19:94:55:f6:ef:
02:d6:25:23:3a:3d:6b:41:78:42:40:6c:27:40:ab:
ed:98:83:0a:29:b0:f9:46:b1:34:42:94:8d:9c:e8:
a1:3f:bc:29:cb:34:4c:fc:9e:aa:74:b2:6e:2b:d5:
b6:54:39:c1:ae:fb:46:dd:a1:81:59:c8:59:52:d1:
15:fb:6c:af:6b:97:8d:7a:0b:d4:79:7f:cd:03:d9:
c4:df:df:3d:3f:e6:b5:ff:79:7e:05:0d:0f:4c:24:
fe:c8:3c:55:0a:91:58:8c:a5:c3:3e:69:71:bc:2c:
8b:87:e1:2d:cd:5d:96:e5:04:4a:03:9a:1e:3e:b5:
8f:fa:62:6c:11:22:1b:dd:08:02:f9:2e:4a:75:02:
f1:09:28:48:48:c9:b7:c2:e7:f7:db:90:86:ca:2e:
1b:4a:ec:2f:e2:c4:38:97:ba:9b:cd:87:62:61:8e:
8e:d8:1d:e1:cf:40:ac:17:d9:cc:50:e5:3d:72:e0:
e1:fc:6d:32:18:1a:23:7a:77:39:91:12:ca:fd:83:
e0:79:7f:61:02:7e:fc:61:90:af:b5:ce:72:20:53:
3b:80:75:72:f8:62:68:6c:b5:46:a1:f6:e6:8b:fc:
d1:25:c9:2e:b9:7c:8d:38:21:a3:31:79:04:72:3e:
53:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:44:68:9F:A2:62:36:CD:25:81:36:52:0E:78:94:B2:51:06:CF:D1
X509v3 Authority Key Identifier:
keyid:C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/TURon6JiNs0lgTZSDniUslEGz9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.247.220.0/24
87.233.0.0/16
193.28.152.0/24
213.193.193.0/24
213.193.210.0/24
213.193.234.0/24
213.193.247.0/24
213.239.136.0/24
IPv6:
2001:990::/32
2001:9a8::/32
Signature Algorithm: sha256WithRSAEncryption
53:0b:74:a3:c3:73:09:ab:54:09:4d:a8:1e:f4:8c:5d:72:7f:
d1:59:1e:c7:ea:fb:9c:64:52:31:17:21:25:31:a2:48:c1:38:
60:ad:de:8a:48:77:b8:6d:d8:dd:06:fa:3f:26:e6:14:ec:75:
66:7a:6c:c1:bc:95:a2:4e:b2:f7:ec:21:90:c7:37:fc:8e:ce:
aa:0e:8b:d6:e7:c4:13:6b:c7:47:2b:7c:ba:8f:62:5b:b5:a0:
57:af:b9:46:6e:91:4f:f1:42:9b:1f:df:3f:9c:92:0e:ce:f9:
fd:2c:f6:40:fb:7e:b7:d5:d4:89:a4:6e:a4:a3:de:32:ed:5e:
22:82:26:c5:70:f9:f1:4d:a9:44:ae:57:9b:d7:30:e7:bf:83:
2f:47:97:56:0e:54:03:2f:36:79:d5:ee:d9:ee:22:1a:41:64:
0c:70:cb:2c:f8:88:ac:dd:cf:6a:6e:1e:35:cf:8a:91:0d:4e:
92:df:73:0e:ee:d2:ab:cf:d1:b4:ca:1f:a3:1d:92:97:cc:ec:
80:e3:14:8c:e3:92:5f:bb:bc:94:78:75:5f:64:dd:45:69:83:
33:1f:ee:1b:58:3a:75:5a:d7:40:6a:88:41:25:7a:e4:a2:b8:
7e:41:2c:2a:14:93:08:48:6c:6f:7b:8f:d0:0d:64:81:0d:f7:
76:36:2d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:43:59 2026 by rpki-client