Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/TS5GYPTuV4tHeLp8_8X66WFVBMs.roa
File: TS5GYPTuV4tHeLp8_8X66WFVBMs.roa (raw, json)
Hash identifier: 9qlG1jS6W6AzppNHk7+Fig+BSZtcHVtNIFN+xOqoK1A=
Subject key identifier: 4D:2E:46:60:F4:EE:57:8B:47:78:BA:7C:FF:C5:FA:E9:61:55:04:CB
Certificate issuer: /CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
Certificate serial: 01A16308DC4F5B2286AB962CE743EB388D13
Authority key identifier: 2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/TS5GYPTuV4tHeLp8_8X66WFVBMs.roa
Signing time: Thu 22 Oct 2026 09:54:47 +0000
ROA not before: Thu 22 Oct 2026 09:54:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202799
IP address blocks: 89.19.219.0/24 maxlen: 24
89.19.220.0/24 maxlen: 24
89.19.221.0/24 maxlen: 24
89.19.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:08:dc:4f:5b:22:86:ab:96:2c:e7:43:eb:38:8d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
Validity
Not Before: Oct 22 09:54:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d2e4660f4ee578b4778ba7cffc5fae9615504cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:08:3a:06:f1:4d:01:39:6d:c1:4d:61:42:2a:
5d:83:87:2f:8c:bb:4e:f3:86:d4:07:97:cd:02:42:
d7:0b:41:22:eb:f6:1f:42:67:ce:b6:31:d3:69:1d:
39:6b:ad:f8:47:0b:48:22:12:5d:9e:d1:20:03:22:
25:c1:7d:da:ef:2c:ba:46:21:d7:2b:f7:b6:2e:70:
86:d2:bf:e2:d0:ae:b9:14:1c:11:aa:95:47:90:ed:
e5:d3:53:63:07:48:f6:e0:4f:29:04:32:94:12:f8:
e2:92:6d:d2:95:01:77:c2:86:db:83:cb:23:18:b9:
ae:bc:df:e6:67:73:5f:d8:12:df:4d:fd:c9:d9:e5:
0b:33:05:e6:9d:1d:f9:cb:97:a9:a8:c4:9f:0b:35:
0d:aa:44:29:9d:83:d5:c3:f3:18:fb:02:bd:1f:16:
78:ce:8f:33:42:fc:c3:5a:a4:93:8a:79:8b:f9:16:
bb:91:ca:3d:52:02:c8:ae:58:56:d2:80:d2:57:a7:
48:e3:09:cc:0e:57:11:c7:55:11:a1:6b:34:f3:b0:
82:87:77:0b:2a:5f:41:1a:b6:40:c0:ab:30:56:47:
b2:93:56:08:99:94:36:ad:3f:51:97:c3:06:43:6d:
d3:2e:1f:9f:de:08:8f:f4:91:c5:0e:cb:57:f7:b8:
67:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2E:46:60:F4:EE:57:8B:47:78:BA:7C:FF:C5:FA:E9:61:55:04:CB
X509v3 Authority Key Identifier:
keyid:2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/TS5GYPTuV4tHeLp8_8X66WFVBMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.19.219.0-89.19.222.255
Signature Algorithm: sha256WithRSAEncryption
9f:2a:27:6f:bd:c7:00:c9:d6:3f:3b:49:f1:9f:a8:45:f8:72:
c9:c3:93:07:c7:58:3b:f6:df:6b:49:5b:bc:5c:9c:0a:f4:1a:
a0:75:3e:22:e3:4a:ba:20:5d:b0:e0:1a:74:0a:5d:c4:52:17:
3d:46:f4:8c:4e:e8:34:a8:ee:d5:2c:ca:57:c8:9b:14:df:10:
58:a8:2c:a4:fd:b5:35:e7:b6:0d:e5:57:94:92:f6:cd:29:39:
29:40:8f:58:84:84:63:d9:21:59:19:5e:aa:c3:1b:57:e5:e5:
b9:2c:e0:17:4b:d8:ab:fb:5b:32:13:f0:8a:56:5f:7f:c4:67:
9f:8e:56:90:a6:f9:85:2b:e5:60:a0:d0:c2:19:14:8f:ab:9d:
56:1e:ec:c6:26:62:6e:b8:5d:e5:c0:86:38:ac:64:61:34:20:
97:e2:78:96:4c:4d:83:17:0c:da:76:5b:0f:69:a2:3c:4d:c2:
8a:ac:81:53:0f:6c:f5:2e:1b:10:d5:1b:5c:66:67:1a:1c:1d:
1b:c4:ef:4b:0e:b2:72:53:c0:de:64:04:97:06:24:8f:1d:4f:
93:15:a9:49:28:ef:56:65:42:ae:ac:a3:8e:73:be:fc:8c:64:
47:a9:92:b4:31:a1:0e:61:1b:c8:f7:39:2b:04:12:26:37:af:
4d:15:8e:58
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAaFjCNxPWyKGq5Ys50PrOI0TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZWJiNjkxYjI0ZjI4NzkyNTNlM2E2YTQ1ZTBiNWM1MjY3
M2IwOWQwHhcNMjYxMDIyMDk1NDQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDJlNDY2MGY0ZWU1NzhiNDc3OGJhN2NmZmM1ZmFlOTYxNTUwNGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Ag6BvFNATltwU1hQipdg4cvjLtO
84bUB5fNAkLXC0Ei6/YfQmfOtjHTaR05a634RwtIIhJdntEgAyIlwX3a7yy6RiHX
K/e2LnCG0r/i0K65FBwRqpVHkO3l01NjB0j24E8pBDKUEvjikm3SlQF3wobbg8sj
GLmuvN/mZ3Nf2BLfTf3J2eULMwXmnR35y5epqMSfCzUNqkQpnYPVw/MY+wK9HxZ4
zo8zQvzDWqSTinmL+Ra7kco9UgLIrlhW0oDSV6dI4wnMDlcRx1URoWs087CCh3cL
Kl9BGrZAwKswVkeyk1YImZQ2rT9Rl8MGQ23TLh+f3giP9JHFDstX97hnvwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFE0uRmD07leLR3i6fP/F+ulhVQTLMB8GA1UdIwQY
MBaAFC7rtpGyTyh5JT46akXgtcUmc7CdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xMzBkOTUtNTY0MS00YWRhLTgwYzAt
ZGEzZTExOTJjZGY2LzEvVFM1R1lQVHVWNHRIZUxwOF84WDY2V0ZWQk1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8xMzBkOTUtNTY0MS00YWRhLTgwYzAtZGEzZTExOTJjZGY2
LzEvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABZE9sD
BABZE94wDQYJKoZIhvcNAQELBQADggEBAJ8qJ2+9xwDJ1j87SfGfqEX4csnDkwfH
WDv232tJW7xcnAr0GqB1PiLjSrogXbDgGnQKXcRSFz1G9IxO6DSo7tUsylfImxTf
EFioLKT9tTXntg3lV5SS9s0pOSlAj1iEhGPZIVkZXqrDG1fl5bks4BdL2Kv7WzIT
8IpWX3/EZ5+OVpCm+YUr5WCg0MIZFI+rnVYe7MYmYm64XeXAhjisZGE0IJfieJZM
TYMXDNp2Ww9pojxNwoqsgVMPbPUuGxDVG1xmZxocHRvE70sOsnJTwN5kBJcGJI8d
T5MVqUko71ZlQq6so45zvvyMZEepkrQxoQ5hG8j3OSsEEiY3r00Vjlg=
-----END CERTIFICATE-----
Generated at Sun Oct 25 07:53:19 2026 by rpki-client