Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/TnuPLr96NE4kvwBNRd_eqPgU9Tg.roa
File: TnuPLr96NE4kvwBNRd_eqPgU9Tg.roa (raw, json)
Hash identifier: ruDz8U0cu+MiYTfXFQD2qaBTvL0XnsolTbruv0gDlxg=
Subject key identifier: 4E:7B:8F:2E:BF:7A:34:4E:24:BF:00:4D:45:DF:DE:A8:F8:14:F5:38
Certificate issuer: /CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Certificate serial: 01A00BF7DA46AAF720BEA7DE6F8152777220
Authority key identifier: 8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/TnuPLr96NE4kvwBNRd_eqPgU9Tg.roa
Signing time: Sun 16 Aug 2026 19:06:27 +0000
ROA not before: Sun 16 Aug 2026 19:06:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41155
IP address blocks: 45.91.151.0/24 maxlen: 24
45.93.244.0/24 maxlen: 24
45.93.245.0/24 maxlen: 24
45.93.246.0/24 maxlen: 24
45.93.247.0/24 maxlen: 24
45.156.72.0/24 maxlen: 24
45.156.73.0/24 maxlen: 24
45.156.74.0/24 maxlen: 24
45.156.75.0/24 maxlen: 24
45.158.136.0/24 maxlen: 24
45.158.137.0/24 maxlen: 24
45.158.138.0/24 maxlen: 24
45.158.139.0/24 maxlen: 24
77.75.231.0/24 maxlen: 24
109.107.134.0/24 maxlen: 24
185.34.103.0/24 maxlen: 24
185.52.231.0/24 maxlen: 24
185.89.23.0/24 maxlen: 24
185.222.215.0/24 maxlen: 24
188.244.116.0/24 maxlen: 24
194.0.193.0/24 maxlen: 24
194.0.221.0/24 maxlen: 24
194.0.223.0/24 maxlen: 24
194.1.200.0/24 maxlen: 24
2a0d:8e80:2659::/48 maxlen: 48
2a0d:8e80:8080::/48 maxlen: 48
2a0d:8e80:8a80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0b:f7:da:46:aa:f7:20:be:a7:de:6f:81:52:77:72:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Validity
Not Before: Aug 16 19:06:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e7b8f2ebf7a344e24bf004d45dfdea8f814f538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:02:2a:e6:9b:43:ec:86:eb:74:e4:a0:47:f9:
a8:4e:da:b8:b9:f1:12:4b:9c:81:a5:4e:12:85:5a:
2f:7d:4f:87:4c:0a:47:2f:03:4d:31:f3:0b:2c:69:
61:7e:57:3d:60:d6:ed:7f:80:eb:a9:89:ad:74:ba:
53:cc:47:be:73:77:cb:bf:de:dc:14:96:cf:c0:e9:
d9:4b:fc:82:e9:d4:26:6a:5f:21:16:61:eb:32:f4:
d2:97:d2:a5:65:aa:7e:66:87:b2:ec:f3:bc:94:1a:
32:39:56:09:fd:b3:99:62:c0:5a:5a:c8:ce:19:85:
36:18:57:da:ac:0e:97:ce:69:2d:31:2a:91:35:4a:
01:a9:14:e9:53:27:e9:d3:f0:68:2c:da:37:c0:d2:
92:9f:97:d8:67:ec:bf:d3:2a:f2:b6:13:a3:4c:2f:
e8:2e:49:d5:a3:a0:6a:68:d6:04:82:c8:21:65:13:
69:95:00:65:58:c8:a5:16:4a:9e:20:05:eb:c4:c3:
76:97:96:00:68:4f:d0:ce:c9:db:b1:19:55:e0:6d:
7b:af:4c:85:b9:cc:a2:c4:fe:58:c2:f7:64:7f:7c:
a8:d5:ac:82:b9:9f:57:06:ef:10:70:14:42:e1:84:
6c:4b:c9:c0:69:ae:6c:55:ea:75:8a:11:d8:e3:db:
61:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7B:8F:2E:BF:7A:34:4E:24:BF:00:4D:45:DF:DE:A8:F8:14:F5:38
X509v3 Authority Key Identifier:
keyid:8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/TnuPLr96NE4kvwBNRd_eqPgU9Tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.151.0/24
45.93.244.0/22
45.156.72.0/22
45.158.136.0/22
77.75.231.0/24
109.107.134.0/24
185.34.103.0/24
185.52.231.0/24
185.89.23.0/24
185.222.215.0/24
188.244.116.0/24
194.0.193.0/24
194.0.221.0/24
194.0.223.0/24
194.1.200.0/24
IPv6:
2a0d:8e80:2659::/48
2a0d:8e80:8080::/48
2a0d:8e80:8a80::/48
Signature Algorithm: sha256WithRSAEncryption
40:a8:8e:8c:31:b5:81:02:0e:5f:6a:be:c9:b9:61:82:cb:8f:
ea:5c:63:30:cd:84:ad:76:c5:70:28:fe:dc:f8:e7:bc:d7:a7:
64:70:64:4a:ae:39:d5:b7:37:61:40:a3:49:43:05:2d:f8:54:
0e:fa:04:a1:2b:32:e4:12:38:60:8a:eb:4f:d8:c4:aa:53:ef:
40:3f:ce:27:c3:b2:63:b7:fd:56:ad:dc:cf:48:5c:69:a8:98:
65:d6:da:27:56:17:a3:a4:48:fe:4b:a3:95:37:3d:0f:b0:a1:
24:99:d9:94:45:09:a8:60:d8:37:47:83:87:39:23:70:1c:dc:
fe:9c:53:cd:e9:46:28:ca:67:dc:45:b4:53:43:d1:f0:07:3f:
03:dd:50:1c:f7:c4:58:4a:5d:e1:a0:9f:54:29:20:ab:64:f9:
d8:61:03:e2:82:26:6d:e2:fe:50:dc:d0:5b:a9:ae:95:f2:1b:
7c:e4:f1:be:f8:b5:90:26:24:73:d6:6c:43:07:e2:08:e5:f4:
f1:bd:54:8c:80:b3:2c:e6:46:88:8b:2b:d7:9f:4c:df:9a:e1:
f1:ab:57:a6:22:c2:b2:13:80:ed:3f:f3:5f:43:a0:06:41:20:
36:db:23:d4:13:c5:3b:04:44:a4:1c:13:72:ce:c5:45:d0:d7:
e8:e9:99:ff
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgISAaAL99pGqvcgvqfeb4FSd3IgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYjEzMDhjNmE5NzdkNWNiOTAzYmYyNWE5NjMwOGIwZThj
ZTNiNDYwHhcNMjYwODE2MTkwNjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTdiOGYyZWJmN2EzNDRlMjRiZjAwNGQ0NWRmZGVhOGY4MTRmNTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQIq5ptD7IbrdOSgR/moTtq4ufES
S5yBpU4ShVovfU+HTApHLwNNMfMLLGlhflc9YNbtf4DrqYmtdLpTzEe+c3fLv97c
FJbPwOnZS/yC6dQmal8hFmHrMvTSl9KlZap+Zoey7PO8lBoyOVYJ/bOZYsBaWsjO
GYU2GFfarA6XzmktMSqRNUoBqRTpUyfp0/BoLNo3wNKSn5fYZ+y/0yrythOjTC/o
LknVo6BqaNYEgsghZRNplQBlWMilFkqeIAXrxMN2l5YAaE/QzsnbsRlV4G17r0yF
ucyixP5Ywvdkf3yo1ayCuZ9XBu8QcBRC4YRsS8nAaa5sVep1ihHY49thZwIDAQAB
o4ICgzCCAn8wHQYDVR0OBBYEFE57jy6/ejROJL8ATUXf3qj4FPU4MB8GA1UdIwQY
MBaAFIuxMIxql31cuQO/JaljCLDozjtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTdFd2pHcVhmVnk1QTc4bHFXTUlzT2pPTzBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83NzY2ODEtYjVlZS00MzBmLTg2OTMt
MTAxYWJkNzM5MWE2LzEvVG51UExyOTZORTRrdndCTlJkX2VxUGdVOVRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy83NzY2ODEtYjVlZS00MzBmLTg2OTMtMTAxYWJkNzM5MWE2
LzEvaTdFd2pHcVhmVnk1QTc4bHFXTUlzT2pPTzBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGYBggrBgEFBQcBBwEB/wSBiDCBhTBgBAIAATBaAwQALVuX
AwQCLV30AwQCLZxIAwQCLZ6IAwQATUvnAwQAbWuGAwQAuSJnAwQAuTTnAwQAuVkX
AwQAud7XAwQAvPR0AwQAwgDBAwQAwgDdAwQAwgDfAwQAwgHIMCEEAgACMBsDBwAq
DY6AJlkDBwAqDY6AgIADBwAqDY6AioAwDQYJKoZIhvcNAQELBQADggEBAECojowx
tYECDl9qvsm5YYLLj+pcYzDNhK12xXAo/tz457zXp2RwZEquOdW3N2FAo0lDBS34
VA76BKErMuQSOGCK60/YxKpT70A/zifDsmO3/Vat3M9IXGmomGXW2idWF6OkSP5L
o5U3PQ+woSSZ2ZRFCahg2DdHg4c5I3Ac3P6cU83pRijKZ9xFtFND0fAHPwPdUBz3
xFhKXeGgn1QpIKtk+dhhA+KCJm3i/lDc0FuprpXyG3zk8b74tZAmJHPWbEMH4gjl
9PG9VIyAsyzmRoiLK9efTN+a4fGrV6YiwrITgO0/819DoAZBIDbbI9QTxTsERKQc
E3LOxUXQ1+jpmf8=
-----END CERTIFICATE-----
Generated at Sat Aug 22 06:14:43 2026 by rpki-client