Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/tL-DJ8EbDPZqo5Hcwxd2ywWIDr0.roa
File: tL-DJ8EbDPZqo5Hcwxd2ywWIDr0.roa (raw, json)
Hash identifier: 7ypgmIY8clfcgfXd8ScXxIyNvL0UG8VUmIwT7yY7+ig=
Subject key identifier: B4:BF:83:27:C1:1B:0C:F6:6A:A3:91:DC:C3:17:76:CB:05:88:0E:BD
Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39
Certificate serial: 019EE32D77149F21E55A3BDE083B689F354B
Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/tL-DJ8EbDPZqo5Hcwxd2ywWIDr0.roa
Signing time: Sat 20 Jun 2026 03:57:48 +0000
ROA not before: Sat 20 Jun 2026 03:57:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22773
IP address blocks: 5.183.88.0/22 maxlen: 22
77.247.116.0/22 maxlen: 22
113.30.192.0/21 maxlen: 21
185.5.144.0/24 maxlen: 24
185.5.147.0/24 maxlen: 24
185.140.173.0/24 maxlen: 24
193.111.40.0/24 maxlen: 24
194.26.202.0/24 maxlen: 24
195.64.115.0/24 maxlen: 24
195.64.119.0/24 maxlen: 24
195.64.120.0/24 maxlen: 24
195.64.121.0/24 maxlen: 24
195.64.122.0/24 maxlen: 24
195.64.123.0/24 maxlen: 24
195.64.124.0/24 maxlen: 24
195.64.125.0/24 maxlen: 24
195.96.134.0/24 maxlen: 24
216.247.232.0/22 maxlen: 22
2a10:d505::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e3:2d:77:14:9f:21:e5:5a:3b:de:08:3b:68:9f:35:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39
Validity
Not Before: Jun 20 03:57:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4bf8327c11b0cf66aa391dcc31776cb05880ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:50:93:ae:23:6c:e7:3a:f8:13:88:88:0a:e4:
86:74:96:7d:ff:e8:38:73:81:ce:dd:5d:16:d2:2b:
27:bd:e6:00:96:02:85:f4:37:13:7d:75:07:39:bd:
04:be:b4:7e:82:59:de:1a:f7:6f:bc:45:17:b1:bc:
a9:6f:70:35:ca:62:f0:fd:7c:81:6c:e8:11:7a:45:
30:cd:dc:2b:b8:20:74:06:72:15:6f:df:80:ad:1c:
f5:22:4d:83:84:ff:ec:f8:59:cc:80:e5:a0:20:ac:
9d:a1:1e:06:fc:9a:48:bb:8e:bf:76:72:1c:22:81:
01:cd:91:72:15:a8:52:b8:91:bb:5a:46:c1:e2:74:
25:a1:c0:6d:e0:eb:9c:19:d3:53:85:f2:50:83:60:
66:e5:f9:fc:c2:9a:f0:5c:55:18:1c:27:92:db:b1:
63:1a:15:bc:b1:44:cd:cf:e6:7a:8d:2f:1b:3e:e1:
2d:91:e9:3b:21:51:cd:cb:21:ea:7e:cb:9c:bf:18:
9f:e2:16:5a:a7:55:2b:4a:20:ef:5a:14:54:be:15:
a5:88:07:f9:43:c7:76:16:85:38:aa:99:7f:f4:0f:
ab:e8:43:15:c8:e9:ed:6c:a8:2f:ca:fd:9c:fe:8c:
5b:f8:aa:3d:8a:4e:a7:08:04:1d:50:f9:48:86:67:
93:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BF:83:27:C1:1B:0C:F6:6A:A3:91:DC:C3:17:76:CB:05:88:0E:BD
X509v3 Authority Key Identifier:
keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/tL-DJ8EbDPZqo5Hcwxd2ywWIDr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.88.0/22
77.247.116.0/22
113.30.192.0/21
185.5.144.0/24
185.5.147.0/24
185.140.173.0/24
193.111.40.0/24
194.26.202.0/24
195.64.115.0/24
195.64.119.0-195.64.125.255
195.96.134.0/24
216.247.232.0/22
IPv6:
2a10:d505::/32
Signature Algorithm: sha256WithRSAEncryption
89:5c:3c:18:8e:a5:12:4e:e7:7e:64:fb:37:bb:bb:c6:b8:c9:
41:dd:5b:cc:36:3e:41:71:22:73:f9:77:c8:f4:23:ba:2c:a1:
ef:81:1e:88:12:89:89:ca:e3:de:f9:e0:b0:24:77:09:d0:77:
f9:86:74:cd:9b:51:ce:52:8e:2e:8b:3d:d3:19:36:57:99:45:
a2:7c:16:d2:bb:9a:d7:9f:7f:38:68:c9:40:d8:fe:88:24:dc:
8a:db:34:9d:a2:96:d6:41:65:36:67:ae:a5:d9:1d:b6:68:bb:
a9:62:b9:75:12:00:4b:86:e2:80:58:dc:d1:59:66:f2:4a:cf:
07:ee:90:f7:fc:2f:d4:e1:56:a8:52:98:f7:18:bd:3e:cb:f2:
74:78:fe:58:3e:b3:20:8b:3e:be:c7:db:c9:ef:1c:e2:02:c5:
10:ec:82:96:e9:5a:4d:e3:61:12:99:75:91:00:14:33:14:9e:
9e:95:9a:f7:28:8b:05:e7:3d:9a:da:db:be:4b:d3:e2:63:8a:
7c:d8:b1:48:a9:6f:63:67:5c:cf:48:51:d6:f8:36:68:07:5e:
ba:a8:4b:7f:84:fd:a3:23:af:84:75:be:a7:83:18:f7:ee:d2:
67:7f:fb:5c:93:7c:1c:49:4f:b7:ac:35:97:5c:5a:b2:b7:78:
4c:5e:fe:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:26:57 2026 by rpki-client