Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ttfQICC3YDrx9g0YcHR6UAZS7S8.roa
File: ttfQICC3YDrx9g0YcHR6UAZS7S8.roa (raw, json)
Hash identifier: LgeDVMIf+j84lNM8us+W9cuU/On0HQxhBX8w+eNNEPY=
Subject key identifier: B6:D7:D0:20:20:B7:60:3A:F1:F6:0D:18:70:74:7A:50:06:52:ED:2F
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01A13EE1FB352208B817A49965FABE16CDA7
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ttfQICC3YDrx9g0YcHR6UAZS7S8.roa
Signing time: Thu 15 Oct 2026 09:25:59 +0000
ROA not before: Thu 15 Oct 2026 09:25:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210616
IP address blocks: 93.171.184.0/22 maxlen: 24
93.171.213.0/24 maxlen: 24
146.120.52.0/22 maxlen: 24
146.120.116.0/23 maxlen: 24
146.158.88.0/22 maxlen: 24
146.158.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:e1:fb:35:22:08:b8:17:a4:99:65:fa:be:16:cd:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Oct 15 09:25:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b6d7d02020b7603af1f60d1870747a500652ed2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:16:f0:f1:f2:c8:b5:04:59:a0:2c:7c:bb:d2:
89:fd:3c:33:1e:20:3f:33:73:a7:6c:5a:da:ab:76:
94:4b:a4:be:4c:df:84:fe:98:6e:6b:c7:0a:16:8b:
3c:3a:c8:0a:1e:3a:7c:9f:54:e9:77:b7:34:d6:d5:
c6:55:ce:00:d9:3f:6f:fc:4a:b3:eb:7d:b5:77:56:
67:1e:f5:a1:6c:5a:4a:e0:97:b1:89:33:ac:fd:71:
12:72:ed:16:43:f1:7d:cf:07:c7:e5:c7:74:c0:76:
7e:05:46:34:30:e5:2b:36:ad:5a:24:20:06:ec:06:
67:70:2c:ed:a7:95:cf:c6:42:c7:30:74:c7:83:d6:
b0:96:c8:8e:c3:66:72:47:cb:b5:5d:96:45:4f:d7:
92:96:dd:9b:2d:32:ea:20:be:a1:07:27:4f:c7:aa:
d0:85:a5:9f:6d:a8:6d:86:c2:fc:8b:30:f3:e9:b5:
19:77:c3:7a:81:44:ac:79:3c:f6:15:be:bf:ee:3e:
98:83:93:52:44:25:e1:98:10:fc:a7:1e:9a:b8:32:
12:7a:8b:cd:d7:6e:b3:e4:a4:76:5a:77:e7:8f:be:
ec:05:e4:3b:0a:0c:29:85:04:3a:38:1a:ff:9e:3d:
a9:f2:1d:2d:65:66:82:9f:50:89:77:ab:f3:75:c8:
15:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D7:D0:20:20:B7:60:3A:F1:F6:0D:18:70:74:7A:50:06:52:ED:2F
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ttfQICC3YDrx9g0YcHR6UAZS7S8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.184.0/22
93.171.213.0/24
146.120.52.0/22
146.120.116.0/23
146.158.88.0/22
146.158.96.0/19
Signature Algorithm: sha256WithRSAEncryption
1f:09:7e:54:ad:f7:6f:de:00:46:fe:4f:fa:db:af:07:cd:b1:
d0:fa:d2:b1:5e:51:28:64:cf:5f:4b:a6:1c:62:c8:b6:c2:fd:
96:4e:9b:9a:9d:79:10:5d:53:da:d6:c6:30:f3:0b:de:40:42:
f2:f0:a3:46:8c:69:b4:78:db:71:fc:49:80:0b:cd:23:d0:aa:
11:1e:fb:3d:63:db:70:96:fe:95:2e:71:20:20:23:fe:de:e8:
de:8d:9b:83:38:ba:14:91:f1:72:22:e6:e4:47:bb:b5:05:51:
c8:15:85:67:95:02:ee:ab:4a:fe:e9:9e:ce:71:d0:b7:5e:b7:
e8:3e:24:64:4d:b6:d7:ef:df:d8:7f:2e:7d:9c:ee:9b:38:91:
13:db:d8:49:eb:af:6e:45:5b:db:6c:26:18:94:6e:50:e1:87:
10:77:bd:c0:5e:d9:27:6d:d5:4f:ec:1f:53:5a:32:87:88:07:
d2:c2:a5:d5:f3:46:67:d1:d3:3a:87:df:5f:af:d4:3a:28:9c:
aa:38:62:91:f6:3e:37:75:b5:5b:ee:96:65:55:61:20:40:e0:
97:ff:99:72:c4:b5:61:9c:d0:6b:c0:44:cc:08:39:b5:c9:40:
fb:fd:ba:6f:90:e9:5c:7a:fa:e7:46:69:09:81:c1:7b:a7:76:
45:72:c7:b8
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAaE+4fs1Igi4F6SZZfq+Fs2nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjYxMDE1MDkyNTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNmQ3ZDAyMDIwYjc2MDNhZjFmNjBkMTg3MDc0N2E1MDA2NTJlZDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohbw8fLItQRZoCx8u9KJ/TwzHiA/
M3OnbFraq3aUS6S+TN+E/phua8cKFos8OsgKHjp8n1Tpd7c01tXGVc4A2T9v/Eqz
6321d1ZnHvWhbFpK4JexiTOs/XEScu0WQ/F9zwfH5cd0wHZ+BUY0MOUrNq1aJCAG
7AZncCztp5XPxkLHMHTHg9awlsiOw2ZyR8u1XZZFT9eSlt2bLTLqIL6hBydPx6rQ
haWfbahthsL8izDz6bUZd8N6gUSseTz2Fb6/7j6Yg5NSRCXhmBD8px6auDISeovN
126z5KR2Wnfnj77sBeQ7CgwphQQ6OBr/nj2p8h0tZWaCn1CJd6vzdcgVOwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFLbX0CAgt2A68fYNGHB0elAGUu0vMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvdHRmUUlDQzNZRHJ4OWcwWWNIUjZVQVpTN1M4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCXau4AwQA
XavVAwQCkng0AwQBknh0AwQCkp5YAwQFkp5gMA0GCSqGSIb3DQEBCwUAA4IBAQAf
CX5Urfdv3gBG/k/6268HzbHQ+tKxXlEoZM9fS6YcYsi2wv2WTpuanXkQXVPa1sYw
8wveQELy8KNGjGm0eNtx/EmAC80j0KoRHvs9Y9twlv6VLnEgICP+3ujejZuDOLoU
kfFyIubkR7u1BVHIFYVnlQLuq0r+6Z7OcdC3XrfoPiRkTbbX79/Yfy59nO6bOJET
29hJ669uRVvbbCYYlG5Q4YcQd73AXtknbdVP7B9TWjKHiAfSwqXV80Zn0dM6h99f
r9Q6KJyqOGKR9j43dbVb7pZlVWEgQOCX/5lyxLVhnNBrwETMCDm1yUD7/bpvkOlc
evrnRmkJgcF7p3ZFcse4
-----END CERTIFICATE-----
Generated at Tue Oct 27 06:00:53 2026 by rpki-client