Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/tdd9dtqfJz8b261bk6JHpfES0Tc.roa
File: tdd9dtqfJz8b261bk6JHpfES0Tc.roa (raw, json)
Hash identifier: 59X3VpR48VTmddAG5znhTReZ1Oc8j9zqQITK+23bgXI=
Subject key identifier: B5:D7:7D:76:DA:9F:27:3F:1B:DB:AD:5B:93:A2:47:A5:F1:12:D1:37
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 01A0A93042B4CCFE1561AB2FD68EF4F47F7C
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/tdd9dtqfJz8b261bk6JHpfES0Tc.roa
Signing time: Wed 16 Sep 2026 07:48:27 +0000
ROA not before: Wed 16 Sep 2026 07:48:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197033
IP address blocks: 46.18.224.0/21 maxlen: 21
91.216.43.0/24 maxlen: 24
91.224.230.0/23 maxlen: 23
93.177.81.0/24 maxlen: 24
185.24.152.0/22 maxlen: 22
185.33.88.0/22 maxlen: 22
185.97.204.0/22 maxlen: 22
185.147.65.0/24 maxlen: 24
185.147.67.0/24 maxlen: 24
185.155.173.0/24 maxlen: 24
185.195.248.0/24 maxlen: 24
185.195.249.0/24 maxlen: 24
185.195.250.0/24 maxlen: 24
185.195.251.0/24 maxlen: 24
193.34.32.0/22 maxlen: 22
193.34.35.0/24 maxlen: 24
194.147.172.0/24 maxlen: 24
194.147.227.0/24 maxlen: 24
194.147.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:30:42:b4:cc:fe:15:61:ab:2f:d6:8e:f4:f4:7f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Sep 16 07:48:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5d77d76da9f273f1bdbad5b93a247a5f112d137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ce:73:38:8a:3f:2f:be:50:2c:3a:2e:7c:ff:
7f:96:d7:6d:18:09:0a:08:97:50:9b:af:20:2e:0f:
ff:7f:eb:4e:40:73:2f:36:a1:ca:f6:d7:65:2c:31:
78:47:cd:e2:52:45:19:ce:81:f5:15:5f:fd:50:0f:
8e:19:d9:b6:bd:26:f8:10:52:9c:44:06:de:53:4d:
c3:62:e8:6a:cd:a6:58:1c:b7:65:7e:04:03:17:85:
14:e0:e9:0c:92:4f:11:74:57:1a:93:5f:b0:e9:ea:
2f:3c:a6:c5:ad:06:69:69:28:f2:32:60:81:03:5d:
88:e6:7a:b5:08:ca:0e:b4:2d:0e:91:75:8e:40:7a:
ca:11:8d:88:83:bc:99:8d:5c:c8:dd:c4:7a:6c:b6:
7c:e7:47:26:f7:5e:ce:a7:c6:f4:dd:a3:0e:d0:e8:
ae:9a:d3:66:37:43:80:44:54:92:01:03:b1:a0:9a:
f7:e8:b7:a0:b7:fe:1e:29:1c:c1:da:63:16:39:33:
e5:b4:c5:50:20:41:a9:8c:e8:94:2c:12:8e:bc:71:
e8:df:a2:ba:a5:5b:d8:25:88:3e:5d:cd:45:0b:c0:
0d:1f:89:1f:22:d3:fc:99:aa:d3:c3:fc:54:a5:ad:
96:5f:08:6a:76:91:cd:70:d2:b9:6e:6a:fe:ca:d1:
05:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D7:7D:76:DA:9F:27:3F:1B:DB:AD:5B:93:A2:47:A5:F1:12:D1:37
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/tdd9dtqfJz8b261bk6JHpfES0Tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.224.0/21
91.216.43.0/24
91.224.230.0/23
93.177.81.0/24
185.24.152.0/22
185.33.88.0/22
185.97.204.0/22
185.147.65.0/24
185.147.67.0/24
185.155.173.0/24
185.195.248.0/22
193.34.32.0/22
194.147.172.0/24
194.147.227.0-194.147.228.255
Signature Algorithm: sha256WithRSAEncryption
34:30:c9:77:c6:09:53:88:0e:82:c5:99:02:cf:6e:83:55:f7:
f1:27:4f:3a:dc:01:09:95:41:e3:af:bd:c8:92:59:92:de:02:
dd:93:21:ce:9c:99:26:1a:4e:6f:32:aa:27:6f:a3:80:63:ba:
ff:a7:60:72:df:84:88:2c:29:91:37:0f:f1:1a:a1:3a:86:fd:
2e:15:1c:71:3a:95:b2:8c:31:63:32:71:3b:39:7e:a7:2a:7d:
12:df:c5:47:57:c5:9a:ee:33:e1:04:83:ff:9b:6e:05:62:22:
00:aa:4d:eb:47:0e:8b:da:16:80:00:86:32:b5:5a:e8:0d:00:
5d:50:85:4d:d5:34:6c:eb:e2:66:c8:cf:9c:9e:67:aa:a5:81:
bb:c6:76:6a:c8:b2:6d:5c:9c:d3:23:a8:68:01:e2:28:69:52:
40:42:24:e8:0a:a7:12:64:5a:29:12:d5:ae:0b:0b:c1:ed:42:
dd:74:12:f4:57:94:05:f0:58:ab:20:4f:55:0a:ad:d7:58:80:
35:38:0c:35:9b:af:df:9e:3d:98:0e:d5:c8:f1:ad:1e:85:41:
1b:2c:5f:ab:45:a8:93:55:9e:47:51:9d:97:c2:d7:b9:9a:79:
35:18:2e:0e:0c:28:fa:d9:a5:78:3c:c4:2f:a1:c9:be:ac:24:
71:b7:94:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 06:54:57 2026 by rpki-client