Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/TqFbYaJ4_QDn-v_oCyQRpN57Qoo.roa
File: TqFbYaJ4_QDn-v_oCyQRpN57Qoo.roa (raw, json)
Hash identifier: yagPPrxtzhUMyrYh+HIodRJdx3Rmk9DHZZVSdWTJPK8=
Subject key identifier: 4E:A1:5B:61:A2:78:FD:00:E7:FA:FF:E8:0B:24:11:A4:DE:7B:42:8A
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01A0425A9DE3AF8897E469587FC3EFCED375
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/TqFbYaJ4_QDn-v_oCyQRpN57Qoo.roa
Signing time: Thu 27 Aug 2026 08:33:50 +0000
ROA not before: Thu 27 Aug 2026 08:33:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52468
IP address blocks: 31.15.0.0/24 maxlen: 24
31.15.1.0/24 maxlen: 24
31.15.2.0/24 maxlen: 24
31.15.3.0/24 maxlen: 24
31.15.5.0/24 maxlen: 24
31.15.6.0/24 maxlen: 24
31.15.7.0/24 maxlen: 24
45.10.107.0/24 maxlen: 24
45.130.160.0/24 maxlen: 24
45.130.161.0/24 maxlen: 24
45.150.85.0/24 maxlen: 24
45.150.86.0/24 maxlen: 24
45.150.87.0/24 maxlen: 24
46.29.28.0/24 maxlen: 24
153.51.248.0/24 maxlen: 24
153.51.249.0/24 maxlen: 24
153.51.250.0/24 maxlen: 24
153.51.251.0/24 maxlen: 24
153.51.252.0/24 maxlen: 24
153.51.253.0/24 maxlen: 24
153.51.254.0/24 maxlen: 24
153.51.255.0/24 maxlen: 24
181.41.147.0/24 maxlen: 24
194.31.105.0/24 maxlen: 24
194.31.107.0/24 maxlen: 24
194.32.112.0/24 maxlen: 24
201.77.53.0/24 maxlen: 24
217.76.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:5a:9d:e3:af:88:97:e4:69:58:7f:c3:ef:ce:d3:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Aug 27 08:33:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ea15b61a278fd00e7faffe80b2411a4de7b428a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f1:a6:78:45:2e:76:14:cb:05:39:d8:61:0b:
25:22:cf:91:01:58:a5:dd:30:c9:4b:e0:a8:0a:98:
dd:3a:13:a7:3d:f5:31:8b:ce:09:39:5d:95:e0:ba:
40:a7:ab:93:23:24:e1:53:b8:33:0f:cb:3e:f0:f2:
37:4b:95:19:b7:39:f2:a4:c1:f6:2a:75:db:81:a9:
8f:62:2a:21:bb:d1:eb:96:8c:b6:05:3c:bb:d5:96:
11:e7:bc:d4:76:51:e7:d2:32:a2:67:ef:73:4b:4a:
7f:2e:22:9a:ac:be:65:76:55:62:65:1e:64:39:de:
a1:9b:ec:b3:07:b4:57:fa:73:95:4e:24:2a:ba:2a:
0a:73:c7:5b:21:3f:4a:10:dc:61:3e:0a:2f:36:17:
74:6b:59:f8:c9:28:41:e5:0b:53:b5:5c:e5:62:70:
e6:ae:a7:8f:53:50:0b:b1:c1:c8:45:c0:a1:34:e9:
d1:61:c7:75:d5:17:2d:8b:a2:79:a6:54:1c:07:d0:
c9:5f:b9:b1:82:a1:7c:98:0e:66:f4:e2:07:f7:11:
83:22:38:ea:5f:7d:a8:95:ca:84:2e:89:70:b0:0c:
f0:59:e1:16:d7:bf:26:40:38:5c:f0:fc:47:90:06:
dc:01:75:61:90:31:52:a1:56:35:51:41:d1:db:59:
91:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A1:5B:61:A2:78:FD:00:E7:FA:FF:E8:0B:24:11:A4:DE:7B:42:8A
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/TqFbYaJ4_QDn-v_oCyQRpN57Qoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.0.0/22
31.15.5.0-31.15.7.255
45.10.107.0/24
45.130.160.0/23
45.150.85.0-45.150.87.255
46.29.28.0/24
153.51.248.0/21
181.41.147.0/24
194.31.105.0/24
194.31.107.0/24
194.32.112.0/24
201.77.53.0/24
217.76.240.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:4f:4b:89:aa:34:43:d7:02:25:82:6e:d3:4e:d6:a4:78:aa:
16:c2:51:69:38:7d:ab:80:57:d3:6d:52:41:7d:9f:22:99:af:
68:a6:dc:09:af:d0:a5:a6:1f:41:dc:7c:72:fd:18:c1:98:d6:
6f:81:d5:b3:44:e3:c0:e6:e6:f1:02:6a:29:58:e9:3a:28:d3:
40:b0:fe:07:59:f2:eb:8c:14:29:49:c1:43:14:ea:6d:c5:ab:
2d:56:3e:be:24:0d:c6:12:bf:4c:1d:62:c9:00:61:b0:74:52:
7e:7f:23:17:81:97:44:59:3f:04:30:d2:ae:17:87:69:24:8b:
af:b8:75:ef:76:c3:f0:75:1a:69:75:1e:5e:49:6f:f3:b1:52:
47:e4:9d:ad:a0:bd:be:3c:05:ea:37:6e:88:01:56:14:03:a2:
a9:dd:f1:f2:81:31:5c:8a:1d:c9:f4:0d:e4:8f:16:e0:55:76:
70:95:ec:37:51:5c:74:59:75:fc:5e:0b:8e:1e:45:d6:8d:f6:
38:8b:62:5a:1a:a7:42:f5:a9:d5:7f:6b:2c:f2:ff:a0:6c:ec:
ac:be:4d:06:8a:05:84:99:be:ea:95:33:26:04:1f:14:bf:c2:
be:21:9e:6f:f1:e7:2e:a3:55:58:bc:cc:67:80:63:c8:2f:0a:
e9:bc:00:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 14:27:00 2026 by rpki-client