Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/TETace1cNVdgTzeNw2XYl8EOQbA.roa
File: TETace1cNVdgTzeNw2XYl8EOQbA.roa (raw, json)
Hash identifier: 42epJ78Lw26hH7jMoyl3JlHDLOw/FIgCyY/cYPeGgL8=
Subject key identifier: 4C:44:DA:71:ED:5C:35:57:60:4F:37:8D:C3:65:D8:97:C1:0E:41:B0
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368D7A97D268ACE7A8AA6740EBAFAD5
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/TETace1cNVdgTzeNw2XYl8EOQbA.roa
Signing time: Thu 02 Jul 2026 15:18:21 +0000
ROA not before: Thu 02 Jul 2026 15:18:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209641
IP address blocks: 45.89.66.0/24 maxlen: 24
45.89.67.0/24 maxlen: 24
45.128.176.0/24 maxlen: 24
45.128.177.0/24 maxlen: 24
45.128.178.0/24 maxlen: 24
45.128.179.0/24 maxlen: 24
45.132.252.0/24 maxlen: 24
45.133.247.0/24 maxlen: 24
85.209.3.0/24 maxlen: 24
91.217.80.0/24 maxlen: 24
94.142.138.0/24 maxlen: 24
94.142.139.0/24 maxlen: 24
94.142.140.0/24 maxlen: 24
94.142.141.0/24 maxlen: 24
94.142.142.0/24 maxlen: 24
185.5.248.0/22 maxlen: 22
185.5.248.0/23 maxlen: 23
185.5.250.0/23 maxlen: 23
185.5.250.0/24 maxlen: 24
185.105.116.0/24 maxlen: 24
185.105.117.0/24 maxlen: 24
185.125.216.0/22 maxlen: 22
185.125.218.0/23 maxlen: 23
185.200.188.0/24 maxlen: 24
193.124.176.0/20 maxlen: 20
193.124.176.0/22 maxlen: 22
193.124.176.0/24 maxlen: 24
193.124.177.0/24 maxlen: 24
193.124.178.0/24 maxlen: 24
193.124.179.0/24 maxlen: 24
193.124.184.0/21 maxlen: 21
193.124.184.0/24 maxlen: 24
193.124.191.0/24 maxlen: 24
193.168.224.0/24 maxlen: 24
194.67.196.0/22 maxlen: 22
194.67.202.0/24 maxlen: 24
194.67.203.0/24 maxlen: 24
194.67.204.0/22 maxlen: 22
194.67.208.0/20 maxlen: 20
195.47.250.0/24 maxlen: 24
2a04:5203::/32 maxlen: 32
2a04:5204::/32 maxlen: 32
2a04:5205::/32 maxlen: 32
2a04:5206::/32 maxlen: 32
2a0a:9300:2::/48 maxlen: 48
2a0a:9300:d0::/48 maxlen: 48
2a0a:9300:d1::/48 maxlen: 48
2a0a:9300:d2::/48 maxlen: 48
2a0a:9302:1::/48 maxlen: 48
2a0a:9303::/32 maxlen: 32
2a0a:9304::/32 maxlen: 32
2a0a:9305::/32 maxlen: 32
2a0a:9306::/32 maxlen: 32
2a0a:9307::/32 maxlen: 32
2a0d:2dc0::/32 maxlen: 32
2a0d:2dc1::/32 maxlen: 32
2a0d:2dc2::/32 maxlen: 32
2a0d:2dc3::/32 maxlen: 32
2a0e:d603::/32 maxlen: 32
2a0f:7b82::/32 maxlen: 32
2a0f:7b83::/32 maxlen: 32
2a0f:7b84::/32 maxlen: 32
2a0f:7b85::/32 maxlen: 32
2a0f:7b86::/32 maxlen: 32
2a0f:7b87::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d7:a9:7d:26:8a:ce:7a:8a:a6:74:0e:ba:fa:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c44da71ed5c3557604f378dc365d897c10e41b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d8:03:d8:b3:e8:53:87:82:90:f7:0e:dd:21:
71:4e:9b:95:82:5c:27:26:28:4a:a2:6a:bc:b6:ca:
eb:da:e3:45:89:2c:0a:cb:c6:45:2f:ed:c3:c1:79:
6c:54:d2:44:10:cc:3d:15:46:a1:16:79:56:6d:f9:
20:57:f3:7e:6b:87:64:13:02:48:fc:a7:de:2e:ab:
6d:fb:4b:81:64:e7:37:19:95:64:13:18:c9:49:25:
22:f4:d3:cc:cc:d4:92:79:14:6a:2f:87:c8:9f:4b:
84:ed:10:3d:28:5a:3f:96:04:68:90:5a:36:2b:ef:
87:42:e7:50:06:c8:72:2f:78:22:38:70:49:9e:cf:
44:df:ff:4b:b8:46:12:6d:51:13:81:48:d0:31:61:
52:18:f4:b8:ff:90:d9:03:9e:6b:65:0e:ec:be:0f:
d3:e6:c4:fc:3d:9a:09:d4:7e:c1:02:a0:db:f5:94:
42:88:ce:a2:f7:27:0e:06:94:01:d6:bf:3f:4b:71:
05:c5:26:e6:e8:f9:f8:20:f3:23:3f:d6:51:d7:66:
6d:22:31:f7:2c:84:30:0c:28:9b:d3:c9:cd:f4:3f:
c3:d6:ea:38:da:39:b9:69:98:87:e1:90:7f:a2:59:
30:53:2f:37:28:c0:69:19:20:22:64:e4:82:c8:54:
98:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:44:DA:71:ED:5C:35:57:60:4F:37:8D:C3:65:D8:97:C1:0E:41:B0
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/TETace1cNVdgTzeNw2XYl8EOQbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.66.0/23
45.128.176.0/22
45.132.252.0/24
45.133.247.0/24
85.209.3.0/24
91.217.80.0/24
94.142.138.0-94.142.142.255
185.5.248.0/22
185.105.116.0/23
185.125.216.0/22
185.200.188.0/24
193.124.176.0/20
193.168.224.0/24
194.67.196.0/22
194.67.202.0-194.67.223.255
195.47.250.0/24
IPv6:
2a04:5203::-2a04:5206:ffff:ffff:ffff:ffff:ffff:ffff
2a0a:9300:2::/48
2a0a:9300:d0::-2a0a:9300:d2:ffff:ffff:ffff:ffff:ffff
2a0a:9302:1::/48
2a0a:9303::-2a0a:9307:ffff:ffff:ffff:ffff:ffff:ffff
2a0d:2dc0::/30
2a0e:d603::/32
2a0f:7b82::-2a0f:7b87:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
96:8f:58:ba:3c:7c:96:f4:23:78:cd:46:9c:6c:98:ab:62:cd:
c4:07:b0:fe:02:83:5d:de:21:d7:5f:13:a9:ac:9c:33:1c:f6:
77:40:ac:fb:b9:38:b8:bb:72:a1:96:34:2b:8b:b9:58:38:4a:
d4:b7:04:b1:6e:16:ca:1e:99:1a:a0:79:d7:1b:59:f7:14:ae:
78:c4:8b:ba:17:d8:31:fd:dd:05:d6:c0:a0:a5:e4:2c:fa:25:
fc:7b:d8:f2:c7:ac:4c:b0:85:a2:42:9a:d9:a3:bb:22:a1:5c:
8b:65:79:83:29:be:0a:8e:91:24:bd:a6:a4:8d:ac:1c:69:a6:
1e:ee:d6:31:77:2c:97:93:d9:8e:3d:b8:46:d2:7f:54:17:14:
8d:18:58:d7:26:68:a4:20:e8:54:04:37:60:fa:da:e0:91:5a:
bf:bd:b0:8a:24:27:62:ed:5b:ed:af:e4:0b:87:3c:7b:3f:98:
bc:23:a4:d2:75:02:ab:53:2f:81:c2:c0:df:28:09:54:1f:e4:
9e:85:39:12:a4:2f:ff:c4:26:01:8d:d6:12:a4:0c:03:84:f5:
6f:b6:55:48:24:34:96:50:5b:9c:f4:80:d3:5c:19:af:ca:aa:
a1:86:c7:58:49:4c:fc:44:f6:73:8a:55:d4:e9:eb:eb:78:f9:
4e:3e:bf:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:55:39 2026 by rpki-client