Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/TuUCDjuraej4tppbAAalxQCwnbY.roa
File: TuUCDjuraej4tppbAAalxQCwnbY.roa (raw, json)
Hash identifier: p31dAUCNx2jCRKMye9K1lVnXJ5kByLYXfMVnqvTvS/U=
Subject key identifier: 4E:E5:02:0E:3B:AB:69:E8:F8:B6:9A:5B:00:06:A5:C5:00:B0:9D:B6
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368BD146F1AA4E03F9CB48986430776
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/TuUCDjuraej4tppbAAalxQCwnbY.roa
Signing time: Thu 02 Jul 2026 15:18:14 +0000
ROA not before: Thu 02 Jul 2026 15:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50113
IP address blocks: 5.180.136.0/24 maxlen: 24
5.180.137.0/24 maxlen: 24
5.252.116.0/24 maxlen: 24
45.89.64.0/24 maxlen: 24
91.217.77.0/24 maxlen: 24
185.104.248.0/24 maxlen: 24
185.174.139.0/24 maxlen: 24
185.180.230.0/24 maxlen: 24
185.188.180.0/24 maxlen: 24
185.189.12.0/22 maxlen: 22
185.189.12.0/24 maxlen: 24
185.189.13.0/24 maxlen: 24
185.189.14.0/24 maxlen: 24
185.189.15.0/24 maxlen: 24
192.162.100.0/24 maxlen: 24
192.162.101.0/24 maxlen: 24
192.162.102.0/24 maxlen: 24
192.162.103.0/24 maxlen: 24
193.0.200.0/24 maxlen: 24
193.0.202.0/24 maxlen: 24
193.0.203.0/24 maxlen: 24
193.168.226.0/24 maxlen: 24
194.63.140.0/24 maxlen: 24
194.63.141.0/24 maxlen: 24
194.63.142.0/24 maxlen: 24
194.63.143.0/24 maxlen: 24
2a04:5200::/32 maxlen: 32
2a04:5200:1::/48 maxlen: 48
2a04:5200:3::/48 maxlen: 48
2a04:5200:4::/48 maxlen: 48
2a04:5200:7::/48 maxlen: 48
2a04:5200:9::/48 maxlen: 48
2a04:5200:a::/48 maxlen: 48
2a04:5200:50::/48 maxlen: 48
2a04:5200:121::/48 maxlen: 48
2a04:5200:20a::/48 maxlen: 48
2a04:5200:d21::/48 maxlen: 48
2a04:5200:fe6::/48 maxlen: 48
2a04:5200:3405::/48 maxlen: 48
2a04:5200:a050::/48 maxlen: 48
2a04:5200:ad09::/48 maxlen: 48
2a04:5200:c068::/48 maxlen: 48
2a04:5200:dc77::/64 maxlen: 64
2a04:5200:fa08::/48 maxlen: 48
2a04:5200:fb01::/48 maxlen: 48
2a04:5200:fb02::/48 maxlen: 48
2a04:5200:ff00::/48 maxlen: 48
2a04:5200:ff10::/48 maxlen: 48
2a04:5200:fff1::/48 maxlen: 48
2a04:5200:fff2::/48 maxlen: 48
2a04:5200:fff3::/48 maxlen: 48
2a04:5200:fff4::/48 maxlen: 48
2a04:5200:fff5::/48 maxlen: 48
2a04:5200:fff6::/48 maxlen: 48
2a04:5200:fff7::/48 maxlen: 48
2a04:5200:fff8::/48 maxlen: 48
2a04:5200:fff9::/48 maxlen: 48
2a04:5200:ffff::/48 maxlen: 48
2a04:5202::/32 maxlen: 32
2a04:5203::/32 maxlen: 32
2a04:5204::/32 maxlen: 32
2a04:5205::/32 maxlen: 32
2a04:5206::/32 maxlen: 32
2a04:5207::/32 maxlen: 32
2a0a:9300::/48 maxlen: 48
2a0a:9300:aaaa::/48 maxlen: 48
2a0c:aa40::/32 maxlen: 32
2a0c:aa41::/32 maxlen: 32
2a0c:aa42::/32 maxlen: 32
2a0c:aa43::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:bd:14:6f:1a:a4:e0:3f:9c:b4:89:86:43:07:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ee5020e3bab69e8f8b69a5b0006a5c500b09db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6c:2d:f1:1f:44:8b:37:5d:6f:ef:cf:ba:4c:
48:e3:94:78:b4:7a:e9:a1:77:0c:0f:49:c4:52:05:
07:04:30:aa:70:c4:40:b1:88:5e:ef:51:db:a7:b2:
c7:81:3a:ea:49:5a:16:a2:92:e9:35:14:f2:9f:4a:
e7:50:e6:de:ab:d2:9e:03:e7:17:aa:89:7c:aa:25:
3d:d0:9f:e6:18:89:b2:2d:20:ec:a4:58:ab:11:14:
56:17:5d:79:cc:44:b7:ba:4a:59:ff:96:a9:80:02:
4c:15:1a:e7:4c:de:88:ad:9d:bb:e5:9f:08:14:cd:
57:be:84:9a:f1:31:4b:7c:c1:17:da:ba:ff:6d:b3:
55:62:c7:cb:88:a0:32:64:85:1c:62:12:e2:f0:45:
d4:f9:f4:94:91:41:31:a3:ec:a2:d2:f1:d4:59:ce:
89:8c:e3:da:98:a4:0f:8d:0c:3e:5a:80:d7:1d:62:
a1:1f:f7:4d:85:94:a6:a7:ce:d6:78:0d:79:5b:6b:
04:73:4d:ba:a0:2c:bd:4c:4b:61:ec:bd:b2:b6:2f:
ec:78:41:14:e9:19:d5:61:e0:ad:a7:aa:4a:34:63:
63:38:4d:45:43:0b:7a:9c:24:23:0b:b2:f5:15:90:
c4:3d:92:31:25:21:8a:f6:14:dc:59:8f:8f:c2:54:
ea:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E5:02:0E:3B:AB:69:E8:F8:B6:9A:5B:00:06:A5:C5:00:B0:9D:B6
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/TuUCDjuraej4tppbAAalxQCwnbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.136.0/23
5.252.116.0/24
45.89.64.0/24
91.217.77.0/24
185.104.248.0/24
185.174.139.0/24
185.180.230.0/24
185.188.180.0/24
185.189.12.0/22
192.162.100.0/22
193.0.200.0/24
193.0.202.0/23
193.168.226.0/24
194.63.140.0/22
IPv6:
2a04:5200::/32
2a04:5202::-2a04:5207:ffff:ffff:ffff:ffff:ffff:ffff
2a0a:9300::/48
2a0a:9300:aaaa::/48
2a0c:aa40::/30
Signature Algorithm: sha256WithRSAEncryption
4c:58:24:ec:5c:20:87:73:51:7b:e1:c8:13:ea:4e:b2:88:10:
7e:75:f8:b6:5e:3d:33:c0:72:fc:29:d5:fb:12:f8:dd:76:53:
04:7f:e9:9c:90:2b:44:bd:99:46:4a:21:18:37:a6:90:a0:50:
b3:63:08:d3:87:22:e9:09:5f:17:70:b2:db:3b:13:b6:8a:f7:
dd:d6:c9:82:2d:68:aa:15:12:ab:bc:0a:1b:c2:13:f1:9e:2a:
49:6d:02:76:ef:fa:8a:9e:7c:b2:71:10:a0:a2:e0:18:a7:bf:
3c:8c:df:bb:36:e8:11:fb:98:ef:d8:0f:da:01:7d:95:00:08:
c0:3e:c0:2e:6e:d8:d9:f5:c3:e2:bc:62:80:ec:19:1f:ba:f7:
f6:cd:7e:c0:39:51:35:f1:26:31:90:75:e2:2c:09:3c:c7:19:
5a:6c:c2:9e:75:e7:dc:e8:a3:c7:e1:43:b5:e2:9e:93:a9:30:
1a:a3:ea:ff:a2:d0:4f:b9:c3:c9:29:84:06:e2:c3:27:fb:df:
59:67:56:0a:81:72:2a:a9:76:69:2e:48:fe:1b:88:ea:d6:a8:
dd:5f:73:28:65:7d:2a:ce:23:f1:63:f2:37:1d:35:5d:9c:f9:
f4:f3:ed:16:1e:b7:fd:a8:41:84:69:59:ac:50:e1:2b:33:bd:
c4:77:be:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:54:53 2026 by rpki-client