Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/TlCV5L0nE-VPhIegQRiwRluGgLk.roa
File: TlCV5L0nE-VPhIegQRiwRluGgLk.roa (raw, json)
Hash identifier: jMAZRpPDwzj56pvl8a8N2UQUlaW6TZ69qetR0WBKXtw=
Subject key identifier: 4E:50:95:E4:BD:27:13:E5:4F:84:87:A0:41:18:B0:46:5B:86:80:B9
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01A0FD04942B722447BD49720F33B8AF0762
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/TlCV5L0nE-VPhIegQRiwRluGgLk.roa
Signing time: Fri 02 Oct 2026 14:28:50 +0000
ROA not before: Fri 02 Oct 2026 14:28:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13886
IP address blocks: 45.43.165.0/24 maxlen: 24
64.137.51.0/24 maxlen: 24
104.167.3.0/24 maxlen: 24
104.167.4.0/24 maxlen: 24
104.167.5.0/24 maxlen: 24
104.167.6.0/24 maxlen: 24
104.167.8.0/24 maxlen: 24
104.167.9.0/24 maxlen: 24
104.167.11.0/24 maxlen: 24
104.167.12.0/24 maxlen: 24
104.167.14.0/24 maxlen: 24
104.167.15.0/24 maxlen: 24
104.233.48.0/21 maxlen: 21
104.238.29.0/24 maxlen: 24
104.239.15.0/24 maxlen: 24
104.239.112.0/21 maxlen: 21
104.249.0.0/21 maxlen: 21
138.128.144.0/24 maxlen: 24
138.128.146.0/24 maxlen: 24
138.128.147.0/24 maxlen: 24
138.128.150.0/24 maxlen: 24
204.52.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fd:04:94:2b:72:24:47:bd:49:72:0f:33:b8:af:07:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Oct 2 14:28:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e5095e4bd2713e54f8487a04118b0465b8680b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:79:80:07:9b:3e:cc:53:fb:a0:15:1f:2c:4b:
11:76:33:91:3f:30:b6:91:c0:2e:85:36:b3:a4:23:
d0:51:97:30:92:2a:2f:d4:95:97:e3:f7:36:12:c4:
92:1d:49:19:af:47:5d:d3:30:50:d2:8d:6a:07:d8:
70:51:be:65:9c:08:9b:ba:75:80:b5:ca:fc:f7:1d:
34:d0:33:de:01:15:30:1e:f8:e5:4a:1f:46:51:9f:
fb:e7:46:c6:c6:05:13:fd:da:09:04:05:7e:c6:22:
f3:1c:f1:99:2a:c5:59:d8:0b:e4:38:b4:e4:ce:83:
45:6f:73:33:99:78:ca:97:fc:51:e8:11:eb:cc:12:
52:28:30:f8:82:2b:9e:fc:17:17:3b:57:35:e9:51:
4a:52:bb:ba:c1:e6:9e:b5:2d:95:56:cd:92:d6:91:
0d:d6:41:42:5e:02:18:44:09:16:82:7c:01:fe:c9:
9d:41:13:25:61:58:f0:3a:f4:e0:ea:7f:d3:c6:19:
33:5d:f0:9d:d1:67:29:37:44:de:9a:f1:cc:b9:cf:
41:80:2c:e4:5c:e8:d0:99:c4:f8:9c:87:5c:c2:66:
bd:35:e4:88:2d:b8:16:36:07:0b:d3:29:a3:f3:0c:
3b:8b:f6:bc:ca:73:89:4d:e1:5a:87:91:77:e8:26:
78:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:50:95:E4:BD:27:13:E5:4F:84:87:A0:41:18:B0:46:5B:86:80:B9
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/TlCV5L0nE-VPhIegQRiwRluGgLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.165.0/24
64.137.51.0/24
104.167.3.0-104.167.6.255
104.167.8.0/23
104.167.11.0-104.167.12.255
104.167.14.0/23
104.233.48.0/21
104.238.29.0/24
104.239.15.0/24
104.239.112.0/21
104.249.0.0/21
138.128.144.0/24
138.128.146.0/23
138.128.150.0/24
204.52.112.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:f6:a4:b8:03:39:ec:e1:8e:0a:a1:b7:26:54:7a:a2:f6:9e:
cc:6c:f3:46:c8:31:b1:c0:5d:dc:18:59:84:2c:de:c8:fe:d2:
0b:84:9d:22:35:e3:b9:7e:8b:15:2b:6c:e6:4b:b7:7d:b3:c4:
10:36:af:ca:26:28:2e:f2:81:6e:88:05:5d:e0:e1:3c:3c:3b:
8e:ea:91:ed:f6:56:77:ad:e1:23:05:9d:02:38:a3:70:bd:a7:
02:34:f2:b5:9f:b6:a0:e8:80:24:2a:a7:b1:32:50:8b:ba:7e:
5e:72:f5:c4:f7:32:a8:d1:ff:10:93:0e:21:6e:11:47:09:87:
b4:30:56:d2:9c:cd:cf:4d:f4:b8:52:b1:0b:3e:62:b2:a2:41:
d8:17:2c:09:af:fe:c4:96:ed:bf:c7:69:2b:98:85:44:f1:cf:
e9:d2:d6:13:96:89:70:b5:71:6b:80:c2:c4:08:26:d8:fa:41:
47:78:3c:a6:71:53:51:81:62:cd:a8:ff:b4:c1:e7:ca:d7:ab:
ef:cc:91:df:f7:a4:a8:c1:3b:5d:23:07:b5:74:b9:a9:16:94:
83:cf:80:eb:89:32:57:bd:b7:d9:0c:06:f3:b7:4a:b7:af:f1:
8c:a0:00:23:7a:f8:d1:b6:a9:4b:b0:1a:32:09:df:8a:0f:7a:
ed:75:2e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:05:18 2026 by rpki-client