Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/TJCXtcNQHbcpm26ywvTJgyF4t7c.roa
File: TJCXtcNQHbcpm26ywvTJgyF4t7c.roa (raw, json)
Hash identifier: Anw9nCC0dCNtJrk9wWN7XS4c1TkpZ/+wtFBY2ICI1TU=
Subject key identifier: 4C:90:97:B5:C3:50:1D:B7:29:9B:6E:B2:C2:F4:C9:83:21:78:B7:B7
Certificate issuer: /CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Certificate serial: 01A13576F65C334C5E1AF6F473FCD07C69E9
Authority key identifier: BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/TJCXtcNQHbcpm26ywvTJgyF4t7c.roa
Signing time: Tue 13 Oct 2026 13:32:31 +0000
ROA not before: Tue 13 Oct 2026 13:32:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48539
IP address blocks: 2.152.78.0/24 maxlen: 24
45.85.120.0/24 maxlen: 24
45.85.122.0/24 maxlen: 24
45.85.123.0/24 maxlen: 24
86.105.204.0/24 maxlen: 24
86.105.205.0/24 maxlen: 24
87.192.81.0/24 maxlen: 24
109.205.189.0/24 maxlen: 24
146.19.131.0/24 maxlen: 24
178.17.247.0/24 maxlen: 24
178.212.137.0/24 maxlen: 24
193.246.161.0/24 maxlen: 24
194.63.144.0/24 maxlen: 24
194.147.218.0/24 maxlen: 24
194.238.77.0/24 maxlen: 24
213.218.163.0/24 maxlen: 24
213.239.152.0/24 maxlen: 24
213.239.153.0/24 maxlen: 24
217.180.23.0/24 maxlen: 24
2a11:6a00::/48 maxlen: 48
2a12:2780::/48 maxlen: 48
2a12:8200::/48 maxlen: 48
2a12:ab00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:76:f6:5c:33:4c:5e:1a:f6:f4:73:fc:d0:7c:69:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Validity
Not Before: Oct 13 13:32:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c9097b5c3501db7299b6eb2c2f4c9832178b7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2b:4d:3a:9c:99:68:55:8f:50:e7:60:e1:02:
4e:2b:ed:c5:30:40:c0:df:d0:6b:f6:71:bc:cc:de:
5b:c6:e3:9e:f0:be:e3:ab:6d:22:51:b3:23:8b:8b:
f4:c1:90:38:5f:58:d8:26:f1:7d:c7:b9:9b:58:43:
8e:6f:19:05:7e:53:a4:c8:d3:3c:c8:48:8b:71:82:
4c:a3:64:ea:23:08:c0:5a:33:b4:e5:20:8c:df:2b:
99:5c:b4:b0:23:05:6b:c6:9e:e2:42:ae:e1:08:bb:
5d:86:42:58:4a:3c:b5:59:fe:9a:b0:ff:55:57:41:
34:79:df:ec:6d:b5:25:19:8e:b7:1c:f5:81:96:2e:
5c:85:48:a3:e4:eb:4c:0c:9e:4d:87:b3:6a:36:50:
e7:b3:02:85:ca:82:59:2e:0f:54:cb:9a:8a:6c:5b:
0a:ee:36:0c:de:94:bd:ba:d1:bf:f0:15:3d:fc:50:
55:69:77:fd:86:b6:fa:01:28:1c:0a:7f:5d:96:2b:
40:e6:be:5c:b6:ed:a9:15:69:b2:ee:eb:cb:9c:38:
6b:dc:83:5f:5d:e9:ef:9d:6a:67:ac:25:7b:5f:a6:
4f:22:cf:c5:e9:0f:8e:0d:a3:2b:8f:14:d2:a7:5f:
ab:d8:32:9b:eb:4d:17:8c:d2:a9:1c:84:58:ac:b5:
aa:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:90:97:B5:C3:50:1D:B7:29:9B:6E:B2:C2:F4:C9:83:21:78:B7:B7
X509v3 Authority Key Identifier:
keyid:BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/TJCXtcNQHbcpm26ywvTJgyF4t7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.152.78.0/24
45.85.120.0/24
45.85.122.0/23
86.105.204.0/23
87.192.81.0/24
109.205.189.0/24
146.19.131.0/24
178.17.247.0/24
178.212.137.0/24
193.246.161.0/24
194.63.144.0/24
194.147.218.0/24
194.238.77.0/24
213.218.163.0/24
213.239.152.0/23
217.180.23.0/24
IPv6:
2a11:6a00::/48
2a12:2780::/48
2a12:8200::/48
2a12:ab00::/48
Signature Algorithm: sha256WithRSAEncryption
21:18:05:58:d3:4e:32:3f:cd:73:85:5e:d3:97:2c:f4:ed:37:
de:d7:8a:2d:0b:cb:66:8f:be:e1:ae:70:f9:9f:80:aa:7a:20:
b8:a2:36:d3:f9:b1:d7:1d:03:4a:02:74:8a:e9:af:d3:0e:2a:
47:7b:fe:dc:d4:2e:ca:70:20:f2:03:4a:10:a6:50:06:f9:10:
9a:8d:fc:b3:75:5c:47:d4:04:05:17:48:d2:d5:f1:46:b0:3c:
ab:b9:4b:fe:5a:95:07:12:1c:04:e7:33:64:ea:91:a2:21:62:
ed:41:2a:86:8f:e3:79:33:3c:90:17:23:dd:77:3e:b7:c4:8b:
66:19:e3:71:d7:9d:bd:1e:ba:19:78:e8:2c:c5:3f:19:4e:62:
d0:5c:ec:bc:c7:1f:44:69:10:4c:ee:b0:4e:22:f7:1e:e8:30:
cc:be:69:b1:ed:6d:69:06:89:e4:42:19:b0:a2:7e:e1:1c:18:
a4:4a:bf:bf:44:5f:0b:40:a2:39:02:72:0b:e5:41:cf:ca:a9:
62:69:55:17:aa:f0:1e:6a:be:b2:95:cf:dc:b1:18:bd:09:9e:
14:e5:63:2e:a9:cc:86:ef:65:7b:47:06:cd:cc:2b:d5:62:ca:
64:20:0c:90:92:5c:8f:3f:1e:54:af:0a:55:63:6d:e9:51:5f:
c5:ed:ec:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:12:39 2026 by rpki-client