Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/trlVrj1DlCQi34i2gQc72UxSipI.roa
File: trlVrj1DlCQi34i2gQc72UxSipI.roa (raw, json)
Hash identifier: kAh7roAD/aEUj5kJuPpmfUsPtTy/SW7tHdz6vE5dAKo=
Subject key identifier: B6:B9:55:AE:3D:43:94:24:22:DF:88:B6:81:07:3B:D9:4C:52:8A:92
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019F91DAD71A8DA2AAA69644E1578129E632
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/trlVrj1DlCQi34i2gQc72UxSipI.roa
Signing time: Fri 24 Jul 2026 02:01:06 +0000
ROA not before: Fri 24 Jul 2026 02:01:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62240
IP address blocks: 45.150.181.0/24 maxlen: 24
45.150.182.0/24 maxlen: 24
45.150.183.0/24 maxlen: 24
84.51.232.0/24 maxlen: 24
92.51.234.0/24 maxlen: 24
92.51.235.0/24 maxlen: 24
92.51.255.0/24 maxlen: 24
103.210.196.0/24 maxlen: 24
107.150.166.0/24 maxlen: 24
147.90.119.0/24 maxlen: 24
155.2.180.0/24 maxlen: 24
155.2.181.0/24 maxlen: 24
158.173.208.0/24 maxlen: 24
185.161.111.0/24 maxlen: 24
192.140.220.0/24 maxlen: 24
192.140.221.0/24 maxlen: 24
203.188.165.0/24 maxlen: 24
203.188.181.0/24 maxlen: 24
213.254.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:d7:1a:8d:a2:aa:a6:96:44:e1:57:81:29:e6:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jul 24 02:01:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b6b955ae3d43942422df88b681073bd94c528a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0a:01:fa:b0:bf:54:d1:de:50:c3:f9:f4:51:
59:14:c6:c8:40:10:70:cf:aa:e9:19:e0:e9:1d:cd:
d4:89:4a:7c:7d:39:63:9a:5d:70:7e:b2:35:52:c7:
45:f3:5d:70:14:9c:6c:18:eb:e8:ea:6e:79:b5:5d:
bf:50:6c:4e:b7:29:39:c7:a3:a6:94:1e:be:ae:ba:
0a:02:2c:3b:52:dc:5f:73:9b:93:75:83:da:a2:ca:
fe:48:76:b8:57:65:9b:12:54:95:ac:fa:97:5b:ab:
ac:23:75:91:43:7d:49:60:d8:bb:99:42:e2:6a:4a:
df:17:ae:a8:22:69:e9:9a:b4:46:8a:0b:d3:51:ca:
a3:8e:47:3e:36:40:cc:b3:0e:e1:6c:f1:80:72:b3:
d0:53:0f:8a:30:02:ad:be:b0:45:67:50:af:58:62:
cd:5b:45:ed:4f:36:bd:48:15:ca:74:b9:91:8f:90:
fc:79:3a:d9:17:78:c3:46:1c:4b:c0:35:aa:4e:72:
de:0c:02:de:64:95:9d:6c:fc:f0:ce:fe:87:dd:73:
8c:42:92:5c:07:15:db:4d:92:23:93:4c:3e:39:a0:
d6:27:cd:97:2e:f6:a1:a2:00:5d:db:f5:1e:a2:da:
3c:d1:35:c0:6a:f1:c6:e2:cd:b2:2b:2b:4b:ea:6d:
00:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B9:55:AE:3D:43:94:24:22:DF:88:B6:81:07:3B:D9:4C:52:8A:92
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/trlVrj1DlCQi34i2gQc72UxSipI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.181.0-45.150.183.255
84.51.232.0/24
92.51.234.0/23
92.51.255.0/24
103.210.196.0/24
107.150.166.0/24
147.90.119.0/24
155.2.180.0/23
158.173.208.0/24
185.161.111.0/24
192.140.220.0/23
203.188.165.0/24
203.188.181.0/24
213.254.160.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:63:4a:9d:18:a3:b7:a4:49:e6:ef:3e:3a:5f:cf:79:40:91:
42:f2:f3:81:78:33:66:3d:e2:dd:68:3e:4c:b3:b9:fb:2f:8f:
52:97:4e:48:71:dd:bc:bf:2b:48:7a:98:05:6e:95:9c:63:95:
92:3d:89:59:54:29:9f:45:20:77:71:a5:56:97:78:bb:c7:af:
90:c7:5b:00:8d:9f:e9:9d:fe:35:83:5b:f4:0b:f4:f4:43:da:
24:8b:a5:cf:fe:ce:90:74:8b:fa:e9:00:2e:3d:9e:d7:34:60:
6c:19:2a:24:6b:47:e1:73:4b:1b:68:56:20:48:99:49:e1:d3:
f6:b0:14:9e:dd:9e:b1:62:ce:ff:b3:70:43:c6:8e:1f:3d:0e:
1c:04:31:d1:ed:3f:ba:11:bd:3e:f6:7a:84:cf:85:73:c4:7e:
06:0c:18:b8:cc:5e:b8:3d:a9:30:c4:4d:50:cd:1c:29:e1:dc:
ef:09:e5:68:f2:0f:99:21:33:8f:8e:09:5b:68:bc:12:42:09:
e9:4d:5d:64:6a:2c:d7:0b:8b:f2:93:35:fa:82:e3:97:7b:91:
f4:51:82:d3:fb:cd:e3:48:a9:01:08:36:77:dd:39:18:f7:2b:
b5:88:ce:43:3e:c2:6c:c9:a3:80:7f:62:ca:1d:88:f4:d5:a6:
7e:ae:7d:4e
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgISAZ+R2tcajaKqppZE4VeBKeYyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5
NTkyZGEwHhcNMjYwNzI0MDIwMTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNmI5NTVhZTNkNDM5NDI0MjJkZjg4YjY4MTA3M2JkOTRjNTI4YTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygoB+rC/VNHeUMP59FFZFMbIQBBw
z6rpGeDpHc3UiUp8fTljml1wfrI1UsdF811wFJxsGOvo6m55tV2/UGxOtyk5x6Om
lB6+rroKAiw7Utxfc5uTdYPaosr+SHa4V2WbElSVrPqXW6usI3WRQ31JYNi7mULi
akrfF66oImnpmrRGigvTUcqjjkc+NkDMsw7hbPGAcrPQUw+KMAKtvrBFZ1CvWGLN
W0XtTza9SBXKdLmRj5D8eTrZF3jDRhxLwDWqTnLeDALeZJWdbPzwzv6H3XOMQpJc
BxXbTZIjk0w+OaDWJ82XLvahogBd2/Ueoto80TXAavHG4s2yKytL6m0ApQIDAQAB
o4ICXzCCAlswHQYDVR0OBBYEFLa5Va49Q5QkIt+ItoEHO9lMUoqSMB8GA1UdIwQY
MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt
ZjVmYjcxYjlhNTFmLzEvdHJsVnJqMURsQ1FpMzRpMmdRYzcyVXhTaXBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm
LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHUGCCsGAQUFBwEHAQH/BGYwZDBiBAIAATBcMAwDBAAtlrUD
BAMtlrADBABUM+gDBAFcM+oDBABcM/8DBABn0sQDBABrlqYDBACTWncDBAGbArQD
BACerdADBAC5oW8DBAHAjNwDBADLvKUDBADLvLUDBADV/qAwDQYJKoZIhvcNAQEL
BQADggEBAJ1jSp0Yo7ekSebvPjpfz3lAkULy84F4M2Y94t1oPkyzufsvj1KXTkhx
3by/K0h6mAVulZxjlZI9iVlUKZ9FIHdxpVaXeLvHr5DHWwCNn+md/jWDW/QL9PRD
2iSLpc/+zpB0i/rpAC49ntc0YGwZKiRrR+FzSxtoViBImUnh0/awFJ7dnrFizv+z
cEPGjh89DhwEMdHtP7oRvT72eoTPhXPEfgYMGLjMXrg9qTDETVDNHCnh3O8J5Wjy
D5khM4+OCVtovBJCCelNXWRqLNcLi/KTNfqC45d7kfRRgtP7zeNIqQEINnfdORj3
K7WIzkM+wmzJo4B/YsodiPTVpn6ufU4=
-----END CERTIFICATE-----
Generated at Sat Jul 25 00:19:44 2026 by rpki-client