Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/tEyInJDOacbK6EmGN5_UjB36hSM.roa
File: tEyInJDOacbK6EmGN5_UjB36hSM.roa (raw, json)
Hash identifier: Brx/LHxXHyihOiS7ZJHPUbKExTDPA4EDRA7rrTYIERM=
Subject key identifier: B4:4C:88:9C:90:CE:69:C6:CA:E8:49:86:37:9F:D4:8C:1D:FA:85:23
Certificate issuer: /CN=e30f8894f308172ace92fbe6052eec23853eadad
Certificate serial: 019F55474C13629EE31933F2520FF849E2D6
Authority key identifier: E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/tEyInJDOacbK6EmGN5_UjB36hSM.roa
Signing time: Sun 12 Jul 2026 07:42:43 +0000
ROA not before: Sun 12 Jul 2026 07:42:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3920
IP address blocks: 84.247.19.0/24 maxlen: 24
185.209.15.0/24 maxlen: 24
2a13:adc0::/48 maxlen: 48
2a13:adc0:1::/48 maxlen: 48
2a13:adc0:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:55:47:4c:13:62:9e:e3:19:33:f2:52:0f:f8:49:e2:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30f8894f308172ace92fbe6052eec23853eadad
Validity
Not Before: Jul 12 07:42:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b44c889c90ce69c6cae84986379fd48c1dfa8523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:82:47:db:01:2d:3a:e3:a3:91:dd:3a:8a:df:
a6:40:98:50:7a:3a:de:69:cd:15:08:01:39:44:3a:
71:84:2b:7d:0b:78:0a:9f:06:be:d3:4e:89:f0:84:
c6:e5:8f:72:5a:70:64:c0:f2:a6:43:87:a3:83:3e:
39:e2:30:0b:9f:84:39:db:17:ba:d9:03:37:09:86:
20:33:ac:88:08:c0:b8:6f:26:c4:1c:e7:a1:ed:29:
c5:db:93:d8:b1:9e:e1:74:61:a0:6a:75:bd:4f:6e:
89:8a:70:76:9a:38:61:60:33:7e:33:4d:9d:41:90:
90:d2:18:c0:49:e1:e5:a8:cf:f8:0b:12:83:64:cc:
8c:9b:42:6a:0e:a5:90:06:d4:ab:9b:70:5b:9c:85:
cc:b2:71:b5:27:83:7a:4c:5b:00:a4:f8:b4:4a:4b:
28:24:83:e2:54:bf:ef:bd:9f:1a:54:8a:4d:c6:08:
86:e9:8e:11:ec:57:aa:65:c2:fa:89:80:c1:2b:7a:
16:a8:eb:96:b1:20:60:ef:75:cb:bf:ff:cc:76:89:
64:48:b6:04:e5:e5:0c:d4:20:7e:b1:87:9c:e8:01:
f9:52:bf:21:37:ea:63:72:1d:0e:00:18:2f:8a:92:
67:2f:9c:1c:23:0d:2c:68:df:dd:f3:11:8c:41:48:
f9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:4C:88:9C:90:CE:69:C6:CA:E8:49:86:37:9F:D4:8C:1D:FA:85:23
X509v3 Authority Key Identifier:
keyid:E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/tEyInJDOacbK6EmGN5_UjB36hSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.19.0/24
185.209.15.0/24
IPv6:
2a13:adc0::-2a13:adc0:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
08:61:a1:6f:83:61:6c:80:da:de:a9:17:45:68:16:a6:ab:28:
ff:66:34:d0:5e:dd:7f:8b:3a:4d:c5:18:43:2f:74:b4:fe:83:
3a:fe:16:7b:5c:76:5f:01:3e:b4:de:3a:78:8f:c8:a4:39:0c:
35:60:81:86:50:44:54:91:24:b5:df:5f:94:13:cc:4d:d4:6d:
27:d7:de:73:a6:37:ed:70:78:bc:88:87:6d:2b:34:0c:21:01:
cf:fc:b2:15:a6:f9:f2:d2:5d:c0:a3:82:81:7d:a5:5d:2a:f8:
1c:cf:18:5d:a5:2b:6b:77:02:b9:04:7f:b6:d4:b3:84:6c:18:
74:a3:59:4c:d9:01:ee:d5:51:96:6e:46:6f:3a:98:a3:3f:45:
dc:91:bd:4f:38:60:2e:e6:dc:71:27:86:b0:1c:3b:fa:e5:da:
7f:7a:f6:9e:60:0e:49:28:27:bc:1d:24:89:f6:60:f2:a0:f7:
3e:9d:ff:40:35:73:be:fd:7b:bd:b9:98:56:d0:f4:e2:0f:0f:
48:a9:2f:da:d4:e7:94:f7:c7:96:98:33:6b:c6:39:5c:24:27:
8c:ca:56:cd:82:29:44:09:d7:0e:e4:46:b9:14:3a:de:b9:7b:
5a:4f:23:44:95:c5:bf:01:d5:5c:6d:92:f9:e1:4b:01:c3:11:
0e:46:58:c8
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZ9VR0wTYp7jGTPyUg/4SeLWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMGY4ODk0ZjMwODE3MmFjZTkyZmJlNjA1MmVlYzIzODUz
ZWFkYWQwHhcNMjYwNzEyMDc0MjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDRjODg5YzkwY2U2OWM2Y2FlODQ5ODYzNzlmZDQ4YzFkZmE4NTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IJH2wEtOuOjkd06it+mQJhQejre
ac0VCAE5RDpxhCt9C3gKnwa+006J8ITG5Y9yWnBkwPKmQ4ejgz454jALn4Q52xe6
2QM3CYYgM6yICMC4bybEHOeh7SnF25PYsZ7hdGGganW9T26JinB2mjhhYDN+M02d
QZCQ0hjASeHlqM/4CxKDZMyMm0JqDqWQBtSrm3BbnIXMsnG1J4N6TFsApPi0Skso
JIPiVL/vvZ8aVIpNxgiG6Y4R7FeqZcL6iYDBK3oWqOuWsSBg73XLv//MdolkSLYE
5eUM1CB+sYec6AH5Ur8hN+pjch0OABgvipJnL5wcIw0saN/d8xGMQUj5rwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFLRMiJyQzmnGyuhJhjef1Iwd+oUjMB8GA1UdIwQY
MBaAFOMPiJTzCBcqzpL75gUu7COFPq2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHctSWxQTUlGeXJPa3Z2bUJTN3NJNFUtcmEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81ODc0NjAtZWFiNy00MGQ5LWE1MTIt
M2U2NjBkMDI1MmRiLzEvdEV5SW5KRE9hY2JLNkVtR041X1VqQjM2aFNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS81ODc0NjAtZWFiNy00MGQ5LWE1MTItM2U2NjBkMDI1MmRi
LzEvNHctSWxQTUlGeXJPa3Z2bUJTN3NJNFUtcmEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQAVPcTAwQA
udEPMBgEAgACMBIwEAMFBioTrcADBwAqE63AAAIwDQYJKoZIhvcNAQELBQADggEB
AAhhoW+DYWyA2t6pF0VoFqarKP9mNNBe3X+LOk3FGEMvdLT+gzr+Fntcdl8BPrTe
OniPyKQ5DDVggYZQRFSRJLXfX5QTzE3UbSfX3nOmN+1weLyIh20rNAwhAc/8shWm
+fLSXcCjgoF9pV0q+BzPGF2lK2t3ArkEf7bUs4RsGHSjWUzZAe7VUZZuRm86mKM/
RdyRvU84YC7m3HEnhrAcO/rl2n969p5gDkkoJ7wdJIn2YPKg9z6d/0A1c779e725
mFbQ9OIPD0ipL9rU55T3x5aYM2vGOVwkJ4zKVs2CKUQJ1w7kRrkUOt65e1pPI0SV
xb8B1VxtkvnhSwHDEQ5GWMg=
-----END CERTIFICATE-----
Generated at Sat Jul 18 04:50:54 2026 by rpki-client