Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/td21Yc11qNz_shY0rX7mbJkWo54.roa
File: td21Yc11qNz_shY0rX7mbJkWo54.roa (raw, json)
Hash identifier: uNenpOTQvtbiR4/cwcJTiKi3bJ8gEiXDiRRdfSBF/kg=
Subject key identifier: B5:DD:B5:61:CD:75:A8:DC:FF:B2:16:34:AD:7E:E6:6C:99:16:A3:9E
Certificate issuer: /CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8
Certificate serial: 01A0F690C912FB36EFBD1C6C844E9EBD406E
Authority key identifier: E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/td21Yc11qNz_shY0rX7mbJkWo54.roa
Signing time: Thu 01 Oct 2026 08:24:38 +0000
ROA not before: Thu 01 Oct 2026 08:24:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28924
IP address blocks: 195.90.98.0/24 maxlen: 24
195.90.99.0/24 maxlen: 24
195.90.114.0/23 maxlen: 23
195.90.114.0/24 maxlen: 24
212.52.160.0/19 maxlen: 19
212.52.160.0/22 maxlen: 22
212.52.160.0/24 maxlen: 24
212.52.161.0/24 maxlen: 24
212.52.162.0/24 maxlen: 24
212.52.163.0/24 maxlen: 24
212.52.164.0/24 maxlen: 24
212.52.165.0/24 maxlen: 24
212.52.166.0/24 maxlen: 24
212.52.167.0/24 maxlen: 24
212.52.168.0/22 maxlen: 22
212.52.168.0/24 maxlen: 24
212.52.169.0/24 maxlen: 24
212.52.170.0/24 maxlen: 24
212.52.171.0/24 maxlen: 24
212.52.172.0/24 maxlen: 24
212.52.173.0/24 maxlen: 24
212.52.174.0/24 maxlen: 24
212.52.175.0/24 maxlen: 24
212.52.176.0/24 maxlen: 24
212.52.177.0/24 maxlen: 24
212.52.178.0/24 maxlen: 24
212.52.179.0/24 maxlen: 24
212.52.180.0/24 maxlen: 24
212.52.181.0/24 maxlen: 24
212.52.182.0/24 maxlen: 24
212.52.183.0/24 maxlen: 24
212.52.184.0/24 maxlen: 24
212.52.185.0/24 maxlen: 24
212.52.186.0/24 maxlen: 24
212.52.187.0/24 maxlen: 24
212.52.188.0/24 maxlen: 24
212.52.189.0/24 maxlen: 24
212.52.190.0/23 maxlen: 23
212.52.190.0/24 maxlen: 24
212.52.191.0/24 maxlen: 24
2a01:7d80::/36 maxlen: 36
2a01:7d80:251::/48 maxlen: 48
2a01:7d80:252::/48 maxlen: 48
2a01:7d80:999::/48 maxlen: 48
2a01:7d80:1000::/36 maxlen: 48
2a01:7d80:3000::/36 maxlen: 36
2a01:7d80:4000::/36 maxlen: 36
2a01:7d80:5000::/36 maxlen: 36
2a01:7d80:6000::/36 maxlen: 36
2a01:7d80:7000::/36 maxlen: 36
2a01:7d80:8000::/36 maxlen: 36
2a01:7d80:9000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:90:c9:12:fb:36:ef:bd:1c:6c:84:4e:9e:bd:40:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8
Validity
Not Before: Oct 1 08:24:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5ddb561cd75a8dcffb21634ad7ee66c9916a39e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:da:fc:fb:b8:c5:fb:c4:dd:1b:30:71:6e:68:
0a:d6:59:cd:d6:9d:b5:6c:b6:3c:7d:26:7d:ee:78:
8b:ff:03:81:2a:15:fa:0f:20:f2:2b:0a:a4:0e:26:
89:b5:7b:04:e7:c2:34:72:57:c8:e0:b3:dd:72:9e:
c4:48:03:88:5e:a9:d4:7b:b3:2d:2e:c9:88:9f:72:
d5:48:e1:fc:b7:43:d4:cd:2b:b1:1d:91:4c:24:2b:
ed:16:ab:e3:41:94:c9:06:b7:55:28:c3:58:0e:73:
be:32:44:a6:b3:39:6c:be:bd:37:c4:b6:f0:fa:c1:
83:65:24:72:6c:44:66:1e:5d:2c:eb:3f:8d:6d:69:
02:78:08:ed:01:fc:2a:24:a1:27:b1:7d:18:c5:47:
d7:6d:08:eb:52:1a:71:99:2c:9b:32:86:a7:6b:8d:
ae:0f:e6:cc:54:07:33:1f:56:39:e9:c8:5f:ec:5f:
62:39:54:41:e0:93:0e:2b:ad:a3:11:ef:f6:98:a9:
26:50:f4:32:cc:9b:28:e6:81:34:a2:47:aa:48:ae:
93:e6:15:e0:c2:ea:83:33:2c:2a:51:43:77:2b:a6:
f8:db:e4:25:8f:2e:2f:30:f9:85:cc:82:67:1c:de:
bd:37:dc:4d:58:32:70:62:55:4c:89:15:58:cc:eb:
49:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DD:B5:61:CD:75:A8:DC:FF:B2:16:34:AD:7E:E6:6C:99:16:A3:9E
X509v3 Authority Key Identifier:
keyid:E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/td21Yc11qNz_shY0rX7mbJkWo54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.90.98.0/23
195.90.114.0/23
212.52.160.0/19
IPv6:
2a01:7d80::/35
2a01:7d80:3000::-2a01:7d80:9fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
9e:b1:a7:c8:77:e2:14:5b:93:11:93:d1:fd:86:03:9b:49:68:
5c:a4:2b:b9:9d:b6:66:7c:ba:a2:7b:88:73:2a:ab:c6:da:af:
f3:4b:5f:45:6b:40:df:2c:5a:40:29:dc:3a:39:d5:a1:aa:d7:
71:02:9b:d9:1f:6f:78:a9:03:70:9e:51:0c:6b:5f:02:0f:e4:
7e:60:0a:2d:00:36:e0:ef:03:eb:c4:5e:df:9e:2d:18:54:00:
8c:e6:6c:ac:bf:89:5d:94:1c:8e:f5:9b:8e:83:7e:e0:d1:e2:
4a:d2:c6:79:3b:7c:3c:73:ad:05:7a:d0:e7:2c:83:c0:aa:de:
1f:8a:b0:c0:ac:ae:95:45:e8:72:f8:67:74:f2:b9:93:02:79:
39:45:a4:96:98:48:9f:f8:93:33:35:57:a7:d2:47:45:76:85:
33:58:e8:d7:fa:c8:47:92:2c:3f:15:ab:09:f7:85:72:fd:3c:
59:19:6d:b4:0a:a7:50:4a:86:ba:9d:4c:d2:fc:ed:e7:eb:91:
5e:3e:e7:1b:8a:60:48:99:0d:72:b6:56:6b:1f:68:ff:a3:b0:
d1:0f:43:ae:c1:81:dc:f1:b0:6c:ec:08:eb:5e:d2:64:e1:88:
99:b7:13:67:6e:50:aa:e1:48:e1:65:b7:97:06:15:0a:43:9c:
66:8d:a5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:37:49 2026 by rpki-client