Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/idEIE1LmH5aRSetRlRXeE-BvXJs.roa
File: idEIE1LmH5aRSetRlRXeE-BvXJs.roa (raw, json)
Hash identifier: ojybS1RrhljTmMZjxgmXu+yk/QCNdpZiAYm9U0KCarc=
Subject key identifier: 89:D1:08:13:52:E6:1F:96:91:49:EB:51:95:15:DE:13:E0:6F:5C:9B
Certificate issuer: /CN=4ce37f71c933bf827118c63c07774de98645d019
Certificate serial: 01A1586DE98C05A1996A4E26CCFEC2AD9E10
Authority key identifier: 4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/idEIE1LmH5aRSetRlRXeE-BvXJs.roa
Signing time: Tue 20 Oct 2026 08:29:20 +0000
ROA not before: Tue 20 Oct 2026 08:29:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207143
IP address blocks: 45.131.254.0/24 maxlen: 24
45.131.255.0/24 maxlen: 24
185.142.212.0/22 maxlen: 22
185.142.212.0/24 maxlen: 24
185.142.213.0/24 maxlen: 24
185.142.214.0/24 maxlen: 24
185.142.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:58:6d:e9:8c:05:a1:99:6a:4e:26:cc:fe:c2:ad:9e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce37f71c933bf827118c63c07774de98645d019
Validity
Not Before: Oct 20 08:29:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=89d1081352e61f969149eb519515de13e06f5c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:42:36:b1:85:fc:90:13:16:26:7f:cf:f7:c4:
ea:26:2a:d3:14:88:66:76:a8:05:6f:c9:48:2b:86:
1e:2e:93:88:74:82:05:ff:9e:61:60:f6:71:7b:29:
f9:69:fc:9d:f8:63:9d:02:65:2d:16:f1:0d:86:0b:
24:c1:a4:11:e5:20:9e:6b:49:cb:88:88:22:57:20:
b8:a3:8d:e7:dd:10:6a:91:ee:d0:d3:f2:f5:9a:12:
e7:62:b7:8b:5a:f2:1d:4d:94:b9:22:b2:7a:a6:2e:
49:4e:b9:3e:2f:25:27:71:a3:5c:d8:f1:bc:e1:c5:
a3:ee:15:c1:ea:3c:d6:f4:de:2d:77:b1:72:6d:d9:
74:72:66:80:e6:4b:de:1d:12:ed:d2:2d:88:a4:f7:
90:82:85:76:b0:c3:71:d0:30:df:b0:5e:d4:a9:aa:
0e:95:47:88:ff:e3:0e:9d:7c:43:ac:36:3d:d8:dc:
db:1f:4c:47:4d:2f:7c:06:a8:35:0f:6a:64:c6:6a:
3f:bc:f4:7c:eb:52:30:11:34:41:6f:b9:b4:b0:45:
d6:5d:90:2a:9d:99:de:bc:86:34:ef:9c:a0:24:87:
39:41:27:9f:f8:4e:84:fd:ea:b2:cd:69:44:4d:49:
7f:e7:89:bd:14:3f:ea:15:27:ad:38:f2:71:a7:02:
91:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D1:08:13:52:E6:1F:96:91:49:EB:51:95:15:DE:13:E0:6F:5C:9B
X509v3 Authority Key Identifier:
keyid:4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/idEIE1LmH5aRSetRlRXeE-BvXJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.254.0/23
185.142.212.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:ca:80:89:43:46:e1:54:d2:d1:62:8f:b7:74:8c:4b:17:67:
d8:fa:43:1e:6b:49:3e:b8:12:ac:d7:fb:f0:72:dd:cc:82:63:
6d:55:d6:6f:9b:92:cd:3f:da:57:a7:12:b0:ce:9d:eb:89:ee:
db:70:72:e8:e7:75:be:11:6f:97:96:a9:97:a1:e0:d4:df:85:
a6:66:6d:b6:c5:72:9a:a2:39:d6:b8:4b:31:0a:ed:22:d2:b5:
32:65:9d:ab:c3:f2:2b:e8:3c:e8:fd:cc:38:12:b9:ef:c6:ab:
f9:86:f0:f4:12:7c:af:a0:d8:78:47:2d:1d:cf:05:a5:69:01:
cb:05:24:46:57:69:26:ec:99:36:53:94:84:5d:c9:c9:b5:81:
aa:7c:a3:a4:a8:cf:82:1f:c3:1b:b4:bc:95:16:15:d9:dc:a8:
06:40:9f:f0:f2:a1:4a:d5:f9:b3:a8:90:01:b8:89:2b:78:cd:
e1:68:97:7b:11:c5:fb:79:06:c5:5c:3f:05:1d:7a:56:05:3e:
4c:7e:6b:ff:65:10:c7:c2:97:2d:0e:65:8b:90:f6:95:29:d5:
e7:13:9f:df:7a:2a:85:e3:85:fe:e7:03:7b:47:58:3f:d1:5c:
7b:5f:12:65:f3:8b:70:59:79:9b:fa:d4:55:18:81:1c:fc:d6:
0c:30:51:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 17:12:18 2026 by rpki-client