Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/CTTk0MJE0an_xvk9FO8LwJZsYUc.roa
File: CTTk0MJE0an_xvk9FO8LwJZsYUc.roa (raw, json)
Hash identifier: bFQlLHsnA4tD0Drty9z2fAjdBaovM/tdDu6dG5CtC+0=
Subject key identifier: 09:34:E4:D0:C2:44:D1:A9:FF:C6:F9:3D:14:EF:0B:C0:96:6C:61:47
Certificate issuer: /CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Certificate serial: 01A11B6D8B50AE4BA011504BF8B8B70590B4
Authority key identifier: 3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/CTTk0MJE0an_xvk9FO8LwJZsYUc.roa
Signing time: Thu 08 Oct 2026 12:12:06 +0000
ROA not before: Thu 08 Oct 2026 12:12:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29555
IP address blocks: 81.91.188.0/24 maxlen: 24
176.64.0.0/24 maxlen: 24
176.64.1.0/24 maxlen: 24
176.64.2.0/24 maxlen: 24
176.64.3.0/24 maxlen: 24
176.64.4.0/24 maxlen: 24
176.64.5.0/24 maxlen: 24
176.64.6.0/24 maxlen: 24
176.64.7.0/24 maxlen: 24
176.64.8.0/24 maxlen: 24
176.64.9.0/24 maxlen: 24
176.64.10.0/24 maxlen: 24
176.64.11.0/24 maxlen: 24
176.64.12.0/24 maxlen: 24
176.64.13.0/24 maxlen: 24
176.64.14.0/24 maxlen: 24
176.64.15.0/24 maxlen: 24
176.64.16.0/24 maxlen: 24
176.64.17.0/24 maxlen: 24
176.64.18.0/24 maxlen: 24
176.64.19.0/24 maxlen: 24
176.64.20.0/24 maxlen: 24
176.64.21.0/24 maxlen: 24
176.64.22.0/24 maxlen: 24
176.64.23.0/24 maxlen: 24
176.64.24.0/24 maxlen: 24
176.64.25.0/24 maxlen: 24
176.64.26.0/24 maxlen: 24
176.64.27.0/24 maxlen: 24
176.64.28.0/24 maxlen: 24
176.64.29.0/24 maxlen: 24
176.64.30.0/24 maxlen: 24
176.64.31.0/24 maxlen: 24
176.64.32.0/24 maxlen: 24
176.64.33.0/24 maxlen: 24
176.64.34.0/24 maxlen: 24
176.64.35.0/24 maxlen: 24
176.64.100.0/24 maxlen: 24
176.64.101.0/24 maxlen: 24
176.64.102.0/24 maxlen: 24
176.64.103.0/24 maxlen: 24
176.64.104.0/24 maxlen: 24
176.64.105.0/24 maxlen: 24
212.96.66.0/24 maxlen: 24
212.96.69.0/24 maxlen: 24
212.96.74.0/24 maxlen: 24
212.96.75.0/24 maxlen: 24
212.96.80.0/24 maxlen: 24
212.96.81.0/24 maxlen: 24
212.96.82.0/24 maxlen: 24
212.96.86.0/24 maxlen: 24
212.96.87.0/24 maxlen: 24
212.96.88.0/24 maxlen: 24
212.96.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 18:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:6d:8b:50:ae:4b:a0:11:50:4b:f8:b8:b7:05:90:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Validity
Not Before: Oct 8 12:12:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0934e4d0c244d1a9ffc6f93d14ef0bc0966c6147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:85:74:03:e1:23:63:17:30:b7:43:40:6b:4c:
56:83:f3:7c:44:ea:51:d1:df:99:d3:b4:f7:e2:41:
4d:38:17:91:77:3f:d7:8a:cd:06:ac:fb:5c:fd:54:
1a:59:c1:75:ae:98:d0:cb:c6:d7:63:56:61:a7:23:
69:2c:9e:ba:bb:7c:48:cd:ed:eb:98:96:bc:5d:a1:
22:cf:16:c4:6a:09:f8:46:53:e4:17:44:9c:62:02:
a8:5b:e2:d3:e5:f7:a0:e5:22:5a:d0:9f:97:ad:1d:
9b:f7:5e:e1:9f:bc:e1:f4:2e:26:f9:d7:d5:66:66:
b4:0d:48:2d:77:45:2d:de:45:d4:d7:72:6a:1b:1e:
97:2d:f6:82:15:6d:81:00:46:60:cd:7d:5b:0c:73:
d4:2e:b6:3b:05:27:f1:28:c7:b0:34:f2:41:1d:e9:
90:03:c9:80:9f:99:d0:91:7b:04:ac:6e:f1:0d:3b:
1a:1b:e5:d0:9e:7e:50:d6:9a:3c:71:5e:ef:89:1e:
da:04:21:4d:c2:d0:d7:49:e8:9e:b5:42:2c:d5:20:
b3:79:ce:f8:93:00:a2:83:ae:08:4d:a7:de:b0:f8:
12:94:f0:40:b8:f3:7f:97:b9:1b:ed:82:2f:b7:22:
6a:68:76:f8:51:b1:c2:6f:70:9b:1e:b3:a6:e3:af:
16:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:34:E4:D0:C2:44:D1:A9:FF:C6:F9:3D:14:EF:0B:C0:96:6C:61:47
X509v3 Authority Key Identifier:
keyid:3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/CTTk0MJE0an_xvk9FO8LwJZsYUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.91.188.0/24
176.64.0.0-176.64.35.255
176.64.100.0-176.64.105.255
212.96.66.0/24
212.96.69.0/24
212.96.74.0/23
212.96.80.0-212.96.82.255
212.96.86.0-212.96.89.255
Signature Algorithm: sha256WithRSAEncryption
28:56:17:2d:03:67:43:87:d7:d5:eb:27:d5:28:6c:51:1f:3c:
b6:bd:2a:48:24:7e:a9:b6:67:59:54:e8:f2:ac:09:c7:2d:cd:
1a:3c:9d:67:9b:12:15:ab:1f:ad:8b:f5:1b:42:78:f2:d4:19:
42:0c:bc:a4:e4:94:dc:26:d1:67:c7:e9:d8:a9:45:eb:74:fa:
c0:6d:05:58:9b:aa:a9:d7:63:f5:ca:63:95:81:61:bb:99:70:
64:c0:f2:46:bd:eb:7c:8b:71:b7:76:43:9b:86:3c:51:33:80:
f6:3a:69:bd:5b:b4:25:c6:36:1c:ea:f0:ab:8a:2e:7c:2d:08:
07:a4:a2:ce:02:98:05:2a:7a:a9:8e:49:31:53:69:b6:f4:bd:
6e:71:a3:d8:0e:b5:35:29:49:b5:57:8a:59:75:00:38:99:8d:
81:5a:77:63:ad:e3:e1:84:4f:8e:d9:aa:82:cf:39:9c:6f:df:
cc:46:4c:52:b3:49:be:6c:b7:05:e2:7b:ff:d9:30:90:6f:3d:
5e:53:f7:3d:6c:01:62:d6:30:65:40:20:55:8c:ee:fc:2a:27:
49:1a:6d:30:ce:6c:b6:ca:2d:79:fd:49:44:3b:80:55:37:6c:
3e:33:b8:65:1a:87:67:4d:03:80:4a:e0:8f:68:a6:24:29:3f:
73:6d:e7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 04:00:01 2026 by rpki-client