Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/TqDntdHJZddaYt_ZyotBF9-hm14.roa
File: TqDntdHJZddaYt_ZyotBF9-hm14.roa (raw, json)
Hash identifier: VjSEFTxxCdGkCwFWGpwHDnoo4e0X5kbRBsmPmmTPxWI=
Subject key identifier: 4E:A0:E7:B5:D1:C9:65:D7:5A:62:DF:D9:CA:8B:41:17:DF:A1:9B:5E
Certificate issuer: /CN=d4a7522d27e62ae23a460143eba6733b79b24477
Certificate serial: 019F236944BAD0B578E5789ADF395D4AD904
Authority key identifier: D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/TqDntdHJZddaYt_ZyotBF9-hm14.roa
Signing time: Thu 02 Jul 2026 15:18:49 +0000
ROA not before: Thu 02 Jul 2026 15:18:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64236
IP address blocks: 45.81.150.0/24 maxlen: 24
45.92.29.0/24 maxlen: 24
85.209.84.0/23 maxlen: 23
85.209.87.0/24 maxlen: 24
185.191.228.0/23 maxlen: 23
185.191.231.0/24 maxlen: 24
185.199.224.0/23 maxlen: 23
185.199.226.0/24 maxlen: 24
185.202.172.0/23 maxlen: 23
185.215.148.0/24 maxlen: 24
185.215.150.0/23 maxlen: 23
185.215.150.0/24 maxlen: 24
185.218.235.0/24 maxlen: 24
185.235.14.0/23 maxlen: 23
193.39.185.0/24 maxlen: 24
193.39.186.0/24 maxlen: 24
212.162.148.0/22 maxlen: 22
2a0b:aac0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 06:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:44:ba:d0:b5:78:e5:78:9a:df:39:5d:4a:d9:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a7522d27e62ae23a460143eba6733b79b24477
Validity
Not Before: Jul 2 15:18:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ea0e7b5d1c965d75a62dfd9ca8b4117dfa19b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:96:70:e8:60:53:97:65:2d:71:a5:4a:86:c4:
13:63:4e:e2:82:89:9b:7a:73:10:bd:ce:43:1c:92:
ae:d9:9a:d7:5b:38:3c:98:56:6c:42:4e:3c:b1:c7:
2f:36:c3:49:44:43:5b:60:29:44:28:eb:32:b3:d4:
98:d9:11:83:7c:77:64:5b:b7:6b:d2:90:61:67:32:
ca:9d:6a:d7:7f:ac:be:f0:9c:c6:2d:66:85:8b:fa:
87:b9:1e:65:6c:25:73:14:fa:ee:3d:25:bb:03:f1:
e6:b7:0a:71:26:ac:c5:fd:c0:28:dd:20:f0:e6:d9:
94:fd:85:88:d5:1d:f5:90:07:27:16:ad:65:95:f6:
d9:5f:c2:4f:43:70:c7:bd:ce:b6:96:36:05:69:c6:
27:03:c0:9c:a0:32:25:53:f3:8a:5e:a8:ba:0e:38:
b6:8a:b2:f7:52:c2:05:3e:b1:8a:21:e4:08:7b:f0:
40:3e:a4:78:e8:b6:b2:2a:ae:21:c0:5b:a5:e5:c4:
a0:3b:ac:81:ac:3e:04:de:42:b0:a5:4e:67:2a:e3:
33:d1:6e:23:a9:eb:9c:d6:cb:cb:f7:38:36:3d:fc:
d1:52:be:ec:67:4f:62:8d:33:87:27:df:f9:05:3d:
25:b9:37:b4:86:12:25:30:cc:8a:bc:db:09:21:6b:
d5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A0:E7:B5:D1:C9:65:D7:5A:62:DF:D9:CA:8B:41:17:DF:A1:9B:5E
X509v3 Authority Key Identifier:
keyid:D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/TqDntdHJZddaYt_ZyotBF9-hm14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.150.0/24
45.92.29.0/24
85.209.84.0/23
85.209.87.0/24
185.191.228.0/23
185.191.231.0/24
185.199.224.0-185.199.226.255
185.202.172.0/23
185.215.148.0/24
185.215.150.0/23
185.218.235.0/24
185.235.14.0/23
193.39.185.0-193.39.186.255
212.162.148.0/22
IPv6:
2a0b:aac0::/29
Signature Algorithm: sha256WithRSAEncryption
18:94:50:be:24:dc:8a:10:b3:4b:e3:23:e4:9c:91:ea:ab:d4:
4f:65:ea:aa:ba:0c:fa:77:65:87:43:fc:49:7e:29:32:4a:32:
6e:e9:f9:a6:8c:cb:26:06:eb:ab:7a:bf:7d:d4:20:1f:cb:99:
33:49:53:23:a8:22:c4:24:3f:a7:89:32:ca:11:ec:4f:7d:cf:
a7:bd:a4:25:ee:b3:26:7f:ff:13:01:3a:c3:c4:bd:02:23:e2:
3c:1d:dc:e6:11:93:82:4d:4f:79:7f:db:0e:5a:00:5c:71:21:
ce:e8:0a:26:40:1d:f6:67:17:f3:b7:03:d6:c0:57:97:ec:c0:
b9:75:dd:82:f4:6e:53:d5:ec:4d:f7:93:fa:43:1a:40:b4:25:
20:99:44:ed:2b:50:fa:43:5f:36:61:8b:91:15:be:31:7a:7a:
d3:13:80:e6:76:d1:0d:14:9e:1d:80:a6:d9:1a:73:eb:49:3b:
1c:97:6a:2d:f5:9f:b7:c0:ea:42:f4:ae:00:d1:4b:ad:ef:59:
62:43:cf:cd:dc:de:90:36:82:61:a0:3a:d1:7e:b9:ae:69:35:
a6:a5:91:21:8c:63:6a:06:f7:7e:e6:53:e1:bc:86:68:d5:0b:
e4:55:2f:58:d2:02:d0:ee:e3:d3:57:9a:8b:82:aa:4b:8b:c2:
33:ef:97:e0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 8 13:58:13 2026 by rpki-client