Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/tleY9DQ64PaPto3LrGnd_Er2U3o.roa
File: tleY9DQ64PaPto3LrGnd_Er2U3o.roa (raw, json)
Hash identifier: WHULtdCxB0KTLDfvnbk0GZrP6t4NDTlF81JH8Xpd1rY=
Subject key identifier: B6:57:98:F4:34:3A:E0:F6:8F:B6:8D:CB:AC:69:DD:FC:4A:F6:53:7A
Certificate issuer: /CN=95d108f0e85868c2bbe7db6d7377034c131eb224
Certificate serial: 019E79C977DE974B950C8EE409A6590683E5
Authority key identifier: 95:D1:08:F0:E8:58:68:C2:BB:E7:DB:6D:73:77:03:4C:13:1E:B2:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldEI8OhYaMK759ttc3cDTBMesiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/tleY9DQ64PaPto3LrGnd_Er2U3o.roa
Signing time: Sat 30 May 2026 16:48:26 +0000
ROA not before: Sat 30 May 2026 16:48:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 179.255.185.0/24 maxlen: 24
179.255.186.0/24 maxlen: 24
179.255.187.0/24 maxlen: 24
179.255.188.0/24 maxlen: 24
179.255.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ldEI8OhYaMK759ttc3cDTBMesiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ldEI8OhYaMK759ttc3cDTBMesiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ldEI8OhYaMK759ttc3cDTBMesiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:79:c9:77:de:97:4b:95:0c:8e:e4:09:a6:59:06:83:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d108f0e85868c2bbe7db6d7377034c131eb224
Validity
Not Before: May 30 16:48:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b65798f4343ae0f68fb68dcbac69ddfc4af6537a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:46:ab:85:1a:c2:6d:7d:8b:1f:3d:a5:af:ca:
73:cf:7c:86:02:40:fd:f1:92:c5:50:9b:5e:d2:f3:
f3:da:c3:1f:fd:a6:7d:da:48:fd:75:ad:4f:18:0f:
4d:b5:60:3c:f4:d7:11:6a:17:57:ed:e8:8a:f5:60:
89:a0:fb:e3:b5:e6:73:e6:08:32:f8:fa:19:82:33:
69:e9:46:b6:ef:75:a0:d4:27:64:ab:d8:5c:81:05:
86:45:fa:d8:5f:f4:cb:5a:5a:18:c0:2e:67:a4:63:
c4:74:31:5b:7a:42:bf:24:b2:46:76:0d:7d:fd:e5:
63:e6:4c:47:96:fd:5d:db:e5:8b:db:70:5c:d1:d2:
2a:8f:14:84:3d:09:b0:0c:41:1f:c4:d8:cc:c5:ac:
91:e6:5b:24:6e:e2:f6:b2:38:0f:d7:e3:12:93:da:
9d:7c:38:50:7a:da:be:da:ac:7e:1f:fd:bc:20:59:
6e:ed:fa:12:8e:b6:99:0a:66:ca:30:09:75:2e:f1:
e9:5b:6a:f8:95:47:6e:e7:b6:86:3e:53:c4:0a:43:
4a:6f:90:bb:0e:ff:56:e2:f1:5b:3d:2b:d6:81:0c:
04:fd:5c:df:f4:57:74:23:62:8d:2e:ab:c8:51:41:
78:e4:7a:ac:f9:2c:26:3f:5c:b5:70:d8:14:86:04:
91:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:57:98:F4:34:3A:E0:F6:8F:B6:8D:CB:AC:69:DD:FC:4A:F6:53:7A
X509v3 Authority Key Identifier:
keyid:95:D1:08:F0:E8:58:68:C2:BB:E7:DB:6D:73:77:03:4C:13:1E:B2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldEI8OhYaMK759ttc3cDTBMesiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/tleY9DQ64PaPto3LrGnd_Er2U3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ldEI8OhYaMK759ttc3cDTBMesiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.255.185.0-179.255.189.255
Signature Algorithm: sha256WithRSAEncryption
29:d0:1e:1e:68:66:6a:70:5b:0a:39:83:81:23:7e:1b:bf:2e:
26:e4:43:7d:ab:08:b3:ca:8b:3d:63:19:7c:7d:dd:36:ff:a5:
3c:35:3d:25:43:54:df:68:4e:67:df:b6:f5:bb:3f:f1:00:04:
d4:39:cc:70:fe:bb:a0:04:0a:2b:dc:30:12:da:0d:f7:c3:96:
41:5b:3c:9c:e2:92:90:b3:6d:f2:f4:40:be:ea:71:63:bb:45:
2e:eb:60:78:33:f5:f3:82:93:87:6f:44:72:b6:74:1d:80:39:
df:e7:c1:a1:84:83:d0:36:3a:99:95:8c:ba:d0:e7:f4:60:95:
08:83:fc:a1:17:4e:5e:5c:60:f0:a6:cf:04:c1:8b:d2:60:21:
27:36:3b:b0:db:ae:fc:0b:fa:a2:b3:09:fd:18:2d:5f:f7:6b:
0b:21:29:49:f7:e2:dc:a6:5c:c2:cc:ec:98:11:41:90:65:fa:
fb:ac:7a:39:d3:8b:7c:96:09:e0:95:07:6b:ce:49:85:e6:b8:
df:d6:ae:6b:00:fb:16:3f:36:c7:ed:ea:2e:16:6d:ed:d0:eb:
87:ca:ee:4b:c9:b7:08:f5:81:fa:77:cd:b1:e0:91:77:2e:3d:
0f:3d:7b:97:8b:1e:a2:09:1c:47:62:08:56:2a:34:29:51:4b:
be:05:65:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 07:14:05 2026 by rpki-client