Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/TAe0Trf53yP7E6TAGcnMACwmHuU.roa
File: TAe0Trf53yP7E6TAGcnMACwmHuU.roa (raw, json)
Hash identifier: qnT8hns4uHFEqM28Gh5Es6r6jtqUh7SObO4jiLKYp54=
Subject key identifier: 4C:07:B4:4E:B7:F9:DF:23:FB:13:A4:C0:19:C9:CC:00:2C:26:1E:E5
Certificate issuer: /CN=2ebe12f46b5e6b960c5ce8131b1d3e532f05a8ad
Certificate serial: 019F23682ED918BB327D49B3BA45C6AC9A7C
Authority key identifier: 2E:BE:12:F4:6B:5E:6B:96:0C:5C:E8:13:1B:1D:3E:53:2F:05:A8:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/TAe0Trf53yP7E6TAGcnMACwmHuU.roa
Signing time: Thu 02 Jul 2026 15:17:38 +0000
ROA not before: Thu 02 Jul 2026 15:17:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24971
IP address blocks: 185.32.160.0/22 maxlen: 24
2a00:a5a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:2e:d9:18:bb:32:7d:49:b3:ba:45:c6:ac:9a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebe12f46b5e6b960c5ce8131b1d3e532f05a8ad
Validity
Not Before: Jul 2 15:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c07b44eb7f9df23fb13a4c019c9cc002c261ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:62:b2:b3:f1:17:1e:58:54:e4:00:40:67:b8:
f6:9d:1c:ea:e9:63:d6:80:bc:d3:14:51:80:f6:45:
77:2a:12:d0:17:cf:0a:d7:d0:48:d8:a6:b4:16:11:
26:68:e8:71:d2:b9:c9:6d:07:7c:c0:85:46:22:73:
0e:23:d2:d1:42:72:61:47:a2:86:83:6a:2b:12:89:
95:d6:c2:3e:0f:92:93:14:10:f7:03:ae:1b:30:7e:
74:31:c7:29:64:8b:60:20:d0:3c:34:17:3b:2b:e7:
20:6e:3d:a0:be:d1:0c:e2:25:68:a0:54:81:fb:fc:
a1:7a:f3:b2:4e:aa:73:a1:a4:1d:9a:f0:15:76:fb:
c5:ef:2a:74:1e:99:8f:6f:d0:64:70:f4:19:34:d4:
4c:cf:d3:9f:de:85:57:26:2b:c8:df:38:f4:01:28:
36:0d:b3:08:7c:ca:e2:14:0e:c0:fd:84:cf:a2:70:
65:98:fe:67:b2:47:43:33:e2:f6:0b:22:5f:b0:8a:
ce:20:4c:c9:14:2f:0a:73:97:70:55:6f:21:5f:dc:
eb:1f:bd:3d:bd:95:f2:b4:2f:22:b5:ae:de:6a:d8:
10:13:0f:2d:2c:e2:49:0b:36:2b:93:ce:8f:b0:99:
a6:0f:f5:7c:af:8e:f2:f8:85:71:ae:14:16:78:f9:
19:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:07:B4:4E:B7:F9:DF:23:FB:13:A4:C0:19:C9:CC:00:2C:26:1E:E5
X509v3 Authority Key Identifier:
keyid:2E:BE:12:F4:6B:5E:6B:96:0C:5C:E8:13:1B:1D:3E:53:2F:05:A8:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/TAe0Trf53yP7E6TAGcnMACwmHuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.160.0/22
IPv6:
2a00:a5a0::/32
Signature Algorithm: sha256WithRSAEncryption
af:0a:45:36:94:6f:1d:ea:a4:a7:a6:26:b8:74:b6:c7:04:4e:
f6:95:e7:d8:b3:7a:39:f4:d7:ce:9c:4c:06:88:5b:95:dd:68:
c0:18:33:8d:4d:3c:f8:d4:f5:49:a0:c6:e5:30:c8:f6:eb:d2:
02:5c:a3:be:b3:81:4e:12:17:d9:aa:54:88:a6:8f:74:d9:42:
f3:ab:3f:fe:ac:2a:e7:6c:85:8e:07:f9:c6:eb:f3:7a:93:40:
8c:20:49:0a:83:94:8b:7b:58:3a:97:85:50:87:b6:24:01:2b:
70:ad:b0:26:05:ce:24:6e:aa:bd:ab:54:e9:0a:c6:98:bf:d8:
e2:4a:d3:f8:d6:7c:78:cb:2c:a3:5e:26:a8:87:b0:f6:1a:68:
7c:7a:74:bb:3e:76:b4:59:2f:c2:6f:07:7b:b1:05:3b:99:2c:
47:ce:b1:89:4e:d7:f1:9b:30:6a:f7:c8:e8:5b:62:2c:a4:ca:
7f:22:70:fa:f1:e5:0e:1b:23:af:c1:4f:8e:9b:61:bd:74:20:
dd:93:43:1a:da:6a:3a:82:ca:72:b7:a0:71:e4:04:73:75:2a:
67:70:1b:a3:55:88:5d:5f:05:39:69:57:a8:db:b2:a4:4f:d2:
b7:71:93:d3:c4:91:0e:85:e6:d5:e7:2a:a7:7b:59:de:41:cd:
ff:8b:b6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:40:25 2026 by rpki-client