Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/TjDmMYZX4kBSUtV2aoQj0qKysRg.roa
File: TjDmMYZX4kBSUtV2aoQj0qKysRg.roa (raw, json)
Hash identifier: l2/gMvnSsklv14g/tuA37El8fuSOsjkNRMRQv6RZ2fY=
Subject key identifier: 4E:30:E6:31:86:57:E2:40:52:52:D5:76:6A:84:23:D2:A2:B2:B1:18
Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Certificate serial: 01A01EA2E7A7E2F80F6A932A084042B6C55B
Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/TjDmMYZX4kBSUtV2aoQj0qKysRg.roa
Signing time: Thu 20 Aug 2026 10:06:27 +0000
ROA not before: Thu 20 Aug 2026 10:06:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 2.59.2.0/24 maxlen: 24
2.59.3.0/24 maxlen: 24
5.182.124.0/22 maxlen: 22
45.13.248.0/23 maxlen: 23
45.13.250.0/24 maxlen: 24
45.13.251.0/24 maxlen: 24
45.85.108.0/22 maxlen: 22
45.94.96.0/22 maxlen: 22
45.130.65.0/24 maxlen: 24
45.139.0.0/24 maxlen: 24
45.139.1.0/24 maxlen: 24
80.76.52.0/22 maxlen: 22
83.150.220.0/22 maxlen: 22
194.32.224.0/24 maxlen: 24
194.32.226.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1e:a2:e7:a7:e2:f8:0f:6a:93:2a:08:40:42:b6:c5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Validity
Not Before: Aug 20 10:06:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e30e6318657e2405252d5766a8423d2a2b2b118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:49:eb:47:24:ec:ce:7d:04:f0:c5:ae:1a:6b:
1d:d3:82:86:1b:c0:7f:f2:b0:61:e1:96:7c:7f:c7:
10:55:42:2d:e9:6f:9d:8b:03:96:ed:7b:7f:80:99:
99:14:79:b4:9f:da:97:8f:3e:13:cc:4f:f8:af:65:
49:59:df:27:19:10:aa:da:c2:83:bb:24:b6:98:47:
fc:f2:96:49:cb:1c:25:f8:55:af:aa:eb:9e:a8:c4:
18:79:b9:aa:9e:71:87:01:2d:98:c4:62:06:fd:59:
18:84:a0:41:84:6d:4f:c9:79:8a:e0:b2:93:76:c4:
22:0b:f0:08:ec:0a:8e:31:da:09:2a:ab:33:9d:b2:
d6:f5:53:93:eb:73:47:2a:21:bd:4f:08:64:bb:50:
5c:70:f8:1a:10:f8:3c:26:4e:78:c6:f8:cf:ca:49:
08:0b:03:23:ac:34:97:50:6f:06:36:10:c9:9b:a3:
51:36:f2:5f:ab:a0:22:98:7b:5f:0d:50:45:ce:cc:
5b:c3:26:0c:dd:57:b9:38:02:c7:ce:40:35:7c:7c:
aa:21:3b:1d:55:2a:fd:c5:10:24:b8:ce:6d:05:35:
2c:82:70:58:ea:ee:e1:d5:d9:29:8a:bd:5c:dc:fd:
b8:07:4a:53:b4:b6:dd:72:4c:19:bb:b7:35:65:25:
44:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:30:E6:31:86:57:E2:40:52:52:D5:76:6A:84:23:D2:A2:B2:B1:18
X509v3 Authority Key Identifier:
keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/TjDmMYZX4kBSUtV2aoQj0qKysRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.2.0/23
5.182.124.0/22
45.13.248.0/22
45.85.108.0/22
45.94.96.0/22
45.130.65.0/24
45.139.0.0/23
80.76.52.0/22
83.150.220.0/22
194.32.224.0/24
194.32.226.0/23
Signature Algorithm: sha256WithRSAEncryption
52:c7:cf:60:10:6e:4f:82:2e:65:20:94:d0:80:fd:9b:d0:82:
8b:b4:a1:a4:52:fe:4e:a8:d4:94:a5:53:9d:c4:0d:e7:3b:ca:
28:48:81:d2:76:7b:b5:b2:dd:b0:ca:42:78:b9:d5:11:f1:e3:
c7:94:24:c2:f2:e5:90:c3:33:62:21:b5:7d:5e:0d:bc:b5:88:
d5:81:1b:92:9f:37:5e:01:d2:c7:bb:f6:a4:f7:bb:5d:da:73:
f3:8d:5c:ab:12:2a:24:84:ae:a8:eb:e4:eb:d8:8d:d1:f1:42:
3f:33:fa:87:58:ea:8e:76:7b:90:33:d1:7f:89:fc:1e:d1:16:
a2:9d:c2:8a:3f:39:72:bb:74:0d:ee:c8:4f:a4:65:af:06:37:
a5:70:53:09:77:b0:d9:c8:02:93:8d:e3:29:e8:bf:ab:cc:c8:
bf:4d:51:0d:4d:7b:5b:00:c9:e9:b7:74:12:d8:7e:e8:e1:6a:
da:5d:b2:22:18:91:b7:a8:cf:cc:69:ec:aa:81:c1:d7:9b:36:
73:75:cf:c4:88:c3:60:c6:99:d2:5d:d5:5a:1f:99:f1:38:d2:
6a:ab:eb:27:81:19:b6:c2:77:44:43:fa:65:a7:9e:c1:bf:99:
ab:5a:8e:d9:f6:e0:4a:f3:0f:f7:b6:47:af:e2:1d:26:60:7f:
72:83:f3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:43:12 2026 by rpki-client