Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/TAKoOld3ZdA95DrV9NuS6A8DvoA.roa
File: TAKoOld3ZdA95DrV9NuS6A8DvoA.roa (raw, json)
Hash identifier: 6IxDivB67LK66jWvSp4ogMWZ8x+3ThGPDhXWBMTQzD8=
Subject key identifier: 4C:02:A8:3A:57:77:65:D0:3D:E4:3A:D5:F4:DB:92:E8:0F:03:BE:80
Certificate issuer: /CN=b78678bd654ca6b10a5c773bc269754dc234cfd5
Certificate serial: 01A0F18636C157DF01BD6E6E21F5ACF06396
Authority key identifier: B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/TAKoOld3ZdA95DrV9NuS6A8DvoA.roa
Signing time: Wed 30 Sep 2026 08:54:59 +0000
ROA not before: Wed 30 Sep 2026 08:54:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29119
IP address blocks: 2.59.244.0/22 maxlen: 22
89.38.216.0/21 maxlen: 21
103.95.124.0/22 maxlen: 22
103.115.182.0/23 maxlen: 23
103.132.4.0/22 maxlen: 22
103.204.220.0/23 maxlen: 23
185.124.100.0/22 maxlen: 22
185.250.76.0/22 maxlen: 22
192.140.230.0/24 maxlen: 24
193.36.96.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:86:36:c1:57:df:01:bd:6e:6e:21:f5:ac:f0:63:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78678bd654ca6b10a5c773bc269754dc234cfd5
Validity
Not Before: Sep 30 08:54:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c02a83a577765d03de43ad5f4db92e80f03be80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:77:52:36:1f:21:7d:33:4b:63:90:9f:8f:9b:
cf:09:db:23:6f:be:e2:ef:1c:89:a4:fd:15:2b:b3:
fc:66:af:f7:2f:6f:7d:0d:14:d8:f9:57:fa:5a:5a:
21:4e:76:fe:01:47:83:8f:64:13:e3:a6:6b:ab:c0:
6b:a9:bb:9f:ab:dc:11:eb:c3:10:af:f4:97:a0:f7:
77:c9:71:a6:16:cd:86:7d:e6:a6:5d:39:c1:80:84:
80:72:e6:4f:8c:38:00:76:fc:71:e7:6f:2a:ea:b9:
85:05:76:a8:61:d3:65:59:9b:8e:43:cf:8a:9b:92:
76:da:52:e1:6d:d9:53:5e:a4:8f:b7:f2:dc:6f:e1:
03:ab:f4:00:aa:ca:32:35:39:9e:11:26:f9:8d:68:
a6:ad:92:8a:3e:fe:eb:08:60:ae:fd:d4:ba:5f:4c:
d7:18:4a:f4:eb:95:15:f5:4b:49:c4:4a:44:d8:fb:
cc:1c:5f:cf:15:3a:43:f2:02:6f:11:42:b9:80:84:
c5:5a:9f:12:d6:fc:07:3c:62:f3:bd:8e:2a:7c:7c:
cc:68:b8:88:aa:c8:00:5a:a5:18:08:00:a0:4d:9e:
64:43:dd:03:a6:f7:08:5a:5f:30:2c:69:24:04:9d:
ed:03:4d:73:03:36:ee:6b:2e:e0:0f:f9:58:3a:49:
eb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:02:A8:3A:57:77:65:D0:3D:E4:3A:D5:F4:DB:92:E8:0F:03:BE:80
X509v3 Authority Key Identifier:
keyid:B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/TAKoOld3ZdA95DrV9NuS6A8DvoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.244.0/22
89.38.216.0/21
103.95.124.0/22
103.115.182.0/23
103.132.4.0/22
103.204.220.0/23
185.124.100.0/22
185.250.76.0/22
192.140.230.0/24
193.36.96.0/22
Signature Algorithm: sha256WithRSAEncryption
96:2d:0a:5d:76:ae:95:55:97:8a:1b:d7:29:f2:5e:57:c1:e0:
8f:23:0d:b4:56:6c:e1:59:96:1f:b2:5c:11:4f:3e:99:39:72:
f2:19:25:81:30:86:af:62:32:2c:f1:f9:fb:1d:33:8c:25:79:
49:8d:0b:0d:c2:6e:5e:b0:60:d0:d0:63:28:9f:0c:b5:0e:55:
1b:c0:db:d1:b8:48:9f:38:3d:d0:db:bf:ab:50:cf:90:db:ef:
4c:6d:8f:00:e7:de:54:ff:d5:b3:27:aa:a4:6e:34:58:54:0e:
ba:1a:1e:6d:81:c0:c6:70:ae:43:e4:87:58:6f:91:fb:d6:7a:
19:da:e4:90:03:a7:b0:da:a2:64:5c:6d:bd:a5:e2:f1:07:46:
bf:99:23:e6:0a:eb:fd:25:66:88:07:e0:0f:5d:1b:5d:16:00:
bc:8f:16:f0:00:6a:6b:5d:33:e5:83:0a:ff:21:17:9d:bd:e5:
f7:de:58:8a:6b:6a:1a:95:27:07:e2:ec:c8:50:ec:9a:0f:cf:
b0:53:0a:b3:9a:a9:c8:47:1d:3b:17:40:77:5b:11:8d:32:c7:
e9:60:73:59:42:4e:ab:8a:ff:95:e4:5a:e5:ee:b2:87:17:7e:
0e:a6:df:81:c3:10:0e:af:d5:57:a9:65:35:80:88:96:06:cd:
ee:d6:f4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:20:04 2026 by rpki-client