Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/TNy_9SKg-WtLyEM2Do_ynjdIEOQ.roa
File: TNy_9SKg-WtLyEM2Do_ynjdIEOQ.roa (raw, json)
Hash identifier: ChTh0GWbyBI0l1Ylw9I7KeZ31wn80N+QMVYrCOEnyR4=
Subject key identifier: 4C:DC:BF:F5:22:A0:F9:6B:4B:C8:43:36:0E:8F:F2:9E:37:48:10:E4
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01A0497B9C4DB5B933A468446FFAD1CEC5DC
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/TNy_9SKg-WtLyEM2Do_ynjdIEOQ.roa
Signing time: Fri 28 Aug 2026 17:47:12 +0000
ROA not before: Fri 28 Aug 2026 17:47:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62240
IP address blocks: 45.80.157.0/24 maxlen: 24
45.144.226.0/24 maxlen: 24
185.192.69.0/24 maxlen: 24
185.198.240.0/24 maxlen: 24
185.198.243.0/24 maxlen: 24
185.217.117.0/24 maxlen: 24
188.213.203.0/24 maxlen: 24
193.218.35.0/24 maxlen: 24
213.109.151.0/24 maxlen: 24
217.19.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 09:13:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:49:7b:9c:4d:b5:b9:33:a4:68:44:6f:fa:d1:ce:c5:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Aug 28 17:47:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4cdcbff522a0f96b4bc843360e8ff29e374810e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f8:c3:89:66:bd:94:a1:3e:eb:8a:4b:b8:54:
a5:8a:41:b8:91:10:44:33:b3:a7:0b:49:f1:13:cb:
e9:d5:d1:01:20:c0:43:89:f6:9c:09:14:55:02:7b:
bb:c6:f1:d7:1e:dc:fb:78:0b:2e:ba:db:be:86:c1:
da:fb:26:0e:21:d4:a7:c9:7b:f6:86:b6:82:49:2c:
e9:81:e8:bc:95:a5:97:79:eb:42:50:77:21:41:d0:
5a:6c:eb:1a:3b:68:72:1a:3e:1b:d5:ed:ae:30:d2:
c2:da:79:7a:04:14:fc:52:e6:ef:ae:bd:9c:34:c1:
7f:e8:15:34:af:54:72:15:d7:27:03:0e:ec:6e:72:
83:4e:d4:cf:a2:12:1a:f0:84:63:29:d2:bb:3b:1c:
60:54:15:2a:33:22:f9:4f:2f:88:9e:9c:1c:a7:ad:
5b:29:83:30:6f:04:52:91:9f:0a:8c:ea:3a:80:c0:
46:2a:17:60:e5:e7:1d:a9:6e:7b:15:8f:29:99:37:
05:4b:15:4e:39:6c:d2:31:d5:04:5e:4e:b2:75:a3:
2c:ce:d0:22:ba:f5:19:77:8b:9c:4c:c6:7d:6e:4a:
98:66:fb:97:13:5f:44:89:21:11:ef:97:cd:6b:5d:
4c:3d:3a:9f:67:f9:cc:85:31:d3:2e:47:42:fc:75:
2b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DC:BF:F5:22:A0:F9:6B:4B:C8:43:36:0E:8F:F2:9E:37:48:10:E4
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/TNy_9SKg-WtLyEM2Do_ynjdIEOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.157.0/24
45.144.226.0/24
185.192.69.0/24
185.198.240.0/24
185.198.243.0/24
185.217.117.0/24
188.213.203.0/24
193.218.35.0/24
213.109.151.0/24
217.19.26.0/24
Signature Algorithm: sha256WithRSAEncryption
16:3f:5a:03:6a:73:a2:8c:32:1e:2c:98:30:82:0c:2f:4f:40:
95:b8:66:74:71:6f:1a:63:88:d2:4c:d4:ae:d3:8a:df:95:9e:
f4:af:c3:50:72:e3:44:34:1d:95:4b:29:1f:73:14:59:4f:71:
80:c9:7a:66:b9:03:64:8b:0f:72:e5:e1:3b:b7:6d:ad:c5:57:
7c:48:3a:6c:6a:ee:59:91:e8:11:cf:56:44:04:ca:8b:46:05:
51:34:86:d2:71:c6:d8:f3:ec:d4:ae:23:cb:30:bb:0e:72:2a:
8e:9a:20:9e:de:4e:9a:d4:e8:f3:01:45:47:f0:60:4a:96:1e:
98:a1:9c:53:7f:be:32:e9:95:74:8a:49:e1:92:ee:f8:ed:f4:
e2:a8:af:18:c2:9d:ad:68:0a:e6:d3:ac:48:b6:6b:e7:e1:82:
a0:5d:52:6b:1f:73:83:78:74:98:20:54:cd:81:de:1b:09:46:
eb:0e:3b:82:c3:18:2b:45:5a:d1:fd:08:ac:6a:1a:15:53:c6:
45:13:01:36:0f:32:a2:35:22:79:41:21:f5:08:0b:bc:72:e5:
99:9d:d0:e1:c9:a2:39:c5:b4:5d:b2:38:e4:3c:cc:73:33:8a:
e9:7b:1b:2f:da:4e:b7:de:f0:77:7d:87:9b:ac:82:87:a9:de:
b0:82:07:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 19:15:39 2026 by rpki-client