Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Tair3HPatexSQT1kodzmON8Yc3k.roa
File: Tair3HPatexSQT1kodzmON8Yc3k.roa (raw, json)
Hash identifier: 8s7GSj75DAIgaLu1D2SOBDnCzK75ahVFODqM94PdR9g=
Subject key identifier: 4D:A8:AB:DC:73:DA:B5:EC:52:41:3D:64:A1:DC:E6:38:DF:18:73:79
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019FE07A7F6EDDFCAD623D78FAFCEE9B8EC1
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Tair3HPatexSQT1kodzmON8Yc3k.roa
Signing time: Sat 08 Aug 2026 08:25:51 +0000
ROA not before: Sat 08 Aug 2026 08:25:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399955
IP address blocks: 82.197.194.0/23 maxlen: 24
82.197.198.0/23 maxlen: 24
82.197.206.0/23 maxlen: 24
84.245.20.0/23 maxlen: 24
84.245.24.0/23 maxlen: 24
84.245.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e0:7a:7f:6e:dd:fc:ad:62:3d:78:fa:fc:ee:9b:8e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Aug 8 08:25:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4da8abdc73dab5ec52413d64a1dce638df187379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8b:ef:1e:63:24:b2:1c:9b:a3:24:fa:d4:08:
14:d0:62:99:57:97:95:fb:3d:61:ad:c8:cc:0d:51:
cd:e2:3f:e0:f3:95:59:d1:48:c1:08:0d:1c:e7:ae:
48:fe:d6:40:8f:20:fe:c6:b6:c2:d2:7a:fe:40:be:
a1:4c:47:af:78:9b:ff:1c:21:1c:01:87:ec:3a:59:
85:ed:47:48:46:69:29:30:1e:f3:64:0a:bd:ab:5e:
b4:ad:89:9b:7a:b3:f4:67:ab:0c:96:c4:76:ec:28:
78:80:cd:4a:84:09:a6:34:2b:12:07:36:b4:c3:a4:
09:02:95:ed:1c:e6:e2:93:6b:a6:25:d3:e8:3a:48:
b3:c8:46:46:a1:77:b2:b4:94:c8:3c:ce:ec:4d:3a:
c1:92:51:1d:68:a9:aa:5f:4d:4d:4a:d7:ee:a2:15:
24:9d:a8:7e:d1:4e:66:d9:02:fd:d3:d8:73:04:21:
01:d9:14:26:f5:24:3a:5d:a5:3c:2a:a2:9f:3f:7c:
7f:b6:89:17:a0:aa:6e:fe:9d:b8:7c:b9:de:4f:7a:
7d:9c:75:72:9e:a5:86:0c:7a:db:7b:bc:35:c5:fb:
c6:9a:05:16:85:96:66:79:9c:a7:44:3a:e9:5d:a9:
d8:5d:40:c2:5c:50:56:27:14:b6:38:41:5b:ee:49:
5c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A8:AB:DC:73:DA:B5:EC:52:41:3D:64:A1:DC:E6:38:DF:18:73:79
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Tair3HPatexSQT1kodzmON8Yc3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.197.194.0/23
82.197.198.0/23
82.197.206.0/23
84.245.20.0/23
84.245.24.0/23
84.245.30.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:9c:68:75:3d:1c:d3:3c:40:5f:fd:a2:3d:6f:bf:8c:ac:11:
26:14:3d:b7:a0:9a:dc:4f:83:0b:56:87:c9:14:24:e5:35:41:
b2:cc:ef:55:c6:3e:3e:5e:b9:b5:1f:8a:0c:1a:ef:4f:57:ce:
6c:02:0c:e8:4a:bc:40:f3:2e:9c:f9:5c:87:6d:da:62:b1:e1:
40:27:54:b0:29:af:59:b9:e0:92:38:a8:c4:bf:13:75:10:4e:
b1:6b:a1:61:25:74:f5:a8:21:be:b3:dc:8a:da:72:8b:80:07:
1a:13:76:fc:77:45:0d:49:17:e1:41:a7:05:f0:89:95:d9:8f:
f9:57:5f:a9:4d:03:84:b6:8c:c2:95:56:b8:13:3e:83:a4:cc:
f2:b3:71:6b:d9:66:86:8e:a9:40:ce:59:25:44:bb:2b:71:8b:
d1:a4:1a:2a:09:af:bd:ae:b8:70:ae:65:d3:70:d6:0d:3e:ab:
5d:8f:54:b2:fb:00:94:0e:47:22:b7:2d:1d:3d:d9:42:4a:06:
0e:da:ae:4d:b1:70:d3:91:44:b9:18:27:2f:7d:43:1d:7a:cd:
a0:de:a5:ba:64:52:11:60:d1:4f:38:5c:60:98:f0:0a:ba:5d:
19:e6:d7:66:78:e4:3b:bc:bf:70:0a:f8:e8:3d:6c:d5:d4:1d:
09:be:dc:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:28:43 2026 by rpki-client