Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/TkiqxLUKP4U1n7yfvHpWrci9tnI.roa
File: TkiqxLUKP4U1n7yfvHpWrci9tnI.roa (raw, json)
Hash identifier: 1339+2DbGaq+Hqm3l4u1jJwhaXEFeXr8UTm2q7v2Ekg=
Subject key identifier: 4E:48:AA:C4:B5:0A:3F:85:35:9F:BC:9F:BC:7A:56:AD:C8:BD:B6:72
Certificate issuer: /CN=83479514959397c5e3fa76e1ea495e8e1f6c319b
Certificate serial: 01A0851BFE442EA7EE2CA05EED702A48AD38
Authority key identifier: 83:47:95:14:95:93:97:C5:E3:FA:76:E1:EA:49:5E:8E:1F:6C:31:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/TkiqxLUKP4U1n7yfvHpWrci9tnI.roa
Signing time: Wed 09 Sep 2026 07:39:59 +0000
ROA not before: Wed 09 Sep 2026 07:39:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13030
IP address blocks: 37.17.232.0/21 maxlen: 21
45.80.136.0/22 maxlen: 24
45.143.188.0/22 maxlen: 22
77.74.80.0/21 maxlen: 21
77.109.128.0/18 maxlen: 18
77.109.128.0/19 maxlen: 19
77.109.160.0/19 maxlen: 19
80.253.88.0/21 maxlen: 21
81.6.32.0/20 maxlen: 20
82.197.160.0/19 maxlen: 19
82.197.160.0/20 maxlen: 20
82.197.176.0/20 maxlen: 20
85.195.192.0/18 maxlen: 18
85.195.192.0/20 maxlen: 20
85.195.208.0/20 maxlen: 20
85.195.224.0/19 maxlen: 19
85.195.224.0/20 maxlen: 20
85.195.240.0/20 maxlen: 20
109.202.192.0/19 maxlen: 19
141.195.80.0/20 maxlen: 20
185.72.64.0/22 maxlen: 22
185.137.172.0/22 maxlen: 22
185.183.192.0/22 maxlen: 22
185.201.248.0/22 maxlen: 22
185.246.104.0/22 maxlen: 22
193.47.153.0/24 maxlen: 24
193.223.80.0/20 maxlen: 20
195.134.128.0/19 maxlen: 19
212.51.128.0/19 maxlen: 19
212.51.128.0/20 maxlen: 20
212.51.144.0/20 maxlen: 20
213.144.128.0/19 maxlen: 19
213.144.128.0/20 maxlen: 20
213.144.144.0/20 maxlen: 20
217.118.192.0/21 maxlen: 21
217.118.200.0/22 maxlen: 22
2001:1620::/30 maxlen: 32
2a02:168::/30 maxlen: 30
2a02:168::/32 maxlen: 32
2a02:169::/32 maxlen: 32
2a07:600::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:85:1b:fe:44:2e:a7:ee:2c:a0:5e:ed:70:2a:48:ad:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83479514959397c5e3fa76e1ea495e8e1f6c319b
Validity
Not Before: Sep 9 07:39:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e48aac4b50a3f85359fbc9fbc7a56adc8bdb672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:41:43:80:e1:f0:5d:b3:61:59:ed:dd:40:ed:
2e:8c:8f:9b:c1:a6:a5:03:13:ce:f6:e5:d6:58:ec:
cf:32:53:19:5c:9b:51:62:15:3e:9f:7d:4e:a9:26:
f1:aa:96:93:10:30:4b:94:82:23:af:de:f6:52:ce:
bf:51:83:89:c2:aa:07:fd:33:af:dc:64:f0:21:b5:
c5:65:6c:1f:6d:6e:f4:84:6f:fb:ce:24:36:74:4b:
c1:d7:09:cc:72:52:ea:dd:c0:4b:e5:06:e0:f0:9a:
11:90:72:2d:66:8f:f6:63:82:86:07:9b:c5:fc:d1:
fd:5a:52:da:a7:da:80:c7:f3:d4:10:2b:3c:02:cd:
6d:22:96:5f:cb:39:5c:54:b6:12:a4:c3:d5:26:09:
ff:a6:1a:22:01:1b:b8:e4:fd:86:db:86:42:7b:81:
cb:0c:42:04:ca:82:53:1f:24:6e:d8:de:6b:1d:2e:
39:91:f2:7f:39:83:db:7e:3e:87:5b:fe:e3:d5:63:
bf:86:2d:60:24:91:44:52:d4:c3:51:bb:30:81:2f:
65:ef:b3:7d:ec:48:22:50:a2:08:27:e1:8e:c3:30:
3f:46:bb:7c:b8:cf:90:0a:77:98:ef:a1:e5:86:53:
e0:91:61:e3:8e:fa:ae:fc:b0:d0:1d:ca:43:53:d3:
15:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:48:AA:C4:B5:0A:3F:85:35:9F:BC:9F:BC:7A:56:AD:C8:BD:B6:72
X509v3 Authority Key Identifier:
keyid:83:47:95:14:95:93:97:C5:E3:FA:76:E1:EA:49:5E:8E:1F:6C:31:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/TkiqxLUKP4U1n7yfvHpWrci9tnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.17.232.0/21
45.80.136.0/22
45.143.188.0/22
77.74.80.0/21
77.109.128.0/18
80.253.88.0/21
81.6.32.0/20
82.197.160.0/19
85.195.192.0/18
109.202.192.0/19
141.195.80.0/20
185.72.64.0/22
185.137.172.0/22
185.183.192.0/22
185.201.248.0/22
185.246.104.0/22
193.47.153.0/24
193.223.80.0/20
195.134.128.0/19
212.51.128.0/19
213.144.128.0/19
217.118.192.0-217.118.203.255
IPv6:
2001:1620::/30
2a02:168::/30
2a07:600::/29
Signature Algorithm: sha256WithRSAEncryption
07:79:98:be:b0:57:08:80:c3:a5:5e:25:81:14:14:7e:ed:45:
ea:ca:0f:c2:35:96:3c:34:ed:6d:42:3d:05:d5:9d:0a:a3:7b:
44:62:b2:78:77:be:a6:f3:dc:23:62:43:3d:1c:8e:47:69:42:
cb:d5:65:dc:2c:24:30:58:72:1b:ca:47:75:a2:7b:50:89:0a:
ef:86:26:c5:1e:b4:f5:69:27:47:f7:30:e3:94:51:e3:04:85:
cc:e6:bc:0e:e7:bc:ed:af:71:d9:21:10:04:5f:41:f5:05:2b:
41:fb:13:c5:74:32:39:23:fe:07:c1:6b:bf:a5:e9:b4:94:a4:
ed:d4:6e:52:99:7b:29:82:57:82:17:7b:e3:84:32:8a:e1:8b:
e1:76:fa:95:4b:5b:fc:09:cb:0e:c8:13:2a:3b:81:e0:c0:de:
54:76:2f:64:42:9d:fa:51:7a:8f:a3:ac:66:9f:10:27:1a:16:
2c:1b:0b:cd:62:74:ec:fd:97:a7:58:0e:3f:47:4d:bc:5f:fb:
3c:73:8d:e3:bf:30:60:77:af:a6:2b:56:c6:31:68:95:5c:c9:
fc:00:58:a8:25:d4:37:3a:0f:8e:12:01:06:88:d1:70:d6:4f:
89:cb:72:82:3b:5f:77:4d:f5:a3:4b:73:14:a9:1f:f1:18:db:
b7:92:5f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:57:41 2026 by rpki-client