Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/TDn2Si0wredvySS4eb6YcQsXGoA.roa
File: TDn2Si0wredvySS4eb6YcQsXGoA.roa (raw, json)
Hash identifier: PViZzYWq9wpVr0Wiz/5xTXadoeHO740enY0H0kd7OSI=
Subject key identifier: 4C:39:F6:4A:2D:30:AD:E7:6F:C9:24:B8:79:BE:98:71:0B:17:1A:80
Certificate issuer: /CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Certificate serial: 019FAD4AE42961774C8EAE78718358D767E6
Authority key identifier: D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/TDn2Si0wredvySS4eb6YcQsXGoA.roa
Signing time: Wed 29 Jul 2026 09:53:14 +0000
ROA not before: Wed 29 Jul 2026 09:53:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197537
IP address blocks: 77.93.88.0/24 maxlen: 24
85.149.192.0/20 maxlen: 24
85.149.198.0/24 maxlen: 24
85.149.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:4a:e4:29:61:77:4c:8e:ae:78:71:83:58:d7:67:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Validity
Not Before: Jul 29 09:53:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c39f64a2d30ade76fc924b879be98710b171a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:be:55:8b:cc:47:32:29:d8:ba:fc:e9:1f:a2:
af:82:a1:df:69:a9:0b:72:ec:ce:1d:75:f8:7c:78:
8e:76:b5:e7:b2:49:3b:60:d2:b7:3f:4f:39:23:e2:
12:48:98:dd:5e:2d:4d:e8:65:13:0f:71:21:01:7b:
40:d0:b4:08:fd:0c:b4:44:9b:4e:6c:bd:9e:a0:d1:
e4:1b:ce:9a:5e:f3:94:6a:d6:d6:93:90:f7:f4:67:
34:52:16:0a:cc:57:a7:62:94:16:b7:a7:8f:3f:aa:
31:57:30:15:cd:d8:92:d9:21:0b:ad:9d:f4:04:d6:
f4:a5:40:1c:61:5a:93:a6:cd:f6:21:6f:0b:64:64:
b3:04:6a:fb:ff:e9:27:8e:a7:53:45:49:0c:9f:de:
ba:48:c2:ab:d2:06:cc:91:96:1e:72:f6:19:53:83:
cb:46:53:48:fb:4f:48:e1:e3:a2:4a:7f:43:52:bb:
d0:14:c3:b5:8a:d6:f4:86:d7:2e:4b:7f:b0:a3:4b:
c1:c1:c9:84:11:2d:56:36:c0:1f:26:01:4e:c1:77:
a3:28:51:4e:c6:50:0a:af:3e:9a:f4:09:89:59:9f:
2d:e0:06:2e:15:8a:ea:90:50:f9:1c:0a:d5:4f:6a:
b8:0f:70:cf:94:fd:a7:b8:f7:bd:e9:5e:77:95:67:
d4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:39:F6:4A:2D:30:AD:E7:6F:C9:24:B8:79:BE:98:71:0B:17:1A:80
X509v3 Authority Key Identifier:
keyid:D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/TDn2Si0wredvySS4eb6YcQsXGoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.88.0/24
85.149.192.0/20
85.149.221.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:ea:d6:00:e7:cb:73:97:2b:a8:f3:30:5c:f0:f1:19:8f:89:
a8:0a:d2:cc:bf:47:95:4c:e7:b4:63:5d:cf:83:16:af:ce:da:
fb:b4:a6:56:c8:ce:78:3e:48:14:16:89:56:d5:da:4d:1d:0c:
a0:b7:5a:9c:0a:39:6b:99:be:33:94:ab:2f:6d:3f:8b:a5:99:
09:44:d8:b3:2d:39:7d:c2:c9:46:22:00:83:bb:59:dc:f3:03:
fb:50:ac:f4:5e:d6:7a:00:dd:9f:42:b7:ec:2c:f0:b3:d1:dd:
11:3b:53:e6:7c:9e:da:d3:61:40:a2:21:da:23:0e:ed:a0:0a:
f2:68:32:fe:73:b2:fe:6b:58:64:96:55:7e:66:57:94:61:00:
62:36:e6:6c:05:58:c5:8a:87:ff:89:85:50:cf:c6:b4:26:81:
71:f8:7e:66:1b:58:50:ed:cb:97:d1:63:48:42:c1:c5:38:5c:
1e:f1:5b:c6:d4:6e:80:87:ec:78:b0:07:6d:7c:b3:ac:ff:01:
11:76:7a:97:47:86:c0:9d:a1:bd:83:43:61:82:bd:cd:ff:90:
70:d7:f2:d8:01:ff:80:45:42:5b:9f:e7:b0:e0:51:9c:a2:d6:
59:39:48:6c:02:ea:cd:e6:ff:61:96:2a:a9:6b:71:6a:f3:5a:
a5:37:34:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:48:55 2026 by rpki-client