Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/_T4q5Hpk4ipyTG7AMNyDdoKOT50.roa
File: _T4q5Hpk4ipyTG7AMNyDdoKOT50.roa (raw, json)
Hash identifier: Lr+JB8T/f7L7H1ix+TlIyXnba9tt1bZ6qL8/Kz5nqFg=
Subject key identifier: FD:3E:2A:E4:7A:64:E2:2A:72:4C:6E:C0:30:DC:83:76:82:8E:4F:9D
Certificate issuer: /CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Certificate serial: 019F38247FDA08C496922BC910146FDD5D9C
Authority key identifier: 70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/_T4q5Hpk4ipyTG7AMNyDdoKOT50.roa
Signing time: Mon 06 Jul 2026 15:55:43 +0000
ROA not before: Mon 06 Jul 2026 15:55:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212219
IP address blocks: 80.253.246.0/24 maxlen: 24
91.151.88.0/24 maxlen: 24
91.151.89.0/24 maxlen: 24
91.151.95.0/24 maxlen: 24
212.108.107.0/24 maxlen: 24
213.142.148.0/24 maxlen: 24
213.142.151.0/24 maxlen: 24
213.142.159.0/24 maxlen: 24
2a0f:bf00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:38:24:7f:da:08:c4:96:92:2b:c9:10:14:6f:dd:5d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Validity
Not Before: Jul 6 15:55:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd3e2ae47a64e22a724c6ec030dc8376828e4f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d7:89:1f:4d:ed:50:fb:4a:6a:0a:38:16:02:
66:dc:72:c4:48:a7:2f:0f:b4:f7:3f:c6:47:bb:d5:
bd:73:48:96:b1:06:58:a6:67:d9:ed:2d:c6:bd:2c:
1e:82:42:b7:93:ae:db:79:92:65:2d:d7:01:0e:13:
4a:1d:1b:9e:95:ad:57:0c:d7:ff:c1:68:37:76:3a:
b3:6a:88:7b:38:21:18:91:92:9e:6b:e3:be:ca:04:
13:8c:88:d6:e4:6c:f1:83:a8:6a:8d:2f:06:74:30:
00:41:d8:43:c2:67:52:03:92:35:e6:17:bb:53:24:
dd:b0:a9:05:04:09:53:7e:9d:a4:f1:6b:04:a2:3f:
b3:74:1e:6d:f0:4e:43:e8:7b:46:40:6d:d5:3d:29:
d7:e3:8f:28:a2:7d:f2:cd:95:32:98:fe:c1:27:12:
3b:cb:78:55:a0:e8:19:7c:38:94:76:9d:ea:01:96:
4e:bf:08:92:79:ee:1e:97:52:ce:d9:73:96:b8:22:
eb:e4:8e:13:02:ca:53:99:d2:67:68:d0:6a:1b:3a:
b6:1c:5d:6a:a4:75:be:d5:4b:b3:07:90:b4:9d:49:
cb:e5:57:54:80:39:c2:46:d9:a0:58:5e:ef:74:2a:
be:f6:25:d4:ec:fa:f1:28:51:9e:f3:0a:c7:cf:01:
c0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3E:2A:E4:7A:64:E2:2A:72:4C:6E:C0:30:DC:83:76:82:8E:4F:9D
X509v3 Authority Key Identifier:
keyid:70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/_T4q5Hpk4ipyTG7AMNyDdoKOT50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.246.0/24
91.151.88.0/23
91.151.95.0/24
212.108.107.0/24
213.142.148.0/24
213.142.151.0/24
213.142.159.0/24
IPv6:
2a0f:bf00::/29
Signature Algorithm: sha256WithRSAEncryption
74:d0:8f:d9:28:e8:76:d7:74:fc:af:fd:c1:0f:81:0c:13:5d:
3b:61:71:3a:bb:3d:1a:73:fe:fa:34:0e:89:0f:42:57:cf:55:
ca:dd:ad:7c:52:91:a2:a1:c3:62:63:c8:e5:03:bd:92:ed:19:
ba:a5:2e:a3:69:dc:67:15:85:87:6c:71:7a:7f:1c:fe:ba:7a:
fa:59:83:36:5e:0f:77:7d:bd:f9:86:16:02:cf:a4:d5:82:71:
a1:3b:f9:fd:97:02:b3:6f:9a:df:32:4b:f0:b3:d9:de:49:7c:
50:d7:a7:1e:39:c6:0b:79:54:cc:70:91:a0:17:48:3c:28:a8:
46:c3:03:2b:83:70:6a:3d:c9:23:54:ae:0a:f3:72:a2:7f:13:
c5:4a:bf:17:49:71:92:b7:19:fd:a6:f4:48:14:77:f5:fe:9a:
41:d1:22:87:99:be:9a:91:09:5c:53:2c:70:5c:94:f6:e1:0e:
66:4f:06:dd:2d:16:cf:af:9c:55:2a:de:87:3f:51:f4:85:79:
b8:c8:df:3a:19:d3:ae:f6:95:48:50:3e:21:47:1f:5c:eb:15:
3a:e4:26:02:fe:8d:72:59:69:c9:c7:dc:18:87:2a:9d:f7:8b:
87:79:2f:63:87:e4:ce:f9:42:ca:9a:5a:3e:63:85:de:1c:28:
fb:a5:6f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:19:57 2026 by rpki-client