Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/tCx39w4ce8ocJoURLSQYH96BA-U.roa
File: tCx39w4ce8ocJoURLSQYH96BA-U.roa (raw, json)
Hash identifier: nth+9XJdY88Qf83y8eRuUlrU3tnd/q7bmJNmOnIcuWk=
Subject key identifier: B4:2C:77:F7:0E:1C:7B:CA:1C:26:85:11:2D:24:18:1F:DE:81:03:E5
Certificate issuer: /CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Certificate serial: 01A1A6C51DFDBBF6F871344E9B44D6DFEE47
Authority key identifier: C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/tCx39w4ce8ocJoURLSQYH96BA-U.roa
Signing time: Wed 04 Nov 2026 13:34:58 +0000
ROA not before: Wed 04 Nov 2026 13:34:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.155.240.0/24 maxlen: 24
45.155.241.0/24 maxlen: 24
194.143.205.0/24 maxlen: 24
194.143.207.0/24 maxlen: 24
194.143.209.0/24 maxlen: 24
194.143.217.0/24 maxlen: 24
194.143.218.0/24 maxlen: 24
194.143.221.0/24 maxlen: 24
194.143.222.0/24 maxlen: 24
194.143.223.0/24 maxlen: 24
195.114.192.0/24 maxlen: 24
195.114.195.0/24 maxlen: 24
195.114.196.0/24 maxlen: 24
195.114.197.0/24 maxlen: 24
195.114.198.0/24 maxlen: 24
195.114.200.0/24 maxlen: 24
195.114.202.0/24 maxlen: 24
195.114.203.0/24 maxlen: 24
213.220.0.0/24 maxlen: 24
213.220.2.0/24 maxlen: 24
213.220.4.0/24 maxlen: 24
213.220.11.0/24 maxlen: 24
213.220.13.0/24 maxlen: 24
213.220.14.0/24 maxlen: 24
213.220.18.0/24 maxlen: 24
213.220.41.0/24 maxlen: 24
213.220.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:c5:1d:fd:bb:f6:f8:71:34:4e:9b:44:d6:df:ee:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Validity
Not Before: Nov 4 13:34:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b42c77f70e1c7bca1c2685112d24181fde8103e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ed:80:56:0a:28:54:40:50:84:a1:db:e4:c4:
0b:e5:7c:24:c8:9e:ad:4a:40:46:e8:8c:ab:d1:50:
d0:bb:38:9c:af:7d:e5:f6:8e:ae:05:6e:c0:c6:4c:
fd:7e:49:04:fe:69:6c:a4:65:be:bb:b3:c3:09:f8:
1e:8d:86:e7:26:4f:59:0f:32:5a:e0:1e:7c:13:fc:
1f:2e:b9:f5:93:8b:ee:bc:c6:58:62:bb:22:c3:4f:
3a:e7:45:c8:e9:d4:74:9e:b4:35:09:f2:4a:93:f1:
8e:21:36:da:c4:45:1c:1b:79:0c:45:3a:4d:65:01:
e9:c4:d8:e7:08:8c:5f:50:f7:ed:8e:50:12:f3:6e:
a1:78:bd:c8:df:79:1d:49:9c:93:91:bc:6b:0e:9d:
0b:41:94:09:a8:6c:a8:b6:c3:c8:a4:aa:db:dc:d0:
fe:e3:86:0f:83:7c:66:58:1d:52:e5:5c:15:56:e9:
b3:01:97:b2:9a:cc:13:22:a5:20:fa:7e:79:63:68:
ec:77:4c:46:ec:c8:d6:32:80:34:da:da:c1:89:1c:
1e:19:da:9f:df:67:7c:04:46:2f:33:0a:a4:79:37:
67:12:52:91:a9:94:39:08:fe:a7:23:e6:92:fa:40:
43:9a:e9:6b:44:ec:c3:39:75:32:d2:4f:07:da:70:
8d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:2C:77:F7:0E:1C:7B:CA:1C:26:85:11:2D:24:18:1F:DE:81:03:E5
X509v3 Authority Key Identifier:
keyid:C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/tCx39w4ce8ocJoURLSQYH96BA-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.240.0/23
194.143.205.0/24
194.143.207.0/24
194.143.209.0/24
194.143.217.0-194.143.218.255
194.143.221.0-194.143.223.255
195.114.192.0/24
195.114.195.0-195.114.198.255
195.114.200.0/24
195.114.202.0/23
213.220.0.0/24
213.220.2.0/24
213.220.4.0/24
213.220.11.0/24
213.220.13.0-213.220.14.255
213.220.18.0/24
213.220.41.0/24
213.220.50.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:21:f2:36:0b:e7:51:1d:27:82:d7:3a:09:26:da:60:21:0c:
7d:4a:bc:68:45:b2:d9:12:d9:a1:a5:7a:d1:8a:fb:1d:23:73:
e0:f2:73:33:d0:8f:f2:af:a4:9b:d9:c7:4d:40:d4:b4:3e:e5:
5c:67:7a:08:c8:88:d6:23:77:a3:a4:3e:ef:c5:fc:a2:ed:68:
68:f3:28:f4:10:4b:6e:8e:81:cf:3e:7b:90:c2:01:8e:fb:1a:
f9:17:19:49:14:85:68:15:95:a6:46:83:45:36:58:0c:89:63:
20:1c:42:7f:3b:fe:14:5e:c8:73:2b:5d:a3:26:71:3d:43:14:
d5:52:8f:f2:ee:15:6a:fa:17:a4:13:3a:b7:2d:86:04:9d:a0:
9a:28:88:48:7c:9b:d4:5a:33:fc:18:0a:2e:7a:ce:8d:93:9c:
8f:0c:bd:97:5b:d4:5c:1b:8e:2a:0d:7b:6a:53:16:f8:96:30:
19:7a:21:81:39:77:17:b7:04:ec:2b:99:eb:49:4f:40:92:4f:
48:8a:55:86:b9:d9:e5:38:92:7e:e7:b9:f7:27:7d:2f:c5:f6:
14:12:4f:11:4b:1d:53:9f:2b:11:74:9c:2a:fb:a7:3c:8d:6f:
a8:02:03:6e:cd:60:a4:fe:ac:61:d1:6f:92:3c:19:0e:5b:75:
92:a2:c4:87
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgISAaGmxR39u/b4cTROm0TW3+5HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwNjBkNDZkMWQ4MDQ2YjRkNzRlNGQ4MTU4MThjOGUzNjU5
ZWRiZTkwHhcNMjYxMTA0MTMzNDU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDJjNzdmNzBlMWM3YmNhMWMyNjg1MTEyZDI0MTgxZmRlODEwM2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO2AVgooVEBQhKHb5MQL5XwkyJ6t
SkBG6Iyr0VDQuzicr33l9o6uBW7Axkz9fkkE/mlspGW+u7PDCfgejYbnJk9ZDzJa
4B58E/wfLrn1k4vuvMZYYrsiw08650XI6dR0nrQ1CfJKk/GOITbaxEUcG3kMRTpN
ZQHpxNjnCIxfUPftjlAS826heL3I33kdSZyTkbxrDp0LQZQJqGyotsPIpKrb3ND+
44YPg3xmWB1S5VwVVumzAZeymswTIqUg+n55Y2jsd0xG7MjWMoA02trBiRweGdqf
32d8BEYvMwqkeTdnElKRqZQ5CP6nI+aS+kBDmulrROzDOXUy0k8H2nCNDQIDAQAB
o4IClDCCApAwHQYDVR0OBBYEFLQsd/cOHHvKHCaFES0kGB/egQPlMB8GA1UdIwQY
MBaAFMBg1G0dgEa0105NgVgYyONlntvpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0dEVWJSMkFSclRYVGsyQldCakk0MldlMi1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt
MWRkZWM0Y2NlMjRjLzEvdEN4Mzl3NGNlOG9jSm9VUkxTUVlIOTZCQS1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj
LzEvd0dEVWJSMkFSclRYVGsyQldCakk0MldlMi1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGpBggrBgEFBQcBBwEB/wSBmTCBljCBkwQCAAEwgYwDBAEt
m/ADBADCj80DBADCj88DBADCj9EwDAMEAMKP2QMEAMKP2jAMAwQAwo/dAwQFwo/A
AwQAw3LAMAwDBADDcsMDBADDcsYDBADDcsgDBAHDcsoDBADV3AADBADV3AIDBADV
3AQDBADV3AswDAMEANXcDQMEANXcDgMEANXcEgMEANXcKQMEANXcMjANBgkqhkiG
9w0BAQsFAAOCAQEAriHyNgvnUR0ngtc6CSbaYCEMfUq8aEWy2RLZoaV60Yr7HSNz
4PJzM9CP8q+km9nHTUDUtD7lXGd6CMiI1iN3o6Q+78X8ou1oaPMo9BBLbo6Bzz57
kMIBjvsa+RcZSRSFaBWVpkaDRTZYDIljIBxCfzv+FF7IcytdoyZxPUMU1VKP8u4V
avoXpBM6ty2GBJ2gmiiISHyb1Foz/BgKLnrOjZOcjwy9l1vUXBuOKg17alMW+JYw
GXohgTl3F7cE7CuZ60lPQJJPSIpVhrnZ5TiSfue59yd9L8X2FBJPEUsdU58rEXSc
KvunPI1vqAIDbs1gpP6sYdFvkjwZDlt1kqLEhw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:05:31 2026 by rpki-client