Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/e-TXm60k7Kx6Oh6yvAUbKW27JU0.roa
File: e-TXm60k7Kx6Oh6yvAUbKW27JU0.roa (raw, json)
Hash identifier: oDcorjp/ifU0UbolQ0ZKZMHDQwFU7Ev3i8BjyydcT+I=
Subject key identifier: 7B:E4:D7:9B:AD:24:EC:AC:7A:3A:1E:B2:BC:05:1B:29:6D:BB:25:4D
Certificate issuer: /CN=4aafe45b30fa7f594925dd395ba14cefb673e2c0
Certificate serial: 019B7759348E84C3117774FF1A1B27853039
Authority key identifier: 4A:AF:E4:5B:30:FA:7F:59:49:25:DD:39:5B:A1:4C:EF:B6:73:E2:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sq_kWzD6f1lJJd05W6FM77Zz4sA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/e-TXm60k7Kx6Oh6yvAUbKW27JU0.roa
Signing time: Thu 01 Jan 2026 02:18:13 +0000
ROA not before: Thu 01 Jan 2026 02:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35032
IP address blocks: 85.236.160.0/20 maxlen: 20
85.236.176.0/20 maxlen: 20
109.124.192.0/19 maxlen: 19
109.124.224.0/21 maxlen: 21
109.124.232.0/21 maxlen: 21
109.124.240.0/21 maxlen: 21
109.124.248.0/22 maxlen: 22
109.124.252.0/23 maxlen: 23
109.124.254.0/23 maxlen: 23
185.224.8.0/22 maxlen: 22
2a13:73c0::/34 maxlen: 34
2a13:73c0:4000::/34 maxlen: 34
2a13:73c0:8000::/34 maxlen: 34
2a13:73c0:c000::/34 maxlen: 34
2a13:73c1::/34 maxlen: 34
2a13:73c1:4000::/34 maxlen: 34
2a13:73c1:8000::/34 maxlen: 34
2a13:73c1:c000::/34 maxlen: 34
2a13:73c2::/31 maxlen: 31
2a13:73c4::/31 maxlen: 31
2a13:73c6::/32 maxlen: 32
2a13:73c7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sq_kWzD6f1lJJd05W6FM77Zz4sA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:34:8e:84:c3:11:77:74:ff:1a:1b:27:85:30:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aafe45b30fa7f594925dd395ba14cefb673e2c0
Validity
Not Before: Jan 1 02:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7be4d79bad24ecac7a3a1eb2bc051b296dbb254d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:31:6c:78:b2:08:36:39:4c:13:01:95:83:85:
10:fa:26:24:0b:a3:94:75:02:c4:c9:b9:c2:86:16:
63:d4:5c:09:a7:ea:38:78:46:81:08:e4:8c:a8:71:
2d:1d:83:35:c8:35:26:5d:69:27:97:c1:a7:0b:2a:
61:b5:c9:fd:bf:56:6b:12:23:d4:a6:8b:af:ea:1c:
ca:b1:27:21:80:62:b6:62:d1:27:92:e6:92:a6:be:
00:94:62:e6:ee:3f:cf:d9:33:da:d0:09:92:50:a6:
c4:77:6e:b4:c1:bf:d7:ec:71:a0:e6:62:51:b5:45:
7f:5e:7b:56:5c:f5:ca:0f:ac:ea:40:e4:f2:d4:9c:
57:1b:a1:d2:a9:17:7d:ee:79:99:b3:e6:76:54:05:
f2:bd:b8:c7:ef:d5:e1:f5:f7:ef:a8:33:85:b2:dd:
b2:f3:f2:17:fc:04:4f:5d:d3:7c:8a:d4:1f:da:87:
44:24:ad:38:ab:a5:52:e0:85:e7:d4:01:7f:3d:29:
5f:15:cc:20:36:fb:49:5d:db:00:a5:09:c0:46:66:
64:63:c5:18:b5:60:d0:a4:f3:63:66:88:40:fb:38:
8a:7e:4a:38:f0:15:9a:b9:bb:5e:35:9b:0b:2c:db:
99:b8:d0:e3:4c:c4:57:32:c3:b3:58:00:f4:d9:88:
ff:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E4:D7:9B:AD:24:EC:AC:7A:3A:1E:B2:BC:05:1B:29:6D:BB:25:4D
X509v3 Authority Key Identifier:
keyid:4A:AF:E4:5B:30:FA:7F:59:49:25:DD:39:5B:A1:4C:EF:B6:73:E2:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sq_kWzD6f1lJJd05W6FM77Zz4sA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/e-TXm60k7Kx6Oh6yvAUbKW27JU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.236.160.0/19
109.124.192.0/18
185.224.8.0/22
IPv6:
2a13:73c0::/29
Signature Algorithm: sha256WithRSAEncryption
95:72:d9:57:52:fe:8c:42:b0:e9:75:ae:5f:a6:d5:9d:37:02:
0d:af:89:86:30:cb:54:87:d2:f3:4f:d9:b0:9e:f6:db:ad:e9:
db:25:83:9f:39:f7:a8:10:41:c7:c9:ae:5e:18:77:d2:d6:2b:
6d:bf:f8:97:d5:37:e9:25:68:9f:89:a7:4f:fb:9b:7d:f2:8c:
0e:2a:e1:31:22:89:ba:89:74:2b:c4:ac:f0:25:a3:57:cb:b0:
8f:83:03:7f:8d:1a:13:44:fd:45:de:b6:03:2a:87:48:89:65:
22:7c:f0:d8:4d:b9:73:00:0d:f1:e7:5b:02:11:20:aa:6e:90:
f4:19:d5:68:fe:0b:d8:97:37:a0:f0:84:4f:30:ae:55:6b:fa:
2d:a2:96:46:5d:c0:ea:b0:b0:fb:57:8c:9a:c7:73:e3:ba:2d:
11:6c:9d:4a:95:24:a3:3b:49:ef:c8:96:16:c3:4c:6c:55:24:
6c:63:75:d7:4d:9e:23:d7:7b:3b:0d:43:69:4d:28:17:e9:98:
23:60:2f:0f:f6:72:2f:85:f4:7e:9d:32:29:b3:aa:4e:04:a7:
ad:19:c3:4f:ff:e5:f7:4d:f7:90:1e:17:c7:13:e1:4a:d2:af:
a2:7a:e4:2b:8a:72:77:07:ac:e9:7b:d6:e0:3f:ff:92:32:e6:
ac:6c:af:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:46:17 2026 by rpki-client