Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/tpnLxR7fDBhr9DHAUfc27VrhuF4.roa
File: tpnLxR7fDBhr9DHAUfc27VrhuF4.roa (raw, json)
Hash identifier: Can2fZC6w/3nlyDPE7+GVSweznOo4ZM3oLm/xyNHx/k=
Subject key identifier: B6:99:CB:C5:1E:DF:0C:18:6B:F4:31:C0:51:F7:36:ED:5A:E1:B8:5E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019D48A7C18B9CDDDA089F6E1BAAE41082D5
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/tpnLxR7fDBhr9DHAUfc27VrhuF4.roa
Signing time: Wed 01 Apr 2026 10:47:26 +0000
ROA not before: Wed 01 Apr 2026 10:47:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44486
IP address blocks: 5.83.145.0/24 maxlen: 24
5.175.220.0/24 maxlen: 24
77.90.3.0/24 maxlen: 24
77.90.28.0/24 maxlen: 24
89.106.64.0/24 maxlen: 24
89.144.33.0/24 maxlen: 24
89.144.42.0/24 maxlen: 24
94.103.172.0/24 maxlen: 24
94.103.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:48:a7:c1:8b:9c:dd:da:08:9f:6e:1b:aa:e4:10:82:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 1 10:47:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b699cbc51edf0c186bf431c051f736ed5ae1b85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ee:80:4c:3f:48:15:80:f9:71:34:ed:92:61:
d5:44:9f:d5:a5:bf:50:3b:66:24:af:f6:18:75:f1:
77:89:97:42:1d:c1:05:88:eb:a8:8d:53:4b:61:75:
8d:bb:55:58:a6:18:a9:6e:69:ed:64:4b:4d:1d:0e:
46:d7:f1:a6:7a:f1:c2:41:42:fb:ee:52:d1:15:6e:
8a:4f:18:67:80:a5:f9:60:27:68:d4:b0:23:68:fe:
8e:39:2c:b1:09:ea:11:75:e6:43:5c:64:d5:a7:12:
47:05:ca:e1:47:72:4a:7f:3e:05:f7:dd:b3:4b:f6:
54:9c:e7:b8:97:71:69:62:4f:77:31:85:ad:ac:9e:
b8:a9:3a:9a:df:00:6a:0a:50:9f:c5:34:36:ad:90:
e0:b7:95:3e:15:5c:e2:ac:75:78:f8:80:98:e0:dc:
ed:5d:ea:a3:65:8d:41:3c:3f:0d:33:3d:16:da:2f:
d9:34:e1:8f:83:09:c2:9c:8d:c4:a3:0c:91:ae:25:
ac:78:b5:5d:b4:dc:74:32:e3:ce:9a:21:1b:c1:e3:
ff:c0:dc:26:0c:1f:d6:da:0a:4d:bd:f6:45:12:4b:
6e:e4:c1:69:d4:42:c0:7b:42:2c:74:94:12:94:82:
29:ac:12:a1:f3:1b:ba:16:65:66:70:8a:be:0c:93:
13:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:99:CB:C5:1E:DF:0C:18:6B:F4:31:C0:51:F7:36:ED:5A:E1:B8:5E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/tpnLxR7fDBhr9DHAUfc27VrhuF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.145.0/24
5.175.220.0/24
77.90.3.0/24
77.90.28.0/24
89.106.64.0/24
89.144.33.0/24
89.144.42.0/24
94.103.172.0/23
Signature Algorithm: sha256WithRSAEncryption
19:30:ab:dc:b7:08:7b:a6:08:3c:09:e1:b2:f5:59:f6:ae:68:
1f:8e:b1:2d:3b:84:c4:7f:c7:3e:40:d8:61:d9:e6:fd:87:3d:
59:dc:e4:39:50:58:78:2f:da:49:4c:c2:c7:64:48:fe:00:d8:
6a:2f:0e:93:9b:fa:ee:87:2a:97:81:d8:81:f0:8e:51:cb:3a:
61:06:c7:49:1d:7e:c7:fb:bc:d8:c6:62:8a:34:be:0a:47:5a:
f4:b0:c9:c7:52:04:27:ed:50:86:60:d2:43:63:d4:cf:05:ce:
92:15:e9:ab:ad:c7:c5:4c:37:e8:14:d0:f7:33:c0:22:36:ed:
a1:0f:df:63:2c:1b:84:b0:38:04:94:09:cf:be:bb:d2:7b:31:
bf:2e:e6:72:3e:9e:4c:2a:09:d1:9f:75:eb:e5:91:85:03:7a:
45:51:3c:62:b2:da:22:7c:f7:be:37:51:02:e5:92:1c:42:a1:
8a:c5:55:e6:c7:ce:f3:3d:08:48:db:13:cd:82:a8:3f:41:c5:
65:44:46:91:8d:fa:db:05:c4:ee:9e:98:ad:8e:b1:b2:ad:59:
30:20:02:73:39:a7:fa:a7:9c:37:b1:eb:e3:ed:30:78:ea:30:
0a:21:8a:66:65:bb:11:a0:ae:af:b2:b3:dc:fe:db:e3:0c:01:
08:a4:fc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:31:26 2026 by rpki-client