Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/TKRUQhbuG6vK-9YhYrYM4Xtl7Rk.roa
File: TKRUQhbuG6vK-9YhYrYM4Xtl7Rk.roa (raw, json)
Hash identifier: DmxeQKQyfsvJvWQ6namIeD8pDbFVK71C7OVUciGGrUY=
Subject key identifier: 4C:A4:54:42:16:EE:1B:AB:CA:FB:D6:21:62:B6:0C:E1:7B:65:ED:19
Certificate issuer: /CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Certificate serial: 019C907F99C7B91D54876B0596982AF8E94A
Authority key identifier: DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/TKRUQhbuG6vK-9YhYrYM4Xtl7Rk.roa
Signing time: Tue 24 Feb 2026 16:33:27 +0000
ROA not before: Tue 24 Feb 2026 16:33:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202673
IP address blocks: 185.245.62.0/24 maxlen: 24
185.245.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:90:7f:99:c7:b9:1d:54:87:6b:05:96:98:2a:f8:e9:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Validity
Not Before: Feb 24 16:33:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ca4544216ee1babcafbd62162b60ce17b65ed19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f3:bd:28:c7:4a:6f:d1:99:ba:c8:68:66:a4:
db:c6:66:0c:95:0e:d6:0b:26:7e:02:ab:55:da:b0:
6c:94:b3:42:fb:38:e2:9b:a2:ca:cc:9d:da:08:e0:
76:66:a9:3e:0d:50:0e:ad:36:5a:63:51:16:f5:01:
54:d5:1b:8f:2b:72:b0:44:aa:82:d6:8b:b2:31:af:
30:b2:82:6f:2d:05:c4:cf:58:d2:89:f5:c6:df:08:
83:7e:69:4f:55:92:c9:37:18:a1:4d:c9:4d:82:dc:
8d:ef:e7:4d:a9:b6:14:a2:a1:53:0d:c6:03:4a:e3:
11:0e:9e:e6:c7:43:4a:33:1a:4f:00:ab:f4:23:1a:
99:02:98:87:4e:ce:9d:a8:a6:71:61:49:a8:61:34:
98:59:80:01:aa:2e:80:42:c7:76:ad:0e:d3:2a:47:
84:8a:c9:74:90:d4:f1:a3:cd:52:a0:9a:57:98:fc:
b7:d3:8e:95:f3:fb:2c:94:1f:67:33:76:fb:18:44:
bb:ee:e0:42:58:5a:d5:fa:72:80:1d:70:c7:b5:8a:
35:ab:7e:2d:4c:b5:04:2f:f4:c9:71:e9:b5:bd:b1:
db:fe:25:1e:ba:0a:f0:95:e4:84:48:34:c3:f0:d3:
1d:7c:9e:16:71:f4:f9:c6:11:75:59:6e:96:68:e1:
4a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A4:54:42:16:EE:1B:AB:CA:FB:D6:21:62:B6:0C:E1:7B:65:ED:19
X509v3 Authority Key Identifier:
keyid:DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/TKRUQhbuG6vK-9YhYrYM4Xtl7Rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.62.0/23
Signature Algorithm: sha256WithRSAEncryption
93:6e:ac:68:98:4e:9b:75:4f:0f:70:51:d1:ce:6c:6a:3e:31:
e3:9c:a3:0b:39:34:d4:4f:9e:eb:db:25:7c:38:0c:14:75:09:
d1:13:ff:9a:50:fa:a6:43:3e:28:d5:30:8e:5d:cf:71:37:48:
f1:a6:d1:31:65:46:db:24:42:66:16:28:60:e0:de:b9:f8:2f:
52:c0:39:a1:60:e9:8d:58:67:6a:b1:6a:f6:b4:36:56:58:3a:
fa:02:42:4d:0d:0e:5d:b7:73:47:96:ba:f1:57:60:6b:94:2d:
20:2b:7a:15:94:ea:03:24:1e:d3:bc:d4:14:4a:0e:53:a5:dc:
f5:bb:9b:53:8a:40:2e:e1:22:2e:99:f9:55:ca:06:47:9c:0f:
7e:fe:6e:95:d0:c4:cc:8c:8c:ab:20:08:78:13:cc:67:55:e6:
61:99:7a:b6:d9:32:8e:58:1b:bd:47:7d:16:76:da:1e:97:a5:
de:8f:ca:4a:5c:a7:07:52:4e:24:5a:df:62:f8:af:3f:f3:11:
0e:04:8b:17:87:26:81:9a:bc:22:59:01:60:52:39:cc:7a:33:
8f:3d:91:9c:78:bb:18:bb:01:07:d7:85:f8:48:df:84:55:bf:
2f:7e:bb:30:8b:59:8d:fb:cf:ed:ef:7b:28:02:f4:8d:17:00:
44:be:3d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:38:01 2026 by rpki-client