Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/tFJE-gYJOgbj0eZ_usOlNptkKU4.roa
File: tFJE-gYJOgbj0eZ_usOlNptkKU4.roa (raw, json)
Hash identifier: VGOGaCi3IA0RFEpqSYxlLf0DILyuv3lLTwOvBoY9lvM=
Subject key identifier: B4:52:44:FA:06:09:3A:06:E3:D1:E6:7F:BA:C3:A5:36:9B:64:29:4E
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 019EADC2714D63409F578D0EB16C406E880A
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/tFJE-gYJOgbj0eZ_usOlNptkKU4.roa
Signing time: Tue 09 Jun 2026 19:01:01 +0000
ROA not before: Tue 09 Jun 2026 19:01:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46475
IP address blocks: 31.40.195.0/24 maxlen: 24
37.72.141.0/24 maxlen: 24
45.141.128.0/24 maxlen: 24
46.253.131.0/24 maxlen: 24
62.204.49.0/24 maxlen: 24
77.83.25.0/24 maxlen: 24
77.83.26.0/24 maxlen: 24
77.83.27.0/24 maxlen: 24
83.97.116.0/24 maxlen: 24
83.97.118.0/23 maxlen: 24
91.246.51.0/24 maxlen: 24
91.247.163.0/24 maxlen: 24
94.154.113.0/24 maxlen: 24
178.20.28.0/24 maxlen: 24
185.212.115.0/24 maxlen: 24
193.42.245.0/24 maxlen: 24
193.151.190.0/24 maxlen: 24
193.163.89.0/24 maxlen: 24
193.163.92.0/24 maxlen: 24
193.163.207.0/24 maxlen: 24
194.70.234.0/24 maxlen: 24
212.18.113.0/24 maxlen: 24
212.18.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ad:c2:71:4d:63:40:9f:57:8d:0e:b1:6c:40:6e:88:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Jun 9 19:01:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b45244fa06093a06e3d1e67fbac3a5369b64294e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5f:0c:1c:98:b6:7b:24:e1:00:99:f4:c7:64:
bc:08:40:0c:49:9f:2f:80:34:28:bf:9c:88:99:2f:
d5:f1:0a:c0:f8:ed:2a:94:e6:b2:98:a6:70:f5:0f:
59:61:5b:07:39:c9:46:4e:5a:16:c8:54:78:6f:bf:
3f:11:88:23:34:ed:6a:b4:aa:4e:70:a4:d3:ed:59:
99:95:95:fa:33:d7:8a:fb:65:3d:80:26:cf:00:7d:
37:55:88:45:1a:01:1a:4e:3b:6c:1d:e7:ec:31:ef:
0a:c4:20:57:3f:89:e3:f6:bc:a1:8b:96:f4:68:67:
d7:0f:6a:97:fa:03:de:bb:e5:bf:e1:86:44:1f:a4:
63:83:79:d2:73:72:b7:a5:8e:e9:fd:dc:2a:f0:09:
71:1c:f6:0e:05:9f:78:10:1f:9f:8d:28:5a:f0:05:
d2:4f:21:9e:ae:b4:5c:8a:e6:30:32:9a:d9:0e:a3:
3a:ba:19:98:a2:d9:ef:64:62:4b:e2:93:56:8d:89:
4c:2c:62:4b:d8:b2:d7:24:da:9c:5e:35:ec:3f:84:
a4:de:42:22:67:a1:65:f7:fb:00:35:71:cb:65:21:
c3:c8:ad:63:23:79:38:68:be:59:c1:e7:22:35:a9:
da:b9:e6:cc:fe:ce:ff:ff:34:b0:86:cb:14:4c:16:
16:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:52:44:FA:06:09:3A:06:E3:D1:E6:7F:BA:C3:A5:36:9B:64:29:4E
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/tFJE-gYJOgbj0eZ_usOlNptkKU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.195.0/24
37.72.141.0/24
45.141.128.0/24
46.253.131.0/24
62.204.49.0/24
77.83.25.0-77.83.27.255
83.97.116.0/24
83.97.118.0/23
91.246.51.0/24
91.247.163.0/24
94.154.113.0/24
178.20.28.0/24
185.212.115.0/24
193.42.245.0/24
193.151.190.0/24
193.163.89.0/24
193.163.92.0/24
193.163.207.0/24
194.70.234.0/24
212.18.113.0/24
212.18.127.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:c4:6d:26:79:3a:6b:6e:61:f1:c8:35:3b:0a:0c:bc:28:93:
86:30:46:44:5c:f5:bd:3d:17:5d:b4:c5:e7:ae:f5:72:d8:5f:
92:4c:95:b3:a8:d6:82:87:79:cd:2d:4a:88:3a:4e:d4:c4:96:
63:cd:1c:dd:aa:0b:7d:12:d8:b6:56:3f:c2:a0:40:9e:0b:f3:
64:fa:a0:72:cc:17:ca:9f:fc:7e:e4:f2:f1:98:c5:76:f6:e1:
b8:93:94:70:21:ef:35:c7:88:81:a6:50:f3:5c:8c:54:38:0a:
83:92:21:54:e2:70:9f:27:87:88:ec:dc:f7:69:70:35:e9:12:
07:86:6d:81:8c:9b:92:b5:23:86:96:8d:8d:01:f8:88:0c:6f:
ec:70:5d:8f:8f:53:22:2c:1e:17:02:50:38:5f:b0:2b:de:5e:
e6:a4:e3:94:3a:c4:5b:5f:78:e0:a9:28:4e:fc:8f:ff:62:22:
e7:60:a7:0b:cb:e8:f1:4f:d8:36:75:38:3d:c3:3b:75:be:dc:
bd:a8:fe:6e:56:a1:38:01:7e:4b:cc:39:5f:8f:7a:e8:c3:f2:
2b:52:8a:34:89:36:88:72:6a:6c:a7:53:4b:69:0d:f8:24:a1:
0a:48:b8:74:ea:c6:eb:b9:d6:70:97:aa:31:0d:f0:76:01:f9:
4f:0f:39:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:23:18 2026 by rpki-client