Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/TxNEgz7L3TvxomCwwq1LxROz_XE.roa
File: TxNEgz7L3TvxomCwwq1LxROz_XE.roa (raw, json)
Hash identifier: tLlYJ3EZ/TsJJPnhJzkEh4qBwYd4amHplTYSuv2Podc=
Subject key identifier: 4F:13:44:83:3E:CB:DD:3B:F1:A2:60:B0:C2:AD:4B:C5:13:B3:FD:71
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019FA8DC8F93919D08DC6DC94672AD1D514A
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/TxNEgz7L3TvxomCwwq1LxROz_XE.roa
Signing time: Tue 28 Jul 2026 13:14:14 +0000
ROA not before: Tue 28 Jul 2026 13:14:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49505
IP address blocks: 5.172.179.0/24 maxlen: 24
31.41.253.0/24 maxlen: 24
45.10.248.0/22 maxlen: 22
45.81.139.0/24 maxlen: 24
45.87.255.0/24 maxlen: 24
45.93.12.0/24 maxlen: 24
45.93.14.0/24 maxlen: 24
45.93.15.0/24 maxlen: 24
45.94.228.0/22 maxlen: 22
45.95.28.0/24 maxlen: 24
45.95.148.0/22 maxlen: 22
45.128.129.0/24 maxlen: 24
45.129.4.0/22 maxlen: 22
45.142.254.0/24 maxlen: 24
88.151.11.0/24 maxlen: 24
91.190.158.0/24 maxlen: 24
93.190.123.0/24 maxlen: 24
94.154.188.0/24 maxlen: 24
94.154.189.0/24 maxlen: 24
94.154.191.0/24 maxlen: 24
176.116.17.0/24 maxlen: 24
176.126.98.0/24 maxlen: 24
176.126.102.0/24 maxlen: 24
185.222.214.0/24 maxlen: 24
193.187.106.0/24 maxlen: 24
194.50.73.0/24 maxlen: 24
194.104.232.0/24 maxlen: 24
194.156.104.0/24 maxlen: 24
194.156.105.0/24 maxlen: 24
194.156.106.0/24 maxlen: 24
194.156.107.0/24 maxlen: 24
212.60.7.0/24 maxlen: 24
217.8.117.0/24 maxlen: 24
2a12:a507::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:dc:8f:93:91:9d:08:dc:6d:c9:46:72:ad:1d:51:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jul 28 13:14:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f1344833ecbdd3bf1a260b0c2ad4bc513b3fd71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:05:6e:e3:da:07:bc:36:d5:ab:f1:39:99:47:
35:24:19:c7:25:76:92:08:cf:9b:3b:33:c7:12:6b:
06:ad:5f:2e:a7:82:d1:53:80:e4:36:bd:e6:72:a8:
05:d6:2b:be:84:cc:76:8f:5f:4f:38:07:60:3f:da:
fb:3e:52:ae:4a:b2:61:47:c1:84:92:8c:77:5f:cc:
5d:ad:50:16:0f:3e:dd:02:47:9b:37:0c:f5:8c:62:
7c:1a:b9:64:75:b7:43:7e:51:03:27:a3:8d:3e:61:
96:62:12:9a:a3:bd:ba:3b:2f:90:ed:aa:6c:c8:61:
b2:92:f0:bc:c5:d5:a5:43:51:b8:d7:39:5d:f1:36:
5b:d1:3a:40:e3:ac:1b:ab:64:ae:02:c0:c9:16:e1:
cf:14:e0:76:a4:ec:f5:00:65:0d:3e:5a:33:30:82:
bc:da:30:a0:c7:d6:3b:c7:3b:05:3a:01:88:bd:f2:
8e:fa:2a:8d:14:ee:3a:aa:98:fc:7c:bd:54:89:ed:
b2:a4:c9:37:30:a7:f6:71:57:0b:ad:ab:e2:bb:27:
ad:07:a9:84:fd:9d:ff:bc:8c:35:87:1b:91:5b:3b:
17:c6:cd:c6:4d:18:e8:75:f3:8c:0e:01:84:3b:90:
18:99:00:42:e3:68:c4:c2:bd:5e:0c:80:fb:fc:d9:
6b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:13:44:83:3E:CB:DD:3B:F1:A2:60:B0:C2:AD:4B:C5:13:B3:FD:71
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/TxNEgz7L3TvxomCwwq1LxROz_XE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.179.0/24
31.41.253.0/24
45.10.248.0/22
45.81.139.0/24
45.87.255.0/24
45.93.12.0/24
45.93.14.0/23
45.94.228.0/22
45.95.28.0/24
45.95.148.0/22
45.128.129.0/24
45.129.4.0/22
45.142.254.0/24
88.151.11.0/24
91.190.158.0/24
93.190.123.0/24
94.154.188.0/23
94.154.191.0/24
176.116.17.0/24
176.126.98.0/24
176.126.102.0/24
185.222.214.0/24
193.187.106.0/24
194.50.73.0/24
194.104.232.0/24
194.156.104.0/22
212.60.7.0/24
217.8.117.0/24
IPv6:
2a12:a507::/32
Signature Algorithm: sha256WithRSAEncryption
4d:18:ef:70:fd:08:39:29:93:da:0b:1c:48:d6:67:8c:7b:54:
ee:72:9b:07:ac:61:1a:f5:b0:46:b6:8b:13:c8:fd:2c:e4:ab:
22:15:64:f6:b1:c5:80:a5:d3:b5:80:d5:bd:fa:b6:db:a2:8b:
4f:14:46:ef:cc:20:5b:fc:b4:33:14:03:f7:fa:83:31:21:0b:
4d:b9:52:82:c9:a6:b4:3d:fb:3b:e8:c0:e4:d6:29:15:e9:63:
9f:c9:f9:19:33:98:4f:09:a1:80:17:a7:ca:ae:9d:7b:b8:fc:
ac:f7:fa:f2:3b:48:e3:2e:ed:3d:c6:10:fe:cc:cf:79:c2:36:
81:5b:45:fb:ba:13:d9:f5:14:10:b2:cc:e4:97:fe:f2:72:03:
1d:aa:4e:65:0a:5c:14:53:cd:99:93:3b:1c:f1:f6:8d:e3:a6:
e8:4d:9b:a6:ba:cd:b5:5c:06:3e:35:c4:84:5a:4e:64:e2:45:
54:03:e2:7a:21:e3:70:08:1b:cb:7c:16:dc:98:44:2d:b3:7b:
d1:06:9a:32:d3:23:3b:7f:fe:22:64:a2:35:fd:f7:88:77:2b:
b2:80:c0:a6:80:80:87:28:e1:1b:19:30:53:61:bd:3f:08:03:
90:91:40:8f:25:b3:4b:d5:39:04:65:00:0b:de:72:29:51:ee:
f1:2f:a3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:23:18 2026 by rpki-client