Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/TP2YSwqVyfqUIy4MvNgVm92X3cE.roa
File: TP2YSwqVyfqUIy4MvNgVm92X3cE.roa (raw, json)
Hash identifier: ZjMe7Najk1MfjHandVTL1SRsCu1fPTQIQjdH4Ut4rpM=
Subject key identifier: 4C:FD:98:4B:0A:95:C9:FA:94:23:2E:0C:BC:D8:15:9B:DD:97:DD:C1
Certificate issuer: /CN=0759f6ac173f75ed9e585ec7d872a5865cef2835
Certificate serial: 019C2E6BF5182B40D71DE377DFC85242B111
Authority key identifier: 07:59:F6:AC:17:3F:75:ED:9E:58:5E:C7:D8:72:A5:86:5C:EF:28:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1n2rBc_de2eWF7H2HKlhlzvKDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/TP2YSwqVyfqUIy4MvNgVm92X3cE.roa
Signing time: Thu 05 Feb 2026 15:29:12 +0000
ROA not before: Thu 05 Feb 2026 15:29:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205185
IP address blocks: 45.129.172.0/22 maxlen: 24
86.105.160.0/22 maxlen: 24
185.22.12.0/22 maxlen: 24
185.22.14.0/23 maxlen: 24
185.81.8.0/22 maxlen: 24
185.136.236.0/22 maxlen: 24
185.152.84.0/22 maxlen: 24
185.226.108.0/22 maxlen: 24
194.135.48.0/22 maxlen: 24
213.159.16.0/21 maxlen: 24
213.159.16.0/22 maxlen: 22
2a00:5d60::/32 maxlen: 48
2a05:8400::/29 maxlen: 48
2a0d:8600::/29 maxlen: 48
2a0f:dc40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1n2rBc_de2eWF7H2HKlhlzvKDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2e:6b:f5:18:2b:40:d7:1d:e3:77:df:c8:52:42:b1:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0759f6ac173f75ed9e585ec7d872a5865cef2835
Validity
Not Before: Feb 5 15:29:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4cfd984b0a95c9fa94232e0cbcd8159bdd97ddc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:81:c6:6a:91:83:d7:4a:52:8b:1f:c5:bc:41:
d3:85:2b:6a:7f:c1:52:43:c9:1a:c6:af:6e:44:e3:
46:ef:4d:d6:29:bc:c9:b6:68:97:2f:23:9b:39:62:
6f:9d:59:f0:76:38:99:ae:56:aa:2c:e9:0a:aa:d3:
b5:60:0c:06:d2:69:f3:b3:71:c9:82:d5:49:47:1a:
c2:fd:6c:b9:2c:50:8e:bd:cc:f2:85:5b:29:63:d5:
fd:8c:c1:19:11:73:e7:32:1a:c2:03:a3:35:99:19:
0d:c8:46:9b:78:76:a3:57:54:0d:3b:a6:6b:8b:80:
57:83:13:53:4e:20:07:3f:2d:8f:12:d8:cd:55:31:
f1:56:1b:22:7a:e3:5c:ab:b9:3f:af:c0:46:b8:a9:
92:e6:8c:af:ae:78:aa:99:a0:3c:a3:e9:e4:b5:3d:
80:25:f5:d4:ea:37:f0:77:cf:ca:f5:05:f5:05:6b:
f0:0b:90:1d:e5:f2:80:dd:b2:63:08:56:a9:b3:63:
55:b9:c0:92:a2:1b:67:c0:f2:47:b6:24:f2:07:d6:
84:8a:bb:da:d6:ec:5e:e8:a6:47:16:5d:0c:85:b3:
0c:97:79:3e:d3:0d:c6:a1:01:93:b4:32:41:ac:be:
14:fb:91:5d:b2:76:47:92:d0:8f:e4:c0:aa:aa:e8:
bb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FD:98:4B:0A:95:C9:FA:94:23:2E:0C:BC:D8:15:9B:DD:97:DD:C1
X509v3 Authority Key Identifier:
keyid:07:59:F6:AC:17:3F:75:ED:9E:58:5E:C7:D8:72:A5:86:5C:EF:28:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1n2rBc_de2eWF7H2HKlhlzvKDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/TP2YSwqVyfqUIy4MvNgVm92X3cE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.172.0/22
86.105.160.0/22
185.22.12.0/22
185.81.8.0/22
185.136.236.0/22
185.152.84.0/22
185.226.108.0/22
194.135.48.0/22
213.159.16.0/21
IPv6:
2a00:5d60::/32
2a05:8400::/29
2a0d:8600::/29
2a0f:dc40::/29
Signature Algorithm: sha256WithRSAEncryption
36:b4:4c:c7:23:4f:03:6d:e7:d4:23:02:9f:93:5f:0e:5a:52:
c4:d7:e0:3a:cd:4d:e5:03:a9:46:cb:49:61:92:20:9e:61:ba:
5c:79:9c:f8:13:59:99:5e:20:e5:a6:cd:d3:27:0c:53:7a:af:
1a:1f:5a:ed:40:5c:6b:4c:0d:67:42:45:78:b6:0f:35:c2:e0:
24:c2:d3:5d:47:0f:fd:4c:be:c4:07:2a:77:6e:6b:db:5c:6d:
9e:91:73:03:4c:f7:7d:81:7b:07:ae:f8:f5:b7:56:c3:60:1b:
46:c4:91:8c:3a:97:4c:a4:b8:dc:01:12:ed:c1:cd:11:9a:5b:
ea:fa:b9:d8:65:0f:0b:e3:44:f9:7b:dc:d2:ba:a7:25:cf:e2:
6a:8a:34:6e:86:16:3e:c5:3e:e4:2b:53:09:66:c3:48:d9:23:
01:c2:d5:1f:e6:a3:f3:e3:cb:e1:09:b1:1a:08:f3:98:96:fd:
b2:0e:27:96:25:27:d1:68:d8:24:bc:06:ab:39:8a:74:f3:10:
82:48:54:9d:47:6e:4a:5b:dc:4f:fb:ab:03:e4:4e:50:94:f5:
8b:6d:cc:fb:d5:b9:0f:ea:51:88:bc:7c:c3:9b:0a:76:6b:7e:
6d:6d:06:02:cd:b8:50:79:a4:ed:57:dd:de:a5:75:d1:3e:59:
b8:b0:3f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:19:24 2026 by rpki-client