Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/Tnn_1K3DEyaHOQw-9I2Ewjwk8pM.roa
File: Tnn_1K3DEyaHOQw-9I2Ewjwk8pM.roa (raw, json)
Hash identifier: ezAVN3jQ2UsBPNShAKwAjIb8r5x8njUYP6cthQNSdTk=
Subject key identifier: 4E:79:FF:D4:AD:C3:13:26:87:39:0C:3E:F4:8D:84:C2:3C:24:F2:93
Certificate issuer: /CN=8b0d81f3e0f2d18f3b590dcc536d5e94cfe07012
Certificate serial: 019A2B0CFE0F563DA39736C91DC48BB8F95A
Authority key identifier: 8B:0D:81:F3:E0:F2:D1:8F:3B:59:0D:CC:53:6D:5E:94:CF:E0:70:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/Tnn_1K3DEyaHOQw-9I2Ewjwk8pM.roa
Signing time: Tue 28 Oct 2025 13:41:03 +0000
ROA not before: Tue 28 Oct 2025 13:41:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204995
IP address blocks: 45.13.220.0/22 maxlen: 24
45.13.220.0/24 maxlen: 24
185.184.8.0/24 maxlen: 24
185.184.9.0/24 maxlen: 24
185.184.10.0/24 maxlen: 24
185.184.11.0/24 maxlen: 24
2a0b:2180:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:0c:fe:0f:56:3d:a3:97:36:c9:1d:c4:8b:b8:f9:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0d81f3e0f2d18f3b590dcc536d5e94cfe07012
Validity
Not Before: Oct 28 13:41:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e79ffd4adc3132687390c3ef48d84c23c24f293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:db:69:2d:f9:8b:2a:90:dd:0c:8d:62:0a:a6:
a2:51:df:06:5a:f0:9f:dc:10:e1:ee:f8:98:6e:fd:
5b:6a:47:90:23:91:ab:b3:dc:48:d9:dc:45:a9:a9:
91:76:32:34:b0:5f:d6:70:90:ea:91:8b:0f:5d:15:
8d:9e:88:7e:d2:e6:b1:f6:6d:9f:ff:41:5c:62:2c:
0d:9b:7b:9a:26:79:72:7f:4d:e5:be:0d:b0:2b:ee:
f0:70:b0:db:ce:44:16:af:75:2e:68:63:fe:9d:de:
89:f3:ea:e6:57:58:2c:2c:e8:e0:48:19:c6:e9:f1:
91:6d:c7:55:bf:7b:1e:b3:42:a0:f9:f5:b0:c8:49:
12:49:20:30:77:35:54:05:d0:fb:42:76:2e:f9:70:
77:fe:23:df:12:9c:33:31:40:bc:69:77:c0:6e:60:
be:ec:21:b0:9f:83:43:4c:7f:86:2e:47:32:4a:11:
c3:5d:dc:f7:55:f8:bf:b2:d1:c5:42:00:76:cd:31:
05:19:d9:48:96:38:89:14:17:42:bc:0f:60:40:7a:
39:4e:44:9f:fd:79:ee:2e:6b:db:60:00:78:c7:cf:
3c:c9:90:59:6e:28:5b:33:90:e2:cf:c0:f2:8b:6b:
c5:59:c3:78:6c:94:15:46:ec:eb:87:d8:52:a6:9b:
bc:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:79:FF:D4:AD:C3:13:26:87:39:0C:3E:F4:8D:84:C2:3C:24:F2:93
X509v3 Authority Key Identifier:
keyid:8B:0D:81:F3:E0:F2:D1:8F:3B:59:0D:CC:53:6D:5E:94:CF:E0:70:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/Tnn_1K3DEyaHOQw-9I2Ewjwk8pM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.220.0/22
185.184.8.0/22
IPv6:
2a0b:2180:1::/48
Signature Algorithm: sha256WithRSAEncryption
3d:7b:a2:c4:66:bf:01:0a:e6:a1:fe:e9:5b:56:ae:22:e9:c1:
9b:7e:fb:04:11:28:bd:35:04:f3:38:ef:84:6c:af:c5:44:87:
f4:25:cb:ab:00:d3:f0:1f:d0:76:bd:31:06:77:6c:e1:da:5e:
e3:ab:1e:8d:00:2d:f0:bd:48:f1:fb:5f:1b:ab:c4:f6:50:ac:
f0:c5:5e:22:c6:f4:59:9f:9f:b9:20:d4:b1:df:cb:71:f3:59:
2e:e6:65:6c:57:bc:c2:5d:1b:60:58:b6:67:6d:f8:da:b5:bc:
a5:e5:09:d8:ce:d9:4d:35:70:e4:8f:8d:5f:d2:a8:ce:dd:28:
cb:9f:71:ed:56:47:2c:91:4e:2e:80:d9:02:a7:8c:49:7b:bd:
38:06:11:ee:e9:ee:d2:a2:d3:e8:87:2a:12:27:54:29:9a:fb:
ff:31:8a:8f:6d:cf:dd:cb:8d:73:35:a0:ee:56:6b:3a:1f:90:
80:9d:74:2d:03:70:47:0f:10:f1:4a:08:36:27:f7:7f:aa:c5:
82:76:fd:c9:25:94:26:90:40:9f:d1:f3:e8:16:f2:69:2b:77:
3e:a7:92:16:7a:05:14:6a:e2:2a:96:3f:c3:e5:d8:57:9f:7d:
51:4f:db:3b:d6:fe:13:8c:2a:bb:fc:4e:b1:2e:e8:7d:00:1a:
a2:08:74:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:36:55 2025 by rpki-client