Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/TL8b8g3-7EMz4FyynCbBBBN7Lf4.roa
File: TL8b8g3-7EMz4FyynCbBBBN7Lf4.roa (raw, json)
Hash identifier: mTEzlKtFgURJM51xzrtSo5nd8seYybtUtKM27hM5Pk0=
Subject key identifier: 4C:BF:1B:F2:0D:FE:EC:43:33:E0:5C:B2:9C:26:C1:04:13:7B:2D:FE
Certificate issuer: /CN=5b7747fb1596ec1d081867e5e3d2a2b873848635
Certificate serial: 019F2368D6E390300BFB0F03A827C0C9620C
Authority key identifier: 5B:77:47:FB:15:96:EC:1D:08:18:67:E5:E3:D2:A2:B8:73:84:86:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3dH-xWW7B0IGGfl49KiuHOEhjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/TL8b8g3-7EMz4FyynCbBBBN7Lf4.roa
Signing time: Thu 02 Jul 2026 15:18:21 +0000
ROA not before: Thu 02 Jul 2026 15:18:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 553
IP address blocks: 129.69.0.0/16 maxlen: 16
129.143.0.0/16 maxlen: 16
141.58.0.0/16 maxlen: 16
141.70.0.0/16 maxlen: 16
141.70.128.0/17 maxlen: 17
192.67.189.0/24 maxlen: 24
192.67.208.0/24 maxlen: 24
192.108.35.0/24 maxlen: 24
192.108.36.0/22 maxlen: 22
192.108.40.0/22 maxlen: 22
192.108.44.0/24 maxlen: 24
193.196.0.0/15 maxlen: 15
193.196.0.0/21 maxlen: 21
193.196.9.0/24 maxlen: 24
193.196.13.0/24 maxlen: 24
193.196.16.0/20 maxlen: 20
193.196.64.0/18 maxlen: 18
193.196.129.0/24 maxlen: 24
193.196.130.0/23 maxlen: 23
193.196.132.0/22 maxlen: 22
193.196.136.0/21 maxlen: 21
193.196.144.0/21 maxlen: 21
193.196.152.0/24 maxlen: 24
193.196.154.0/23 maxlen: 23
193.196.156.0/22 maxlen: 22
193.196.160.0/22 maxlen: 22
193.196.165.0/24 maxlen: 24
193.196.166.0/23 maxlen: 23
193.196.168.0/21 maxlen: 21
193.196.176.0/20 maxlen: 20
193.196.192.0/18 maxlen: 18
193.197.0.0/24 maxlen: 24
193.197.4.0/23 maxlen: 23
193.197.8.0/22 maxlen: 22
193.197.20.0/23 maxlen: 23
193.197.28.0/22 maxlen: 22
193.197.32.0/19 maxlen: 19
193.197.64.0/22 maxlen: 22
193.197.68.0/23 maxlen: 23
193.197.70.0/24 maxlen: 24
193.197.80.0/22 maxlen: 22
193.197.85.0/24 maxlen: 24
193.197.86.0/23 maxlen: 23
193.197.94.0/24 maxlen: 24
193.197.112.0/22 maxlen: 22
193.197.120.0/21 maxlen: 21
193.197.130.0/24 maxlen: 24
193.197.132.0/22 maxlen: 22
193.197.136.0/21 maxlen: 21
193.197.149.0/24 maxlen: 24
193.197.152.0/22 maxlen: 22
193.197.157.0/24 maxlen: 24
193.197.160.0/22 maxlen: 22
193.197.168.0/21 maxlen: 21
193.197.180.0/22 maxlen: 22
193.197.200.0/21 maxlen: 21
193.197.212.0/24 maxlen: 24
193.197.224.0/19 maxlen: 19
2001:7c0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/W3dH-xWW7B0IGGfl49KiuHOEhjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/W3dH-xWW7B0IGGfl49KiuHOEhjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/W3dH-xWW7B0IGGfl49KiuHOEhjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d6:e3:90:30:0b:fb:0f:03:a8:27:c0:c9:62:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7747fb1596ec1d081867e5e3d2a2b873848635
Validity
Not Before: Jul 2 15:18:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4cbf1bf20dfeec4333e05cb29c26c104137b2dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ee:6d:30:c2:a5:90:51:bc:cb:89:2c:f2:83:
42:31:70:c7:75:5a:19:ce:53:f3:13:00:03:c1:a0:
f8:bb:c9:d5:36:5f:5d:ed:55:c8:56:05:0b:f5:e2:
15:6f:d9:1a:f9:f0:12:1a:b9:a9:53:b4:9a:c5:d2:
5c:e6:41:47:be:64:a8:b3:a3:aa:44:19:a1:fa:8f:
b4:35:64:8f:28:ac:a1:88:37:fa:67:9c:12:04:fd:
9a:e4:a9:71:94:5a:c5:53:b1:39:75:2c:da:06:fc:
2f:78:37:e5:42:e6:0b:fd:e7:a3:57:53:0a:fb:4e:
da:76:71:4e:6c:4b:a2:be:f9:df:9f:ae:64:1b:e4:
b1:78:bb:18:2e:a1:40:cc:fc:57:d5:2c:e2:4f:32:
b4:39:55:a8:95:1e:ec:89:9d:a6:e5:7a:64:6e:b1:
fa:a6:96:9c:cc:c6:4e:f6:bc:c4:93:04:d6:4a:dd:
af:a8:72:dc:56:eb:dc:88:13:99:6f:82:05:2a:3d:
11:f1:a9:93:be:17:1f:7f:ed:c1:e6:d2:bb:f2:6d:
98:0e:05:b5:0c:22:d1:c4:be:94:1a:d5:54:d7:67:
63:18:ae:94:c3:fe:2b:7a:b9:12:0c:4c:61:53:a4:
12:74:11:ac:b6:85:86:a6:f5:e8:5b:e7:a4:ea:a7:
28:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:BF:1B:F2:0D:FE:EC:43:33:E0:5C:B2:9C:26:C1:04:13:7B:2D:FE
X509v3 Authority Key Identifier:
keyid:5B:77:47:FB:15:96:EC:1D:08:18:67:E5:E3:D2:A2:B8:73:84:86:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3dH-xWW7B0IGGfl49KiuHOEhjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/TL8b8g3-7EMz4FyynCbBBBN7Lf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/W3dH-xWW7B0IGGfl49KiuHOEhjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.69.0.0/16
129.143.0.0/16
141.58.0.0/16
141.70.0.0/16
192.67.189.0/24
192.67.208.0/24
192.108.35.0-192.108.44.255
193.196.0.0/15
IPv6:
2001:7c0::/29
Signature Algorithm: sha256WithRSAEncryption
98:46:63:89:be:bf:4d:56:f6:7a:f8:19:19:d5:94:d2:c2:aa:
58:87:37:6c:99:b8:6e:3e:b3:d8:77:0c:6f:d5:ad:ae:b9:f7:
82:db:f4:2d:9e:9d:60:6b:0b:19:82:ab:44:6e:29:ac:5c:c0:
5b:a0:41:92:58:5c:c7:61:a4:47:d5:99:1f:3b:88:10:b0:f7:
19:71:91:4e:91:1a:c1:e1:d1:a1:6a:2b:f4:dc:32:45:d0:e5:
28:3a:24:d5:46:1c:6b:af:6f:96:4d:c5:59:42:11:3a:ec:03:
74:a8:f4:0c:27:e9:ff:2c:dc:12:27:06:8c:ad:ca:76:8a:de:
78:dd:1f:1b:b0:4e:ff:25:44:6a:8d:1b:2a:c8:4e:33:1f:da:
23:00:3b:cb:fe:9f:63:9d:de:f0:91:0d:37:79:8b:f4:7f:94:
bb:f3:55:23:de:91:2c:a7:14:cb:d6:b6:38:4f:b3:9c:f4:9a:
a1:49:1f:8f:7f:e4:4a:2a:9b:7a:01:36:a9:09:5f:2a:e8:96:
b8:64:93:d4:12:b6:c2:de:3d:17:c4:2e:db:e1:9e:54:57:8c:
8d:61:5d:43:6f:84:d9:3e:28:f8:29:72:b2:69:ee:f8:93:4d:
ad:e1:a9:0a:af:2b:b8:47:6c:c3:f6:65:30:3a:2f:80:07:0a:
f9:b0:48:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:40:42 2026 by rpki-client