Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/TQgAk-kjCmuvz2eqWr757vit-aI.roa
File: TQgAk-kjCmuvz2eqWr757vit-aI.roa (raw, json)
Hash identifier: lmDr2ZoodOyQIYq1JnmRLGHdUSfi5+BCh4SAfh571Mk=
Subject key identifier: 4D:08:00:93:E9:23:0A:6B:AF:CF:67:AA:5A:BE:F9:EE:F8:AD:F9:A2
Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Certificate serial: 019C2CB82B349A54DAE8D248C17D246143DF
Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/TQgAk-kjCmuvz2eqWr757vit-aI.roa
Signing time: Thu 05 Feb 2026 07:33:12 +0000
ROA not before: Thu 05 Feb 2026 07:33:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209341
IP address blocks: 65.181.113.0/24 maxlen: 24
69.72.149.0/24 maxlen: 24
69.72.244.0/24 maxlen: 24
192.250.229.0/24 maxlen: 24
192.250.230.0/24 maxlen: 24
194.147.95.0/24 maxlen: 24
209.42.26.0/24 maxlen: 24
209.42.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2c:b8:2b:34:9a:54:da:e8:d2:48:c1:7d:24:61:43:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Validity
Not Before: Feb 5 07:33:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d080093e9230a6bafcf67aa5abef9eef8adf9a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:36:8b:0a:53:de:fa:c6:b6:0c:72:e4:6e:4c:
11:2d:b1:47:0b:86:1f:04:71:78:c6:b1:47:43:b4:
cf:4e:12:f5:44:2d:81:15:24:54:f6:78:12:fa:e5:
f8:c7:75:dc:d6:9c:c3:b0:c4:65:56:3a:d4:fb:b7:
5a:9b:e8:f8:ae:3d:a0:70:42:4c:b1:19:de:e9:3a:
a9:6d:19:61:3e:12:84:fe:ca:fd:93:9d:8b:67:64:
6b:3f:f2:b3:ee:31:9f:39:08:55:08:b1:dc:54:57:
5b:36:96:52:c7:44:e8:af:09:07:02:cf:13:38:67:
ae:76:89:2f:11:10:0a:bb:67:f6:64:1c:5e:c2:39:
53:20:5b:35:33:3a:d9:f1:dc:c1:26:72:e0:41:61:
ed:93:5e:be:3e:99:23:44:3b:fd:57:b8:d9:3f:94:
65:cb:79:78:39:e0:b9:c3:27:a6:78:bf:38:69:0c:
d5:88:e1:de:39:a8:51:5c:25:4f:11:01:56:5a:3a:
2c:6e:64:64:d0:0b:5a:fb:73:bc:09:93:6c:eb:91:
7b:7d:6e:1d:42:a7:89:e7:8f:1b:67:2e:21:58:7e:
d2:51:94:76:d9:57:b0:46:00:c7:f2:0e:9f:98:e1:
62:4a:ed:4d:2a:c5:46:15:75:c3:4d:c5:9a:33:7e:
1b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:08:00:93:E9:23:0A:6B:AF:CF:67:AA:5A:BE:F9:EE:F8:AD:F9:A2
X509v3 Authority Key Identifier:
keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/TQgAk-kjCmuvz2eqWr757vit-aI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.181.113.0/24
69.72.149.0/24
69.72.244.0/24
192.250.229.0-192.250.230.255
194.147.95.0/24
209.42.26.0/24
209.42.31.0/24
Signature Algorithm: sha256WithRSAEncryption
47:2b:f6:f6:ad:33:2b:cd:53:c0:35:5b:26:23:59:81:60:9a:
54:cb:b5:d1:b1:af:84:4a:75:a0:06:91:6d:f7:cc:f1:e7:a9:
31:d5:c7:42:1d:0e:16:18:a4:96:31:3b:20:0a:d0:18:ec:35:
05:92:b0:e0:d5:28:8a:43:9d:36:85:4a:d4:bc:ac:63:9a:b5:
83:a7:ee:6b:54:22:0b:e8:5e:68:e9:fb:df:7b:18:f4:cf:65:
1d:0e:07:0a:ab:4e:bb:5e:39:10:60:ff:82:4b:ac:c0:05:41:
42:f2:5d:0f:71:67:0a:35:f8:eb:16:23:83:81:69:42:81:a4:
01:93:1c:04:59:b9:9b:62:82:bf:1a:1e:a0:a8:42:38:ec:de:
e9:bd:2c:bc:da:d2:7c:f2:d2:53:4b:b3:64:94:3b:2e:4d:e2:
a9:87:84:91:88:99:c2:56:61:00:bb:9c:bf:7e:c3:62:42:34:
c8:84:f2:e1:44:be:76:ea:1d:f0:36:c6:42:4c:67:d9:8c:60:
9c:3a:8d:ac:94:a3:68:6e:b8:5f:cf:0b:9b:ef:a3:6e:40:e2:
13:19:c3:bd:28:5e:ae:49:33:3f:87:74:3a:19:c6:a3:0d:d9:
8e:d6:95:98:75:3a:83:ab:5a:16:6d:fd:0e:ea:95:49:22:7a:
77:f3:3b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:41:22 2026 by rpki-client