Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/TsEeS06BRtfUnD0nBFcpdNoJZpI.roa
File: TsEeS06BRtfUnD0nBFcpdNoJZpI.roa (raw, json)
Hash identifier: 0npomOaU1CPA/lCqnhXlEsByCa+iM4LMEDRJdI6ifoM=
Subject key identifier: 4E:C1:1E:4B:4E:81:46:D7:D4:9C:3D:27:04:57:29:74:DA:09:66:92
Certificate issuer: /CN=d2ae5e338794e60d5d8b523bdb2b68ec4ac762ce
Certificate serial: 01A1A869572A737C287DAEDEF15CA10B39E9
Authority key identifier: D2:AE:5E:33:87:94:E6:0D:5D:8B:52:3B:DB:2B:68:EC:4A:C7:62:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/TsEeS06BRtfUnD0nBFcpdNoJZpI.roa
Signing time: Wed 04 Nov 2026 21:13:58 +0000
ROA not before: Wed 04 Nov 2026 21:13:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35499
IP address blocks: 45.66.124.0/22 maxlen: 24
45.66.127.0/24 maxlen: 24
2a09:68c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 00:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a8:69:57:2a:73:7c:28:7d:ae:de:f1:5c:a1:0b:39:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ae5e338794e60d5d8b523bdb2b68ec4ac762ce
Validity
Not Before: Nov 4 21:13:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ec11e4b4e8146d7d49c3d2704572974da096692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e7:34:10:ec:22:88:0a:80:ec:13:16:7a:dd:
8e:b9:a0:5c:b5:07:0f:39:63:1e:d9:04:3e:87:4e:
82:11:f4:6d:87:6f:0d:c8:66:ac:bc:44:5a:93:30:
a2:78:6b:13:3b:02:af:47:a4:18:b4:4c:7c:e7:68:
2c:e0:b3:85:d6:d6:08:0c:b4:d6:d6:84:da:75:b1:
fd:ac:b7:b0:38:60:eb:2e:52:af:dd:be:c5:aa:26:
4f:56:e6:39:10:5d:8b:fa:55:7b:cf:05:b8:79:9c:
23:cc:af:9c:e2:65:46:d4:e7:39:ae:df:da:37:33:
3d:c4:1b:bc:a3:a8:c4:69:a6:ee:ed:7a:38:03:f5:
09:d1:74:fc:6f:13:30:9c:59:f3:aa:75:98:e0:2d:
1e:88:42:07:cb:02:ed:20:c4:fe:a0:5e:95:b5:57:
86:a9:23:98:80:dc:c8:e1:d4:64:c6:6b:47:83:c9:
48:f2:05:81:bf:53:e3:42:12:81:fb:d0:86:68:b6:
9f:63:22:ee:af:6a:eb:ca:02:4c:64:69:fb:7e:ae:
c8:a6:1b:00:74:a7:60:1f:35:c5:f3:2b:c2:33:ae:
26:84:d5:15:40:b9:22:3c:d4:82:5a:94:5d:5f:71:
4a:6e:90:0f:43:a9:ff:af:47:a2:7a:f1:82:6f:54:
42:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C1:1E:4B:4E:81:46:D7:D4:9C:3D:27:04:57:29:74:DA:09:66:92
X509v3 Authority Key Identifier:
keyid:D2:AE:5E:33:87:94:E6:0D:5D:8B:52:3B:DB:2B:68:EC:4A:C7:62:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/TsEeS06BRtfUnD0nBFcpdNoJZpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.124.0/22
IPv6:
2a09:68c0::/29
Signature Algorithm: sha256WithRSAEncryption
8a:14:98:e5:1e:fd:3f:da:b1:0f:9b:94:64:eb:32:d5:98:b2:
f9:f0:75:37:e8:f7:9a:c4:5d:46:af:c6:b1:09:bc:bc:5a:82:
7f:e3:89:42:67:d9:3f:c3:ae:55:4b:17:27:68:6f:b9:58:1b:
f7:ce:60:f0:3d:08:42:42:e2:57:20:8b:ae:b1:0e:0f:f3:37:
45:94:3d:2b:b9:ce:2a:8c:44:9a:43:aa:2f:fe:fd:a0:d6:9a:
74:8a:d6:68:5f:9c:3c:2c:83:65:47:d5:69:f0:9d:69:93:98:
bf:fc:76:06:77:d2:07:44:99:21:b8:cc:ae:c9:49:73:0b:4f:
71:fe:e7:8a:01:3b:e2:63:a3:07:54:e7:35:04:4e:20:e4:d2:
95:be:c5:ec:38:34:88:84:02:9e:07:71:b4:6e:e3:39:c8:ed:
65:81:50:9f:4b:8c:74:da:be:17:1f:6d:3b:56:ef:d3:e5:e4:
49:ce:95:fd:6b:48:13:ad:a2:09:6c:7c:66:c3:01:84:41:0e:
7d:ca:44:98:ad:aa:7c:22:3c:40:48:ee:48:e9:f9:76:60:db:
26:83:8d:cf:0c:c6:51:2f:32:37:84:c2:f5:14:ff:02:c2:4d:
4d:6f:16:f8:bc:74:29:9e:55:c3:90:b1:9f:8c:21:7c:dd:19:
40:31:4e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 11:12:41 2026 by rpki-client