Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/TtF2-5jlTeNtomtDsnLXaVfZZQs.roa
File: TtF2-5jlTeNtomtDsnLXaVfZZQs.roa (raw, json)
Hash identifier: bOFctgKhUglT+7Rnoc8CMHSaJ6gExTqm2TI5PVgaKVs=
Subject key identifier: 4E:D1:76:FB:98:E5:4D:E3:6D:A2:6B:43:B2:72:D7:69:57:D9:65:0B
Certificate issuer: /CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Certificate serial: 019D9C8A4763532D2FBEECA9FF2DABE16506
Authority key identifier: B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/TtF2-5jlTeNtomtDsnLXaVfZZQs.roa
Signing time: Fri 17 Apr 2026 17:43:20 +0000
ROA not before: Fri 17 Apr 2026 17:43:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6698
IP address blocks: 31.42.184.0/22 maxlen: 24
45.11.56.0/22 maxlen: 24
45.11.57.0/24 maxlen: 24
45.12.0.0/22 maxlen: 24
45.12.0.0/24 maxlen: 24
45.12.1.0/24 maxlen: 24
45.12.2.0/24 maxlen: 24
45.12.3.0/24 maxlen: 24
45.134.172.0/22 maxlen: 24
45.134.173.0/24 maxlen: 24
62.182.80.0/21 maxlen: 24
62.182.84.0/24 maxlen: 24
85.137.49.0/24 maxlen: 24
85.137.50.0/24 maxlen: 24
85.137.57.0/24 maxlen: 24
91.208.115.0/24 maxlen: 24
91.218.48.0/22 maxlen: 24
91.222.172.0/22 maxlen: 24
91.234.198.0/23 maxlen: 24
128.0.104.0/24 maxlen: 24
152.89.60.0/22 maxlen: 24
176.97.112.0/20 maxlen: 24
176.97.112.0/23 maxlen: 24
176.97.114.0/24 maxlen: 24
176.97.115.0/24 maxlen: 24
176.97.122.0/23 maxlen: 23
176.97.124.0/24 maxlen: 24
176.119.24.0/21 maxlen: 24
176.119.30.0/24 maxlen: 24
176.119.31.0/24 maxlen: 24
185.66.88.0/22 maxlen: 24
185.66.91.0/24 maxlen: 24
185.254.196.0/22 maxlen: 24
185.254.198.0/24 maxlen: 24
185.254.199.0/24 maxlen: 24
193.23.181.0/24 maxlen: 24
194.42.204.0/22 maxlen: 24
194.42.204.0/24 maxlen: 24
194.42.205.0/24 maxlen: 24
195.26.86.0/23 maxlen: 24
195.66.210.0/24 maxlen: 24
195.66.212.0/22 maxlen: 24
195.128.248.0/23 maxlen: 24
195.160.220.0/22 maxlen: 24
212.86.116.0/22 maxlen: 24
212.86.116.0/24 maxlen: 24
212.86.118.0/23 maxlen: 23
212.86.124.0/24 maxlen: 24
2a09:2dc2::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:8a:47:63:53:2d:2f:be:ec:a9:ff:2d:ab:e1:65:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Validity
Not Before: Apr 17 17:43:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ed176fb98e54de36da26b43b272d76957d9650b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:04:29:69:90:74:ee:80:ca:12:f9:e0:40:59:
08:94:c3:55:e4:9d:22:b5:05:12:76:04:a7:ab:19:
38:6c:d5:c1:dd:de:5a:36:c2:5c:a9:34:2e:da:5d:
94:62:2c:de:af:5c:d7:e5:f2:85:6a:13:f4:da:20:
4e:0b:20:9c:a7:b8:16:f6:c4:8d:f9:89:16:3f:f2:
ce:a0:b3:d6:a9:37:53:ba:1b:ca:84:cc:a0:22:f8:
13:99:49:e8:43:66:5e:fb:8c:07:f6:1b:b2:7e:2f:
78:0f:21:8c:5b:b6:cd:fc:c0:24:fe:1e:70:da:cc:
dd:e3:35:53:d4:99:9f:3d:ef:c3:0d:75:e2:71:b1:
c6:cf:33:ae:22:fd:40:25:b0:99:ef:a7:29:8c:6a:
23:1b:8d:ae:a4:7b:33:50:0e:28:3d:3d:68:20:fd:
8e:fb:45:0f:3f:cb:8d:ea:80:11:5b:ef:26:5b:53:
cb:9e:69:49:25:ed:e2:b2:3f:d6:0d:0c:c0:61:2c:
56:0f:57:55:1b:e0:bc:0c:dc:ab:f6:76:db:6f:e3:
1d:e1:38:4f:d5:f0:16:f5:19:ef:de:30:4f:23:d9:
19:a4:f5:8a:a8:f1:9b:79:58:48:35:b7:59:27:84:
72:84:6a:54:5d:72:f8:c0:0d:12:4d:86:bc:a1:8f:
11:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D1:76:FB:98:E5:4D:E3:6D:A2:6B:43:B2:72:D7:69:57:D9:65:0B
X509v3 Authority Key Identifier:
keyid:B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/TtF2-5jlTeNtomtDsnLXaVfZZQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.184.0/22
45.11.56.0/22
45.12.0.0/22
45.134.172.0/22
62.182.80.0/21
85.137.49.0-85.137.50.255
85.137.57.0/24
91.208.115.0/24
91.218.48.0/22
91.222.172.0/22
91.234.198.0/23
128.0.104.0/24
152.89.60.0/22
176.97.112.0/20
176.119.24.0/21
185.66.88.0/22
185.254.196.0/22
193.23.181.0/24
194.42.204.0/22
195.26.86.0/23
195.66.210.0/24
195.66.212.0/22
195.128.248.0/23
195.160.220.0/22
212.86.116.0/22
212.86.124.0/24
IPv6:
2a09:2dc2::/32
Signature Algorithm: sha256WithRSAEncryption
73:28:e2:50:ec:a5:86:c8:74:ea:ac:0d:75:c8:ed:de:a7:c1:
df:93:8a:b9:8e:99:52:22:ee:d4:95:97:17:55:7f:16:3a:b5:
0e:57:ee:c3:9a:72:8e:53:92:be:b7:e1:72:38:47:62:7b:4b:
b1:c1:00:fb:72:7f:93:13:3e:0c:d6:dc:61:6f:30:2f:14:25:
7b:cc:02:5c:2a:f7:82:06:ad:6a:dc:05:a2:7f:0e:a1:77:2c:
5d:5a:81:c8:e6:92:86:30:0b:f9:f1:80:76:b5:2d:6a:6b:90:
c3:d5:65:c7:5a:47:7c:55:39:5a:85:fb:c3:70:fa:ef:20:af:
ea:5e:8a:8a:94:ae:da:46:d3:81:e0:2b:c2:48:c0:57:fc:5e:
37:52:cd:0e:b0:65:1b:49:47:ba:1f:d5:31:7b:94:18:c2:3f:
b9:c4:93:9a:bd:ab:ee:12:58:86:a1:3a:ce:89:67:40:8b:9f:
6d:dd:b5:59:d8:0c:07:9f:9d:21:c2:78:81:a0:12:04:05:99:
a3:25:bc:a0:67:cf:30:8e:37:07:94:bb:61:88:49:48:64:54:
56:9a:d6:0d:0f:37:e2:eb:04:18:ef:d7:c6:c4:0e:6c:7b:19:
bf:43:7c:fb:8a:1c:06:99:fc:6f:2f:10:77:29:99:76:32:a0:
3f:a9:d3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:12:31 2026 by rpki-client