Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/TZcEJaQXpDrAXuvGc3s_Zd_I3PI.roa
File: TZcEJaQXpDrAXuvGc3s_Zd_I3PI.roa (raw, json)
Hash identifier: bL4XenmCDJbff/MqTHfiWQNDePBNNE3fmDlYlrfuHMA=
Subject key identifier: 4D:97:04:25:A4:17:A4:3A:C0:5E:EB:C6:73:7B:3F:65:DF:C8:DC:F2
Certificate issuer: /CN=1027a8a61299b80a3e71d1a981427ec00b849d17
Certificate serial: 019D0B972D0ED0175A79F4F59064F10C64D7
Authority key identifier: 10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/TZcEJaQXpDrAXuvGc3s_Zd_I3PI.roa
Signing time: Fri 20 Mar 2026 14:12:29 +0000
ROA not before: Fri 20 Mar 2026 14:12:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34766
IP address blocks: 95.142.110.0/24 maxlen: 24
185.138.56.0/22 maxlen: 22
185.138.56.0/24 maxlen: 24
185.138.57.0/24 maxlen: 24
185.138.58.0/24 maxlen: 24
185.138.59.0/24 maxlen: 24
193.202.88.0/24 maxlen: 24
2a07:a80::/29 maxlen: 29
2a07:a80::/40 maxlen: 40
2a07:a80:100::/40 maxlen: 40
2a07:a80:200::/40 maxlen: 40
2a07:a80:300::/40 maxlen: 40
2a07:a80:b00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0b:97:2d:0e:d0:17:5a:79:f4:f5:90:64:f1:0c:64:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1027a8a61299b80a3e71d1a981427ec00b849d17
Validity
Not Before: Mar 20 14:12:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d970425a417a43ac05eebc6737b3f65dfc8dcf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:39:58:d2:43:31:a6:cf:17:30:5f:cb:bd:ba:
78:f7:6b:f3:ea:89:41:01:5d:b0:95:81:fb:bb:76:
cb:07:dd:ff:73:48:f9:84:ed:3f:01:26:5f:c8:3e:
b6:22:5e:d4:fa:f5:0e:de:ba:02:2f:92:72:51:58:
e3:69:58:b1:d4:29:c6:33:eb:e1:f3:0a:fd:7b:f6:
d8:35:2d:e9:ee:cb:58:83:b4:9f:30:54:ef:12:56:
8c:0a:b7:90:31:f0:9c:dc:f9:ae:97:4e:24:81:b2:
f7:17:a8:2d:b0:cc:50:8e:dd:f0:02:f1:16:5a:3c:
ec:f5:b5:84:99:ce:87:cc:dd:b8:fe:25:3d:a0:0c:
08:7e:11:d5:43:5d:01:a2:7c:99:a2:ff:e2:d4:a2:
52:16:60:30:e5:b9:60:5f:40:72:b1:b0:e9:52:a3:
ba:b2:5f:36:72:c9:25:ae:57:f8:90:f6:10:82:68:
d4:11:29:2e:ca:87:63:97:74:04:91:03:d9:c8:b2:
92:91:60:fa:d9:99:85:a0:93:d4:bf:90:13:ef:5e:
d6:c1:e2:14:42:3b:ef:7e:8c:9d:57:21:cd:4f:40:
ae:66:f6:be:a2:ab:78:0b:40:5e:2d:93:89:b3:ef:
41:b5:f3:43:60:55:11:6a:93:4c:d5:5b:47:1f:5f:
1e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:97:04:25:A4:17:A4:3A:C0:5E:EB:C6:73:7B:3F:65:DF:C8:DC:F2
X509v3 Authority Key Identifier:
keyid:10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/TZcEJaQXpDrAXuvGc3s_Zd_I3PI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.142.110.0/24
185.138.56.0/22
193.202.88.0/24
IPv6:
2a07:a80::/29
Signature Algorithm: sha256WithRSAEncryption
62:45:b4:e2:9b:2d:8e:2a:7a:62:76:55:29:c3:ae:b7:e9:61:
16:8e:5c:49:d0:99:3f:8a:16:52:f6:88:4e:04:79:80:c7:aa:
ac:2a:9e:13:4a:87:75:3a:e0:73:79:c2:17:92:74:a3:2d:fa:
48:dd:fa:49:c3:ed:bc:ff:9d:41:31:4b:d5:f3:aa:e9:8f:27:
c9:19:c0:bc:be:06:a4:8a:5d:53:c7:b8:58:84:6b:ff:81:60:
df:83:c4:f4:db:c0:01:dd:6f:d0:e8:9a:19:39:13:d7:db:52:
ca:18:6e:f9:cc:51:5f:b1:5d:f3:c8:f2:4f:47:ee:c8:4f:29:
89:a5:f4:e6:c1:c4:2a:2d:95:07:84:8d:64:dc:0d:92:eb:c2:
e8:96:8b:b5:db:fb:5f:bb:36:ab:55:f5:64:94:41:06:47:64:
6b:21:07:cf:12:39:31:2b:83:2c:47:4c:24:be:cb:20:c4:11:
1d:fa:cc:a7:55:33:a8:a6:ab:6a:54:26:3b:f5:01:fe:cc:1e:
4a:16:1d:8b:5b:23:ea:df:d2:ce:f6:ce:f9:8e:56:16:24:28:
e0:46:26:c7:96:7a:ed:18:db:64:e1:c8:e3:20:44:22:98:cc:
5a:d2:99:60:7c:22:30:e4:00:e3:b0:f6:a0:8a:2d:16:94:e5:
3b:29:a5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:45:27 2026 by rpki-client