Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/tRjIbRYyE4lE3XylGc6ElRdu_bI.roa
File: tRjIbRYyE4lE3XylGc6ElRdu_bI.roa (raw, json)
Hash identifier: +1aCVbuS6QCs5ldp4V3vvlDvjiEglf2CJrOgFXepcvA=
Subject key identifier: B5:18:C8:6D:16:32:13:89:44:DD:7C:A5:19:CE:84:95:17:6E:FD:B2
Certificate issuer: /CN=aeb0b777f5377bb1c50653884b03e27dcdee828e
Certificate serial: 019F8F3F8CBE52CA8E24885A5618D9FEFA9A
Authority key identifier: AE:B0:B7:77:F5:37:7B:B1:C5:06:53:88:4B:03:E2:7D:CD:EE:82:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/tRjIbRYyE4lE3XylGc6ElRdu_bI.roa
Signing time: Thu 23 Jul 2026 13:52:14 +0000
ROA not before: Thu 23 Jul 2026 13:52:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33921
IP address blocks: 5.42.207.0/24 maxlen: 24
45.92.79.0/24 maxlen: 24
84.246.112.0/24 maxlen: 24
84.246.113.0/24 maxlen: 24
84.246.114.0/24 maxlen: 24
84.246.115.0/24 maxlen: 24
91.208.59.0/24 maxlen: 24
141.98.208.0/24 maxlen: 24
185.5.129.0/24 maxlen: 24
185.221.60.0/24 maxlen: 24
194.26.132.0/24 maxlen: 24
194.99.64.0/24 maxlen: 24
194.213.108.0/24 maxlen: 24
2a13:a380::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:3f:8c:be:52:ca:8e:24:88:5a:56:18:d9:fe:fa:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb0b777f5377bb1c50653884b03e27dcdee828e
Validity
Not Before: Jul 23 13:52:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b518c86d1632138944dd7ca519ce8495176efdb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:00:fa:69:dc:32:0f:dd:ac:3f:08:93:fe:5b:
3e:27:a3:29:80:c6:e4:6d:17:94:89:92:b6:20:cf:
cf:54:37:8d:60:01:6f:e8:73:af:1f:20:3b:2c:1e:
19:a4:22:8d:4c:1f:d5:fd:e3:70:04:18:fa:02:21:
c5:5b:cd:19:3b:d9:31:0f:68:61:56:33:53:1b:49:
5d:51:77:cf:c5:78:62:31:93:35:aa:e8:39:da:9c:
c7:70:be:ba:9b:45:00:0a:9b:2d:fb:8c:fb:18:27:
1a:e9:19:77:92:3c:3a:61:42:d7:a6:cc:a5:2c:93:
87:08:75:72:e7:c4:44:e8:65:bc:ca:18:1a:bb:14:
17:e5:1d:03:43:0e:14:5a:ff:61:73:55:4d:b2:0e:
8f:4a:f2:9b:41:d9:35:a6:09:ab:28:7f:b3:20:10:
cb:81:83:e3:41:68:62:2d:5b:db:9a:00:78:7c:10:
be:f4:ca:f7:24:f3:c6:fe:bd:2e:8e:4f:f5:c9:f8:
1e:e1:7d:05:b2:09:23:3d:c7:88:18:4f:00:17:e5:
77:2a:4d:81:8b:60:ff:f6:87:84:a9:ff:5b:94:d3:
b2:8e:08:02:53:a7:1d:84:65:c5:74:8d:6b:6f:d5:
d4:1f:55:b6:aa:db:24:e2:1a:15:11:27:e9:0e:2c:
78:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:18:C8:6D:16:32:13:89:44:DD:7C:A5:19:CE:84:95:17:6E:FD:B2
X509v3 Authority Key Identifier:
keyid:AE:B0:B7:77:F5:37:7B:B1:C5:06:53:88:4B:03:E2:7D:CD:EE:82:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/tRjIbRYyE4lE3XylGc6ElRdu_bI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.207.0/24
45.92.79.0/24
84.246.112.0/22
91.208.59.0/24
141.98.208.0/24
185.5.129.0/24
185.221.60.0/24
194.26.132.0/24
194.99.64.0/24
194.213.108.0/24
IPv6:
2a13:a380::/40
Signature Algorithm: sha256WithRSAEncryption
0c:6d:cd:4a:fc:65:62:d1:7f:f5:9c:7f:6e:0c:9b:6c:bd:8d:
ee:76:b8:57:bd:8b:fe:11:4c:3c:f0:96:60:dd:29:c7:86:4a:
1e:40:d5:cd:16:51:1a:b8:0a:cc:c8:99:06:80:17:e3:36:5d:
b2:1a:4c:ef:7e:3f:cc:36:ef:b3:ea:a8:1e:a7:d3:e5:15:d2:
eb:58:eb:4b:33:13:32:42:0d:75:eb:a3:43:56:28:1c:05:1c:
4e:19:5f:bf:1b:9f:27:96:ef:1b:aa:0e:11:ee:69:17:86:3c:
df:f6:3f:ad:dd:85:06:94:ac:b5:a5:91:6e:65:cf:ae:b3:ae:
e6:85:93:9d:e5:20:73:a1:de:e4:09:a8:47:a7:b6:39:5c:8a:
69:87:65:50:a1:c6:df:66:a0:8a:8e:48:7f:fa:ea:79:d9:b4:
d1:65:49:ce:d7:42:64:88:60:cb:c1:c8:5d:42:29:07:bf:fb:
78:28:54:77:55:52:8b:01:01:39:35:fc:aa:0f:23:d1:48:22:
b0:ed:af:75:9e:25:12:d1:f6:09:03:60:a3:d0:8e:83:15:6c:
23:72:1e:be:73:58:61:eb:c0:8e:b3:c0:9f:47:7a:40:bb:98:
bb:e8:eb:1c:b8:88:69:c5:06:ef:59:7f:46:e8:73:18:1d:c5:
58:ea:f6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:22:04 2026 by rpki-client