Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/TYzsCZNf74_8Vw2BXyvQ2PMdnlo.roa
File: TYzsCZNf74_8Vw2BXyvQ2PMdnlo.roa (raw, json)
Hash identifier: lYLW59BFiz7ZruM/BJlx9HC7vLLvPDL5O3kA6iBvACU=
Subject key identifier: 4D:8C:EC:09:93:5F:EF:8F:FC:57:0D:81:5F:2B:D0:D8:F3:1D:9E:5A
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019E15D01047F8308A5F301DA5C4CDD200D8
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/TYzsCZNf74_8Vw2BXyvQ2PMdnlo.roa
Signing time: Mon 11 May 2026 06:53:37 +0000
ROA not before: Mon 11 May 2026 06:53:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198250
IP address blocks: 81.5.177.0/24 maxlen: 24
81.168.68.0/24 maxlen: 24
81.168.70.0/24 maxlen: 24
81.168.76.0/24 maxlen: 24
81.168.122.0/24 maxlen: 24
82.152.68.0/24 maxlen: 24
82.152.129.0/24 maxlen: 24
82.152.255.0/24 maxlen: 24
89.28.234.0/24 maxlen: 24
89.213.5.0/24 maxlen: 24
89.213.42.0/24 maxlen: 24
89.213.166.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.168.0/24 maxlen: 24
89.213.170.0/24 maxlen: 24
89.213.171.0/24 maxlen: 24
89.213.172.0/24 maxlen: 24
89.213.173.0/24 maxlen: 24
89.213.175.0/24 maxlen: 24
89.213.177.0/24 maxlen: 24
89.213.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:15:d0:10:47:f8:30:8a:5f:30:1d:a5:c4:cd:d2:00:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 11 06:53:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d8cec09935fef8ffc570d815f2bd0d8f31d9e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6f:7c:04:3e:d1:21:68:43:60:fa:23:61:ad:
93:8e:8d:58:b9:82:0f:1a:29:c3:a4:86:8c:70:69:
f0:17:cf:0d:b5:cc:08:6b:99:08:06:31:20:2e:2c:
d4:9b:b8:4e:29:51:76:92:65:34:78:6f:33:ab:30:
78:d8:a7:17:b7:da:01:16:56:12:f6:63:b5:83:be:
ce:84:a5:dd:71:42:22:14:2f:b9:55:71:4a:09:1f:
d8:b8:fa:08:28:7a:e9:57:0c:16:eb:aa:48:d8:ae:
77:ba:39:3c:9d:5c:69:29:26:9e:a2:c3:bc:ff:09:
90:f9:8a:28:7e:e0:c2:68:a3:4a:1e:a7:68:ab:63:
04:ea:6b:9e:bf:94:bb:e6:6f:7c:5d:cf:64:2a:d1:
65:2a:1e:c3:7b:7b:2e:25:ed:76:71:c0:31:0a:84:
ac:d7:66:a2:99:50:97:19:a4:85:4e:10:15:01:8c:
56:ea:11:37:33:60:aa:b7:85:c5:11:24:72:02:d8:
18:46:db:c7:c4:84:cc:a0:c7:d2:f8:fd:42:26:1e:
d3:00:4b:6c:1b:f3:e2:dd:38:bf:82:72:16:fd:c4:
47:6b:05:d6:cd:bd:d1:ac:23:21:49:a4:5d:5c:ca:
49:c5:b5:d9:d0:cc:d3:f3:fa:7f:35:b4:44:aa:8d:
ff:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:8C:EC:09:93:5F:EF:8F:FC:57:0D:81:5F:2B:D0:D8:F3:1D:9E:5A
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/TYzsCZNf74_8Vw2BXyvQ2PMdnlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.177.0/24
81.168.68.0/24
81.168.70.0/24
81.168.76.0/24
81.168.122.0/24
82.152.68.0/24
82.152.129.0/24
82.152.255.0/24
89.28.234.0/24
89.213.5.0/24
89.213.42.0/24
89.213.166.0-89.213.168.255
89.213.170.0-89.213.173.255
89.213.175.0/24
89.213.177.0-89.213.178.255
Signature Algorithm: sha256WithRSAEncryption
6e:6c:25:83:4c:5f:bf:06:e8:05:8c:7c:72:10:51:68:0c:18:
83:9e:62:ec:2b:7b:18:e1:3a:9d:25:eb:80:48:b8:69:1d:f4:
9b:15:3d:dd:03:50:ad:23:93:ba:4d:4e:0f:09:5d:43:ea:59:
84:a3:b4:94:20:bf:72:3d:bf:8a:46:a0:ad:28:97:7d:a2:3f:
52:32:63:01:be:e1:fb:c1:b5:06:94:85:fe:5a:31:f0:26:b6:
35:7c:ca:e4:92:a1:31:48:9e:a7:03:40:19:cc:d8:f9:4c:60:
97:8b:00:64:bc:59:b0:bf:bb:c1:b4:93:32:dc:01:39:65:30:
d7:d2:a4:32:d0:75:03:d3:70:3d:da:07:96:e4:b5:4f:69:33:
40:72:90:b1:3e:6e:dc:90:ef:89:5e:41:ea:86:4f:a0:af:67:
7a:de:ba:8f:72:6f:5c:cc:49:86:31:99:80:d9:01:4a:f0:34:
47:d3:eb:eb:c6:aa:e7:b7:d0:df:d0:d7:e9:de:76:61:03:97:
d7:8e:69:bb:d2:64:58:8c:40:78:26:3e:64:af:45:b4:d4:74:
67:92:37:c1:4a:4f:22:f5:a6:01:a0:6d:c4:05:e9:53:1d:e8:
70:14:95:cf:d1:56:76:d0:bf:f8:9a:06:6e:d6:61:4d:bb:0b:
58:21:27:d1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue May 12 21:45:08 2026 by rpki-client