Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/ty9WWFZcOV2YKLfAB7cWhRYHB7Q.roa
File: ty9WWFZcOV2YKLfAB7cWhRYHB7Q.roa (raw, json)
Hash identifier: suyqua2FvHDHxN2ytkr9MvI5xegoOmVz9G+tK3qqFcc=
Subject key identifier: B7:2F:56:58:56:5C:39:5D:98:28:B7:C0:07:B7:16:85:16:07:07:B4
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019D00EB3D96B56370079849EF824E9239FB
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/ty9WWFZcOV2YKLfAB7cWhRYHB7Q.roa
Signing time: Wed 18 Mar 2026 12:28:29 +0000
ROA not before: Wed 18 Mar 2026 12:28:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212477
IP address blocks: 45.130.119.0/24 maxlen: 32
45.137.198.0/23 maxlen: 32
45.137.204.0/23 maxlen: 32
45.137.206.0/24 maxlen: 32
45.137.207.0/24 maxlen: 32
45.138.19.0/24 maxlen: 32
45.139.50.0/23 maxlen: 32
45.140.140.0/22 maxlen: 32
45.140.188.0/22 maxlen: 32
45.140.212.0/23 maxlen: 23
45.140.212.0/24 maxlen: 32
45.140.213.0/24 maxlen: 32
193.37.248.0/24 maxlen: 32
193.176.244.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:00:eb:3d:96:b5:63:70:07:98:49:ef:82:4e:92:39:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Mar 18 12:28:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b72f5658565c395d9828b7c007b71685160707b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:03:f6:0a:ed:47:c3:a3:8e:5d:20:2f:4d:04:
e6:a2:7f:bd:aa:67:46:fa:09:78:a9:64:cf:e4:38:
03:8d:ec:98:92:ac:ab:f1:c2:36:97:53:3c:db:54:
d7:42:4e:44:f1:b0:f8:81:b9:63:7f:70:b3:ab:25:
6c:a5:1d:bd:bf:ae:b0:06:4d:58:46:70:84:35:70:
cb:6d:10:42:d7:d1:76:7e:1c:d6:25:f5:f2:f5:67:
3b:e0:11:81:52:7d:ba:3a:b8:47:d1:e2:eb:40:38:
e3:1c:8d:7f:9a:32:48:82:f0:17:b0:fb:46:c5:bf:
f1:e2:39:01:f0:49:b4:34:29:ba:c6:0c:77:da:6a:
c9:67:5f:af:51:53:50:f6:36:5c:f3:6a:db:ba:66:
4e:38:4f:a2:33:b6:65:d7:82:fe:1c:47:a0:ce:7b:
ad:f5:50:7e:0f:39:9b:66:0f:31:fa:d8:c6:40:41:
fe:41:24:7c:53:3f:20:dc:8e:fc:eb:1f:d1:4b:8b:
49:e4:12:21:38:86:43:19:d7:1f:13:d7:68:ce:31:
7c:25:4e:4e:c5:a2:f7:1f:41:1d:8d:16:67:29:dc:
78:73:cd:50:4b:6d:7d:a8:36:8c:af:99:89:b9:d8:
51:18:0b:f5:30:aa:e5:34:39:4c:e5:d2:00:82:df:
5e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2F:56:58:56:5C:39:5D:98:28:B7:C0:07:B7:16:85:16:07:07:B4
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/ty9WWFZcOV2YKLfAB7cWhRYHB7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.119.0/24
45.137.198.0/23
45.137.204.0/22
45.138.19.0/24
45.139.50.0/23
45.140.140.0/22
45.140.188.0/22
45.140.212.0/23
193.37.248.0/24
193.176.244.0/23
Signature Algorithm: sha256WithRSAEncryption
41:1d:e6:ee:44:ed:69:28:3e:12:52:b5:9d:0c:e4:7e:a5:f7:
72:4b:f0:c1:49:6f:78:dd:e8:19:cb:41:5e:73:a6:8c:97:1a:
8a:ff:a1:2e:69:cc:54:32:76:94:54:23:eb:c2:ca:9f:80:fc:
32:71:8c:ed:e1:81:e2:77:b3:63:4f:f0:f0:e0:9c:5d:5a:6f:
28:b6:f7:ab:53:98:b0:be:31:af:5d:62:2f:6f:f1:52:44:7d:
03:d0:f8:2a:38:ad:ec:44:22:e8:17:90:07:e5:93:1b:12:d4:
6b:d9:d9:03:15:4e:36:b1:a8:aa:16:ac:e8:7f:cf:f4:34:90:
58:bf:e2:58:1c:9d:36:8c:ad:f3:79:be:bf:d1:bf:ed:ab:29:
96:b5:fb:df:9f:eb:a3:9b:2c:a8:5b:94:8c:1e:85:c4:b7:b4:
e8:b1:c1:89:38:23:d2:2c:df:75:2b:ba:b5:c7:26:17:54:4a:
6c:7d:c2:bc:3f:12:f1:ef:e4:e1:24:a5:e8:3a:a9:39:5b:df:
16:b3:1f:59:c2:ca:2b:88:4d:3b:c2:fa:6e:06:c5:5f:8a:71:
ae:4f:2a:c6:9f:15:54:af:53:70:de:ca:ca:95:ff:b6:bb:23:
3b:af:ee:33:3f:78:92:89:1d:5a:4c:e9:d1:7d:f7:e1:c8:3a:
1f:ee:2f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:43:21 2026 by rpki-client