Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/tRCo698OLskCl9yxuXrYnVswfuY.roa
File: tRCo698OLskCl9yxuXrYnVswfuY.roa (raw, json)
Hash identifier: 3v0nXeaSzI2OUyHuNf5mADohJz6PWIxMsxLpU3/zPTo=
Subject key identifier: B5:10:A8:EB:DF:0E:2E:C9:02:97:DC:B1:B9:7A:D8:9D:5B:30:7E:E6
Certificate issuer: /CN=3d2eb4147ee7bfc6ba72fc0349453498f000e581
Certificate serial: 01A05CB74F73B287EEC79613FD5423C37D30
Authority key identifier: 3D:2E:B4:14:7E:E7:BF:C6:BA:72:FC:03:49:45:34:98:F0:00:E5:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/tRCo698OLskCl9yxuXrYnVswfuY.roa
Signing time: Tue 01 Sep 2026 11:25:12 +0000
ROA not before: Tue 01 Sep 2026 11:25:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5619
IP address blocks: 139.105.0.0/16 maxlen: 16
139.105.17.0/24 maxlen: 24
139.105.36.0/24 maxlen: 24
139.105.37.0/24 maxlen: 24
139.106.0.0/15 maxlen: 15
139.108.0.0/14 maxlen: 14
139.112.0.0/13 maxlen: 13
139.120.0.0/16 maxlen: 16
146.192.0.0/17 maxlen: 17
146.213.0.0/16 maxlen: 16
153.110.0.0/16 maxlen: 16
192.68.76.0/22 maxlen: 22
192.68.78.0/24 maxlen: 24
192.68.80.0/20 maxlen: 20
192.146.163.0/24 maxlen: 24
192.146.164.0/24 maxlen: 24
192.146.165.0/24 maxlen: 24
192.146.167.0/24 maxlen: 24
192.146.169.0/24 maxlen: 24
192.146.170.0/24 maxlen: 24
212.18.128.0/19 maxlen: 19
217.17.0.0/20 maxlen: 20
2a00:1be8::/29 maxlen: 29
2a02:9c8::/29 maxlen: 29
2a02:9cc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 07:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:b7:4f:73:b2:87:ee:c7:96:13:fd:54:23:c3:7d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d2eb4147ee7bfc6ba72fc0349453498f000e581
Validity
Not Before: Sep 1 11:25:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b510a8ebdf0e2ec90297dcb1b97ad89d5b307ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f8:f7:c0:fd:0d:ad:63:6a:85:56:97:04:b6:
4d:05:4c:41:fd:ca:58:23:61:2c:34:06:7a:9f:cf:
f7:03:b5:32:e8:24:bb:59:65:5b:1e:98:82:66:06:
03:a8:a3:2f:72:86:ff:a6:da:80:eb:61:d9:c9:11:
0e:a0:18:2f:95:04:34:48:12:b7:79:6f:85:56:fc:
c3:db:dd:26:c4:da:0e:34:67:a8:1f:b6:07:a4:47:
25:04:25:95:9b:e4:1d:ce:43:11:94:c7:68:9a:ad:
a0:84:e9:00:7c:66:0e:5b:61:46:c9:f9:55:42:7c:
a1:30:41:dc:28:2f:95:b0:56:86:da:56:88:95:f7:
74:c7:2b:4b:ce:79:52:f7:58:6e:7e:ef:c5:99:00:
61:0f:a9:01:2a:b3:bc:55:ef:90:71:71:98:34:f0:
a3:45:f2:e1:d5:24:02:c3:bc:fe:7e:4c:69:f6:54:
13:5c:3a:5e:b9:ff:51:0c:53:88:7e:a9:52:56:f2:
65:4c:22:13:e6:a8:d7:ce:e2:b9:8b:b8:e1:20:86:
6a:98:de:5c:ac:6a:a6:13:aa:a6:c4:74:32:70:9f:
a1:44:61:69:82:63:5d:a4:b2:ba:38:a0:e9:a4:ef:
14:6e:b1:f2:c6:57:50:71:84:bf:7a:62:bd:b5:1e:
5e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:10:A8:EB:DF:0E:2E:C9:02:97:DC:B1:B9:7A:D8:9D:5B:30:7E:E6
X509v3 Authority Key Identifier:
keyid:3D:2E:B4:14:7E:E7:BF:C6:BA:72:FC:03:49:45:34:98:F0:00:E5:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/tRCo698OLskCl9yxuXrYnVswfuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.105.0.0-139.120.255.255
146.192.0.0/17
146.213.0.0/16
153.110.0.0/16
192.68.76.0-192.68.95.255
192.146.163.0-192.146.165.255
192.146.167.0/24
192.146.169.0-192.146.170.255
212.18.128.0/19
217.17.0.0/20
IPv6:
2a00:1be8::/29
2a02:9c8::/29
Signature Algorithm: sha256WithRSAEncryption
95:2c:ce:20:31:ef:48:4f:22:27:a1:02:65:3e:f6:16:dc:6a:
ea:83:85:24:83:3d:39:d7:78:60:2d:d3:50:d6:57:ac:e6:00:
7a:b5:ad:3b:c0:c6:08:6d:59:24:03:ea:ce:ab:9e:3c:37:f9:
1c:cf:1a:0d:63:7d:34:56:d7:96:b7:78:32:8d:82:5e:e8:68:
0a:95:3e:06:ba:01:16:0b:56:92:7d:c4:15:09:57:30:63:c2:
51:f9:86:29:f2:db:d2:fd:97:20:1a:0c:42:0b:ad:53:a9:a4:
9b:d6:14:d2:41:88:20:8e:e0:d0:46:54:73:74:8e:63:b7:ac:
61:4a:05:03:02:c8:53:3d:b2:d3:b7:90:81:10:17:95:0f:36:
97:7d:f6:36:98:fb:63:fc:e7:ff:ff:8a:93:86:89:ff:12:a1:
9c:f6:c6:3f:76:a8:2c:cd:65:25:70:2d:0d:a0:93:78:52:0e:
33:a6:7d:a2:9b:38:0d:55:40:3a:3c:0f:87:87:81:fe:14:33:
3d:79:c5:e2:3a:9f:2e:f8:e0:4d:89:a3:d3:2c:f9:1e:9b:77:
6a:6a:1e:af:5a:7a:3c:37:45:81:12:60:3d:4b:40:43:3b:49:
5c:8c:92:ae:30:70:fa:54:ab:14:fb:08:b1:75:81:50:30:36:
2d:dc:0b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:07:55 2026 by rpki-client