Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/tngf2nQj1zhTgdfT5F0lURad0YE.roa
File: tngf2nQj1zhTgdfT5F0lURad0YE.roa (raw, json)
Hash identifier: dF427Z6X69bzH6ndLWjokles/RwWUDp59Znvt3k3xQE=
Subject key identifier: B6:78:1F:DA:74:23:D7:38:53:81:D7:D3:E4:5D:25:51:16:9D:D1:81
Certificate issuer: /CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Certificate serial: 01A0CDFDA57DC20DF81017CB059AADF3A1B1
Authority key identifier: 1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/tngf2nQj1zhTgdfT5F0lURad0YE.roa
Signing time: Wed 23 Sep 2026 11:19:07 +0000
ROA not before: Wed 23 Sep 2026 11:19:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62105
IP address blocks: 82.163.40.0/21 maxlen: 21
103.57.40.0/22 maxlen: 22
137.59.8.0/22 maxlen: 22
185.47.132.0/22 maxlen: 22
185.128.11.0/24 maxlen: 24
185.225.36.0/22 maxlen: 22
2a01:90a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 20:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:fd:a5:7d:c2:0d:f8:10:17:cb:05:9a:ad:f3:a1:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Validity
Not Before: Sep 23 11:19:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b6781fda7423d7385381d7d3e45d2551169dd181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1e:b5:34:69:0e:94:f7:fd:40:39:ec:d9:c5:
dc:39:a1:a1:96:76:92:87:0c:33:84:e7:8c:c8:65:
81:c2:1f:01:e5:89:c5:61:3a:f2:a2:d9:fe:d6:91:
41:1b:56:73:ae:c2:b0:23:4c:d7:5a:a4:9d:9c:aa:
6a:14:55:0f:fa:ef:66:e6:48:9e:a7:50:ad:5d:99:
28:5f:95:08:fb:1e:7f:10:97:f0:eb:11:57:a8:d3:
36:b1:78:bd:b9:68:a3:77:95:e4:60:cb:ad:3c:00:
fa:fe:f1:86:f5:e4:78:4c:01:7a:b7:df:db:a9:75:
94:bf:2e:c5:5b:4f:30:47:3d:0d:fd:ce:5c:4b:07:
ee:db:17:c0:cd:6a:a6:bb:5b:4d:1a:b9:58:b3:fa:
82:74:38:5d:c1:a6:9b:56:07:5f:c8:b2:42:bf:84:
f0:4f:5b:16:e7:39:13:1a:7f:ef:47:33:be:d8:e4:
8c:41:e7:b5:be:08:92:ed:ca:73:e6:99:a3:72:fb:
bb:d9:5c:66:07:73:b7:05:f9:87:8e:da:8d:f6:a4:
3b:eb:ff:c4:34:2d:86:42:0f:a0:f6:35:64:22:f4:
c1:27:4c:0b:f5:65:6b:3f:2f:f5:af:66:2e:4e:d9:
3d:19:91:ec:a9:81:a8:a9:b7:46:0b:70:1f:5f:c2:
08:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:78:1F:DA:74:23:D7:38:53:81:D7:D3:E4:5D:25:51:16:9D:D1:81
X509v3 Authority Key Identifier:
keyid:1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/tngf2nQj1zhTgdfT5F0lURad0YE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.40.0/21
103.57.40.0/22
137.59.8.0/22
185.47.132.0/22
185.128.11.0/24
185.225.36.0/22
IPv6:
2a01:90a0::/32
Signature Algorithm: sha256WithRSAEncryption
2e:56:89:79:41:a5:89:55:ce:da:db:1e:92:71:bf:e8:e7:cd:
b9:f4:8b:6b:14:19:05:e2:ef:a9:8d:3d:09:dc:32:e7:2a:92:
40:67:40:39:e0:88:ee:58:51:2f:ec:dd:c4:47:ed:f9:86:25:
52:7a:85:2a:43:1c:3e:44:45:62:1f:23:d9:46:e8:15:88:4b:
44:ce:2b:9c:99:a2:4c:0b:06:1f:f9:43:e7:f5:c1:16:55:0a:
27:7a:3c:c2:21:3e:01:fd:51:d2:4e:d6:5e:0a:16:26:19:ee:
83:ff:ec:f6:c3:30:c7:e4:eb:06:84:3a:49:8f:3c:72:c6:8d:
d5:78:27:dc:bf:d8:97:fd:99:11:21:47:ce:6b:71:1a:61:6b:
1b:a2:7e:a8:75:78:eb:a3:17:a3:15:34:48:6f:60:12:9c:f0:
9d:91:7d:47:bf:45:84:31:66:be:5d:d2:bc:a9:75:45:39:6e:
0f:27:f5:a5:5e:97:85:04:1e:68:bb:9e:ab:da:62:6c:10:65:
0d:56:15:17:de:b7:90:98:75:1a:fa:89:8b:58:ab:42:b7:18:
f7:b2:07:ff:26:41:a6:0b:9d:58:3f:61:5b:d0:14:f3:e5:5a:
28:68:06:2c:cd:48:4e:04:cc:84:c7:d9:d9:44:a5:33:2b:4d:
62:f0:88:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 06:53:21 2026 by rpki-client