Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TSaE9jnfmLsajED341YmImmueVE.roa
File: TSaE9jnfmLsajED341YmImmueVE.roa (raw, json)
Hash identifier: z0vfj620Yifp7/Nyavqj/unas8uGjv3sCaFHadIyLYk=
Subject key identifier: 4D:26:84:F6:39:DF:98:BB:1A:8C:40:F7:E3:56:26:22:69:AE:79:51
Certificate issuer: /CN=4c4be43394a7c2bf1e8fdfbb1d506fa37ac73231
Certificate serial: 019F1ECFD0C1713474D8689812AD42DE8A46
Authority key identifier: 4C:4B:E4:33:94:A7:C2:BF:1E:8F:DF:BB:1D:50:6F:A3:7A:C7:32:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TSaE9jnfmLsajED341YmImmueVE.roa
Signing time: Wed 01 Jul 2026 17:52:43 +0000
ROA not before: Wed 01 Jul 2026 17:52:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13302
IP address blocks: 92.53.224.0/24 maxlen: 24
2a09:55c0::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1e:cf:d0:c1:71:34:74:d8:68:98:12:ad:42:de:8a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4be43394a7c2bf1e8fdfbb1d506fa37ac73231
Validity
Not Before: Jul 1 17:52:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d2684f639df98bb1a8c40f7e356262269ae7951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2d:1b:48:a0:fd:9d:0e:94:83:4b:e5:91:a8:
88:e7:8b:a4:f6:75:02:64:ce:13:7f:19:c8:62:db:
c0:c0:76:94:17:02:c0:f7:e2:d5:bb:bf:20:10:a6:
8d:06:bc:41:cb:a6:3c:f5:f4:d1:30:50:f0:5a:56:
bf:62:ed:bf:0c:5d:ba:af:03:ee:45:95:76:08:01:
1c:f2:c5:b4:25:02:cf:74:9f:a7:7b:2d:42:cb:43:
bd:b3:c5:71:58:91:3e:1e:44:05:ce:9b:7c:09:c4:
ca:26:21:9a:4a:a5:35:07:bd:42:6b:5c:ff:63:19:
32:e1:0d:19:57:dd:ae:b4:2a:d6:aa:38:49:28:1e:
7b:4c:c6:77:a3:50:e0:74:34:0f:d7:75:20:26:4c:
e2:ef:b0:37:b0:34:7d:a3:3b:94:f4:bd:ba:91:c0:
26:1d:cc:56:69:10:9b:25:ea:e2:cd:17:0a:43:0d:
c6:02:8f:e1:35:4e:86:10:c7:cc:77:28:32:f8:b6:
b8:b2:7a:b9:99:fd:51:c5:1a:d1:e5:10:97:ce:2b:
a9:13:8e:27:8c:a1:f1:0e:23:01:9f:13:58:bb:88:
a0:e1:61:45:fb:20:62:27:66:9d:56:da:93:4d:d1:
fd:a1:f1:10:91:54:72:e7:b3:cb:6e:04:f4:99:35:
8b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:26:84:F6:39:DF:98:BB:1A:8C:40:F7:E3:56:26:22:69:AE:79:51
X509v3 Authority Key Identifier:
keyid:4C:4B:E4:33:94:A7:C2:BF:1E:8F:DF:BB:1D:50:6F:A3:7A:C7:32:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TSaE9jnfmLsajED341YmImmueVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.224.0/24
IPv6:
2a09:55c0::/36
Signature Algorithm: sha256WithRSAEncryption
18:90:05:73:46:f4:ae:5d:b6:e6:98:b0:23:df:00:0a:d9:cb:
f9:d6:bb:b8:5a:94:0b:89:37:fc:80:71:dc:e3:33:0c:4b:1e:
a1:31:77:bc:0f:8d:96:1e:3b:a9:b3:4b:69:a4:02:fb:82:49:
80:20:db:d8:14:51:cb:4a:f4:4e:af:bc:3f:b6:e3:2f:e3:e0:
7b:1d:5d:70:27:f3:f8:df:e6:63:f2:92:70:98:36:85:b8:12:
85:a2:e8:81:f4:23:91:e0:37:11:05:ec:2d:32:c3:f2:32:d9:
a5:b2:b5:56:4c:52:ad:47:7b:d1:2b:fe:d9:fa:a7:1b:a2:9a:
63:a6:ae:fe:c3:f9:aa:4a:b6:26:86:27:df:a4:4e:7d:a0:1b:
20:81:f8:5b:d4:fa:48:e3:d4:de:0d:a9:90:44:c3:80:55:e3:
54:f4:ac:11:05:87:61:ca:80:93:a9:61:82:a9:9c:e5:d0:02:
20:da:93:42:f2:c1:29:f8:0f:ae:20:d3:ed:ba:98:48:0a:2c:
7f:df:0d:c0:01:25:4a:f5:80:16:8a:43:bc:ea:88:25:8f:cf:
ec:be:8c:a3:8e:ee:d6:f4:0d:c2:07:e2:81:63:ba:43:63:c1:
e1:50:6d:d1:d8:b1:22:21:b6:3b:67:e3:df:cc:f0:40:87:84:
30:56:0e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:35:18 2026 by rpki-client