Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/TsdPJx7OiywMM122PIYNYWmJFCc.roa
File: TsdPJx7OiywMM122PIYNYWmJFCc.roa (raw, json)
Hash identifier: x07yC7l/UbYraclqrFWdPKzw6DYUXEN90KFVFdpgkOo=
Subject key identifier: 4E:C7:4F:27:1E:CE:8B:2C:0C:33:5D:B6:3C:86:0D:61:69:89:14:27
Certificate issuer: /CN=207fe5037336d8f3940329bf0addb793384ef522
Certificate serial: 019F23691E3C0714FC81F8EFAF3CC6FDA9BC
Authority key identifier: 20:7F:E5:03:73:36:D8:F3:94:03:29:BF:0A:DD:B7:93:38:4E:F5:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IH_lA3M22POUAym_Ct23kzhO9SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/TsdPJx7OiywMM122PIYNYWmJFCc.roa
Signing time: Thu 02 Jul 2026 15:18:39 +0000
ROA not before: Thu 02 Jul 2026 15:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29404
IP address blocks: 217.73.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/IH_lA3M22POUAym_Ct23kzhO9SI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/IH_lA3M22POUAym_Ct23kzhO9SI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IH_lA3M22POUAym_Ct23kzhO9SI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1e:3c:07:14:fc:81:f8:ef:af:3c:c6:fd:a9:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=207fe5037336d8f3940329bf0addb793384ef522
Validity
Not Before: Jul 2 15:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ec74f271ece8b2c0c335db63c860d6169891427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:29:da:8f:21:ed:67:93:5e:68:6c:57:af:26:
f0:d4:96:f3:f3:ef:78:c4:87:04:c1:5d:87:1e:a6:
f0:50:34:2e:bb:51:c4:c0:11:6b:a6:1c:8e:a5:c2:
60:35:49:bf:b1:14:4f:6b:87:0e:3b:28:99:29:5c:
0f:8c:79:a5:55:18:b8:7c:04:2a:48:f7:84:3b:ee:
78:b0:7e:6f:92:f2:c7:6e:61:4e:86:53:58:93:6d:
e0:e9:f1:a8:8b:e2:e0:bc:ee:3e:60:ea:11:13:c4:
09:e7:bb:a8:4e:20:a1:87:34:f2:ff:19:df:fa:30:
3f:df:92:e9:99:87:e6:d8:3f:b4:bd:1c:6d:4e:be:
ef:dd:53:f1:cb:35:3f:78:7a:0a:23:c1:a6:be:19:
a7:78:e5:89:56:b9:84:68:96:a2:1a:8c:79:b0:e1:
bc:c2:f1:82:af:98:07:2a:df:88:20:29:b1:b8:6b:
5e:16:f1:44:cf:a0:89:1a:a0:c8:b6:e2:98:83:fc:
69:66:8c:30:c9:f6:21:28:5f:03:65:73:85:48:98:
3d:9a:94:d0:80:ee:dd:e9:da:48:6b:fa:3a:66:0c:
22:bd:d7:b6:38:54:9a:c3:83:36:a1:61:5c:0d:d9:
b8:62:e2:d1:54:6c:35:82:8d:0a:f7:38:56:8f:93:
49:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C7:4F:27:1E:CE:8B:2C:0C:33:5D:B6:3C:86:0D:61:69:89:14:27
X509v3 Authority Key Identifier:
keyid:20:7F:E5:03:73:36:D8:F3:94:03:29:BF:0A:DD:B7:93:38:4E:F5:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IH_lA3M22POUAym_Ct23kzhO9SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/TsdPJx7OiywMM122PIYNYWmJFCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/IH_lA3M22POUAym_Ct23kzhO9SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.73.144.0/22
Signature Algorithm: sha256WithRSAEncryption
65:77:96:47:27:50:c1:93:5c:f5:83:b1:cc:d2:4c:b0:fc:5f:
a3:39:e4:db:dd:e6:88:ab:c0:61:79:81:65:3d:e0:f0:cf:5e:
5c:92:ce:ac:92:93:45:1c:0c:41:03:84:42:ea:4b:b8:cf:a6:
e3:67:20:b1:29:76:4e:c7:0e:96:1b:6c:94:67:8e:a7:dc:52:
0f:46:8c:d2:12:66:ee:31:5a:de:99:cf:19:36:f7:2e:f6:2d:
10:dd:ce:e4:bb:a0:e5:b3:de:d8:b8:46:d1:0e:24:5d:80:39:
7c:11:3e:0a:65:41:4c:29:8e:c2:bd:4f:85:3a:90:52:8c:56:
94:80:07:ae:b5:f2:b5:db:96:5c:30:9a:73:8a:f1:c8:5b:1f:
3f:72:ab:94:d4:93:38:dc:72:53:62:0a:88:6d:55:85:53:c8:
1d:64:e3:b8:d2:9e:2d:d7:19:b2:ed:6d:10:04:39:e7:e1:e1:
75:75:63:14:85:77:a2:e2:cf:83:a2:4d:ac:b4:d3:11:de:8f:
ee:47:0b:26:4b:8e:4b:43:9a:7e:ba:09:1b:e3:3c:77:3f:e1:
a6:06:1b:e3:55:a2:fa:a6:c3:51:ea:be:81:53:1e:e0:e5:f9:
8b:0e:91:bb:77:96:08:ea:fb:fa:69:05:54:f5:11:92:d7:02:
af:87:6c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:08:57 2026 by rpki-client