Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/TAhJXyuaU-go54rMGjVHPRVQsF8.roa
File: TAhJXyuaU-go54rMGjVHPRVQsF8.roa (raw, json)
Hash identifier: T2ctTiMfso19o9sCdUv1gT123PCz7JSAkNRApoDkkn8=
Subject key identifier: 4C:08:49:5F:2B:9A:53:E8:28:E7:8A:CC:1A:35:47:3D:15:50:B0:5F
Certificate issuer: /CN=67cfad7c24e5c6b4af581c3dec0b9e2fb0c131c4
Certificate serial: 019F23683681E2AA2DB611A260BB54D088ED
Authority key identifier: 67:CF:AD:7C:24:E5:C6:B4:AF:58:1C:3D:EC:0B:9E:2F:B0:C1:31:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8-tfCTlxrSvWBw97AueL7DBMcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/TAhJXyuaU-go54rMGjVHPRVQsF8.roa
Signing time: Thu 02 Jul 2026 15:17:40 +0000
ROA not before: Thu 02 Jul 2026 15:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8970
IP address blocks: 156.17.0.0/16 maxlen: 16
2001:a48::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8-tfCTlxrSvWBw97AueL7DBMcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:36:81:e2:aa:2d:b6:11:a2:60:bb:54:d0:88:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cfad7c24e5c6b4af581c3dec0b9e2fb0c131c4
Validity
Not Before: Jul 2 15:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c08495f2b9a53e828e78acc1a35473d1550b05f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fd:18:da:2b:e2:b4:7c:37:a2:52:e4:b4:74:
6c:a8:f5:8c:9b:5c:cd:3e:ef:5b:c7:7e:86:95:43:
68:69:77:61:9d:8f:ab:cd:9b:07:fe:bf:3e:cc:cf:
c6:cf:7c:62:db:d2:58:27:ce:78:8b:1b:3f:e3:29:
fd:22:ab:7d:46:da:28:22:d6:cd:1e:13:64:b7:b7:
09:e9:82:c7:8c:1f:6e:a5:ac:68:e0:79:bd:09:8d:
26:a6:83:07:1e:d2:32:02:50:70:e3:6d:6e:1a:05:
c4:39:bf:9d:c1:e5:85:d7:a9:21:26:b6:f3:65:07:
e5:42:1d:1b:e0:95:eb:3d:88:da:d0:cc:74:a0:ec:
87:89:6a:00:90:bc:a8:16:8c:6f:3e:63:39:51:40:
0b:27:f9:7d:45:fb:19:21:ba:ec:aa:3f:fc:fe:f9:
ac:d5:77:23:51:01:06:1f:26:b7:49:63:2f:af:0b:
e4:da:4f:f8:fd:61:12:24:14:3b:49:04:66:60:84:
75:b7:6f:63:b0:2f:93:2e:09:e9:a7:4e:ae:de:4c:
90:23:c2:66:a1:8a:58:b3:44:92:d4:29:fb:99:ff:
54:f3:31:6e:e2:7b:6b:6b:4d:6b:f6:9e:7d:ce:1e:
15:6d:d6:8d:07:0b:18:54:c0:8a:66:fd:4b:5d:03:
54:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:08:49:5F:2B:9A:53:E8:28:E7:8A:CC:1A:35:47:3D:15:50:B0:5F
X509v3 Authority Key Identifier:
keyid:67:CF:AD:7C:24:E5:C6:B4:AF:58:1C:3D:EC:0B:9E:2F:B0:C1:31:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8-tfCTlxrSvWBw97AueL7DBMcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/TAhJXyuaU-go54rMGjVHPRVQsF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.17.0.0/16
IPv6:
2001:a48::/32
Signature Algorithm: sha256WithRSAEncryption
2d:47:cf:a8:8a:43:4e:02:eb:a6:8a:b3:5c:55:f6:b9:89:9a:
f8:df:07:b5:7e:4c:07:5e:ff:82:b7:f4:e0:90:e3:81:ab:7c:
f0:22:11:9d:b7:02:9c:fb:a0:3d:31:44:71:07:04:b8:b6:87:
30:87:7a:e5:3e:d0:e0:f5:6e:cf:50:a8:33:40:b8:8c:4d:ee:
74:c0:8f:9b:f3:74:f8:d8:fb:c0:0f:07:06:04:5b:46:4a:14:
c2:fc:72:2f:00:04:7c:dc:d8:50:36:7c:4e:45:38:7c:9e:c1:
c8:52:96:36:77:d9:4a:f0:cd:a0:07:93:33:aa:7b:8a:e7:f7:
d7:95:83:89:5f:b3:73:ae:ab:cd:f4:cd:b0:36:9f:40:a1:93:
4b:a1:d5:41:5f:6c:71:ad:00:1c:59:fa:75:0f:f8:43:9a:c7:
22:7c:7f:10:a7:c8:d6:e8:d0:81:b6:cf:fa:05:91:06:40:55:
c7:c8:58:f8:68:16:2f:b2:03:b7:59:18:27:81:08:5b:88:d6:
e3:f3:93:44:03:c3:b8:e2:f0:af:15:d7:ba:d7:bb:27:54:75:
a2:f4:56:76:fc:22:c5:83:88:7f:fa:9f:4e:15:2d:e6:4a:25:
b4:a8:e8:43:e7:c7:bb:f8:17:dd:b6:37:bd:0d:41:ec:82:b4:
a3:2f:47:d8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:20:44 2026 by rpki-client