Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/Tvp9UTzcuphuhBetxzC7xnAANpk.roa
File: Tvp9UTzcuphuhBetxzC7xnAANpk.roa (raw, json)
Hash identifier: XsVJrEsr9FE3t/s8zv/e1FiT9DrBI71L2xkk3P4iSPo=
Subject key identifier: 4E:FA:7D:51:3C:DC:BA:98:6E:84:17:AD:C7:30:BB:C6:70:00:36:99
Certificate issuer: /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Certificate serial: 019E072DB7312BE0644057F232E2871BF4DE
Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/Tvp9UTzcuphuhBetxzC7xnAANpk.roa
Signing time: Fri 08 May 2026 10:41:36 +0000
ROA not before: Fri 08 May 2026 10:41:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 91.212.125.0/24 maxlen: 24
2a12:6900:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:07:2d:b7:31:2b:e0:64:40:57:f2:32:e2:87:1b:f4:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Validity
Not Before: May 8 10:41:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4efa7d513cdcba986e8417adc730bbc670003699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:66:7c:9b:66:27:af:82:d4:f5:20:6e:cb:14:
19:c9:9e:e3:b5:5e:cd:e0:2d:ff:82:1b:43:82:79:
65:04:ba:61:ca:32:74:f9:d8:90:35:9a:0a:84:44:
d7:50:f3:96:9d:35:55:88:5c:3e:25:59:56:fb:c7:
e3:10:8a:81:29:21:7f:5a:cb:34:20:85:a6:a2:7d:
57:ea:34:eb:47:16:68:24:02:15:68:28:26:e9:76:
be:d6:44:2a:af:4d:be:6b:d5:2b:5f:bb:b7:3f:cd:
04:c5:66:ad:4a:d6:dd:cc:e9:98:4c:bb:34:53:7d:
01:07:7b:04:1a:c9:3e:dc:5a:9b:48:c9:af:82:bf:
f0:19:b7:3e:ae:e9:bd:5a:8a:2f:45:5f:6e:ee:87:
5e:8e:69:bc:b1:68:f5:44:35:ef:f0:94:3b:8a:be:
06:1d:fb:6c:63:f6:1c:f9:e9:ae:3f:26:56:48:32:
02:38:ad:a1:d5:fd:ad:e0:c2:5c:aa:74:75:d3:0a:
1a:e6:87:34:28:fd:d3:c0:5c:cb:73:c0:24:44:72:
64:ec:c5:15:34:42:12:2f:e5:6a:da:5a:b7:7b:c0:
03:90:08:e4:8b:7e:60:4c:7e:80:0d:68:8a:f9:d6:
55:18:0c:4f:18:57:1b:a4:ce:63:c8:a8:55:43:40:
ba:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FA:7D:51:3C:DC:BA:98:6E:84:17:AD:C7:30:BB:C6:70:00:36:99
X509v3 Authority Key Identifier:
keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/Tvp9UTzcuphuhBetxzC7xnAANpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.125.0/24
IPv6:
2a12:6900:100::/48
Signature Algorithm: sha256WithRSAEncryption
00:96:a1:dc:83:c6:95:ff:c2:ce:97:5a:b5:b9:01:29:f4:57:
bb:25:ec:6c:f2:f8:ea:07:6b:8a:71:ef:03:90:93:20:2c:92:
e9:eb:10:8c:16:b9:5c:2c:4d:11:2a:5a:f4:48:e8:88:61:cd:
da:bd:c6:2e:90:cf:88:58:d4:59:d1:f0:ea:de:28:40:90:3c:
5b:8e:68:e1:03:e1:05:cd:4c:94:ee:a2:5d:bf:cb:6e:e7:0f:
0b:e4:9f:d0:35:dd:4b:76:bf:aa:c0:72:e7:72:2b:28:5d:1b:
a1:b6:d8:00:ce:9c:69:eb:1d:23:ca:2d:89:8f:e7:e2:2e:a0:
ae:54:3f:b9:f5:fc:d3:db:d2:51:af:a7:75:c1:90:41:9a:5e:
0d:e3:c9:44:2a:71:60:b8:77:c3:66:fe:10:d0:de:70:72:44:
82:3d:6b:f4:f9:7b:5e:05:21:93:a3:45:47:2e:9f:3b:92:24:
f3:e9:4b:6b:4f:21:0c:c0:83:c5:6e:ab:d9:64:17:d0:3b:16:
8d:9a:d1:eb:d2:40:ca:fd:cf:df:1f:de:3b:0b:75:01:76:fc:
18:71:03:6f:da:53:a6:e5:71:6e:cd:7f:ad:9e:e7:b2:ae:e9:
15:2f:ad:47:2a:2c:23:29:a3:3d:6d:40:f2:c0:a3:c6:15:83:
d5:30:f8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:50:03 2026 by rpki-client