Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/4-tdlG2H4yBGqlSyw9Pu1K8cSFM.roa
File: 4-tdlG2H4yBGqlSyw9Pu1K8cSFM.roa (raw, json)
Hash identifier: aYm6mACp3V5w1VX6NUY2tfvQ4noQ/SNCf/QrDURJoS4=
Subject key identifier: E3:EB:5D:94:6D:87:E3:20:46:AA:54:B2:C3:D3:EE:D4:AF:1C:48:53
Certificate issuer: /CN=8bdac18a7ad501ba7ea13567909f17e4f7327413
Certificate serial: 019EFE96C6CA28011C9CD9A985067D361399
Authority key identifier: 8B:DA:C1:8A:7A:D5:01:BA:7E:A1:35:67:90:9F:17:E4:F7:32:74:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/4-tdlG2H4yBGqlSyw9Pu1K8cSFM.roa
Signing time: Thu 25 Jun 2026 11:42:34 +0000
ROA not before: Thu 25 Jun 2026 11:42:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28859
IP address blocks: 212.94.32.0/19 maxlen: 19
212.94.32.0/20 maxlen: 20
212.94.56.0/21 maxlen: 21
2a02:368::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fe:96:c6:ca:28:01:1c:9c:d9:a9:85:06:7d:36:13:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdac18a7ad501ba7ea13567909f17e4f7327413
Validity
Not Before: Jun 25 11:42:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3eb5d946d87e32046aa54b2c3d3eed4af1c4853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c2:a6:0c:f4:18:24:8a:fb:c5:a7:9c:99:10:
03:b3:4d:23:96:75:1d:ae:f9:f4:7a:31:82:69:ca:
ab:fa:f5:c4:50:75:4c:ce:2f:aa:b6:b6:6f:bb:18:
10:f5:5c:69:23:06:da:41:06:b0:78:ef:de:49:36:
46:06:12:f5:46:2b:22:49:a3:78:6a:ed:4e:72:ea:
99:ab:38:8b:56:12:e2:bd:ed:8b:2d:ba:26:36:ea:
f1:f8:1e:a2:b6:95:28:6a:0a:52:31:a9:5a:96:00:
bf:aa:c8:13:82:46:89:e7:a3:4b:bc:b4:06:ee:73:
66:45:f1:4d:7c:74:38:9a:10:f9:b8:99:58:a4:3b:
04:64:04:8d:ea:65:05:47:4a:ac:09:a5:14:b2:bf:
78:84:a6:79:af:c3:93:77:ea:56:1a:49:2a:a6:bb:
e2:41:a7:f7:c2:f8:e1:22:2a:2f:4a:86:a9:f8:05:
82:66:5c:73:ea:f4:93:f4:b1:75:83:e3:cd:34:d9:
eb:3d:3a:2e:22:86:37:6b:17:cc:45:05:9c:6d:1c:
14:8b:c2:ff:15:e3:2a:4f:d7:44:b8:d1:1f:2e:47:
b9:02:f8:74:a9:29:6d:84:eb:f0:c1:1f:cb:2c:ea:
0e:25:9f:3b:24:4f:dd:c1:48:43:86:a5:86:1f:dd:
b8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:EB:5D:94:6D:87:E3:20:46:AA:54:B2:C3:D3:EE:D4:AF:1C:48:53
X509v3 Authority Key Identifier:
keyid:8B:DA:C1:8A:7A:D5:01:BA:7E:A1:35:67:90:9F:17:E4:F7:32:74:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/4-tdlG2H4yBGqlSyw9Pu1K8cSFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.94.32.0/19
IPv6:
2a02:368::/32
Signature Algorithm: sha256WithRSAEncryption
7a:36:46:1e:c8:f7:4f:12:ed:1e:dd:67:03:24:29:ee:21:fb:
4b:a5:5b:48:ac:c8:72:02:e3:ee:61:46:c3:3a:df:05:39:e5:
d1:6a:72:a7:db:3a:37:13:ad:d3:36:70:7d:af:bd:61:ad:96:
ee:54:2d:28:34:11:54:e6:d1:50:a3:ba:2e:dc:df:3c:22:8d:
9e:a7:a2:ef:79:d8:60:f8:70:a8:a2:bf:8c:52:4d:42:b7:b6:
0b:5f:34:a9:ad:38:d9:94:a2:c9:a2:02:6d:28:dd:49:f1:73:
66:6c:d2:c8:d2:ed:64:69:b8:13:ab:c4:25:f8:72:8f:c7:56:
f2:59:e9:07:2f:3c:8b:a2:8b:5a:14:13:30:0a:d5:65:a5:91:
a0:cb:27:a2:7b:90:ea:76:7d:6a:27:68:fb:3e:33:56:60:dd:
a7:5b:eb:35:e2:1d:38:75:47:d7:0c:1b:5e:a8:e6:7b:72:8b:
1e:0f:77:f6:b6:ff:18:6a:62:07:2f:92:6b:db:fe:75:89:58:
d0:41:ad:32:84:78:b2:67:36:ac:84:85:ff:82:fc:f3:98:97:
e3:ab:08:0a:d5:f0:8d:15:0f:3d:b2:31:5e:3c:e0:b8:7c:be:
d5:8b:76:9c:de:77:8d:e1:0b:2f:4d:29:14:8a:dd:22:64:aa:
93:01:a7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:02 2026 by rpki-client