Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/TC1WJhIqS5YyYCF7c6UbQzyCxIA.roa
File: TC1WJhIqS5YyYCF7c6UbQzyCxIA.roa (raw, json)
Hash identifier: IBegOftzNU2I7gMVa4Vw1YN978e8IznFPxboB3IfNzQ=
Subject key identifier: 4C:2D:56:26:12:2A:4B:96:32:60:21:7B:73:A5:1B:43:3C:82:C4:80
Certificate issuer: /CN=1af1b50c254bd3247e8b295d585e62066e6bb5d4
Certificate serial: 019F2368999B71B8C8E30122F857D9C8F881
Authority key identifier: 1A:F1:B5:0C:25:4B:D3:24:7E:8B:29:5D:58:5E:62:06:6E:6B:B5:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvG1DCVL0yR-iyldWF5iBm5rtdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/TC1WJhIqS5YyYCF7c6UbQzyCxIA.roa
Signing time: Thu 02 Jul 2026 15:18:05 +0000
ROA not before: Thu 02 Jul 2026 15:18:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47675
IP address blocks: 185.122.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/GvG1DCVL0yR-iyldWF5iBm5rtdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/GvG1DCVL0yR-iyldWF5iBm5rtdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GvG1DCVL0yR-iyldWF5iBm5rtdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:99:9b:71:b8:c8:e3:01:22:f8:57:d9:c8:f8:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1af1b50c254bd3247e8b295d585e62066e6bb5d4
Validity
Not Before: Jul 2 15:18:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c2d5626122a4b963260217b73a51b433c82c480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d1:6a:55:f1:0a:ce:d0:b5:94:2b:1d:d6:1a:
5c:dd:0e:a3:51:e7:5f:d9:c8:12:4c:53:24:a3:87:
7d:e9:f1:ef:6e:08:b2:0e:f5:1a:92:cd:73:57:c2:
b8:d0:eb:51:ff:0b:c6:9d:d8:f8:11:cf:d6:e1:05:
79:1a:c7:6a:66:9e:f3:67:c0:6f:7a:1d:10:c2:60:
b2:cc:50:e3:56:d4:06:23:a2:b7:c2:5a:b2:7e:88:
06:8f:4c:61:c8:a1:3a:d8:3e:66:2c:00:cc:30:67:
d6:68:3b:03:af:83:00:65:fc:e6:70:90:68:3c:36:
86:3b:72:70:2a:88:09:40:74:1e:02:17:9c:63:3a:
b1:17:86:df:9b:84:7c:9b:f2:2a:75:10:af:23:b0:
ce:43:8d:13:cc:a7:c3:24:27:4a:bd:72:af:d5:25:
c2:d6:33:45:bc:1f:62:2b:57:24:d2:aa:b9:de:b5:
b6:6e:39:aa:7e:08:97:ab:c6:9b:77:1b:59:2c:53:
02:11:f7:00:a5:06:9e:80:51:2e:68:73:df:ac:29:
9a:82:cd:88:0b:12:7a:19:27:f0:cf:be:d3:37:18:
66:a9:5a:46:6e:e2:70:1a:1d:13:7f:96:ac:72:81:
3e:dd:de:cb:26:8c:2b:8e:46:df:85:59:36:44:33:
63:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:2D:56:26:12:2A:4B:96:32:60:21:7B:73:A5:1B:43:3C:82:C4:80
X509v3 Authority Key Identifier:
keyid:1A:F1:B5:0C:25:4B:D3:24:7E:8B:29:5D:58:5E:62:06:6E:6B:B5:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvG1DCVL0yR-iyldWF5iBm5rtdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/TC1WJhIqS5YyYCF7c6UbQzyCxIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/GvG1DCVL0yR-iyldWF5iBm5rtdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.244.0/22
Signature Algorithm: sha256WithRSAEncryption
20:00:8e:5b:b6:0c:44:a1:93:34:ff:e0:5b:0b:ba:3f:2b:ea:
78:f0:d9:17:f7:54:0b:ac:aa:24:06:56:40:70:f1:f3:1c:a7:
fe:19:bd:76:e9:09:2b:72:0b:70:a2:97:8d:7c:1c:f6:e4:ea:
98:5e:60:d8:9e:ff:8f:2e:d4:cf:f6:7c:ca:a5:58:ac:7e:3c:
b6:ea:54:19:62:ad:dd:d7:e9:ca:9f:73:7f:d6:b2:31:51:4d:
73:9b:26:d4:2c:c6:90:c3:00:ee:b1:ae:9d:94:d2:89:8f:90:
63:4a:52:80:5f:4a:e2:8c:02:df:b3:ee:d4:cc:f3:18:35:18:
31:b8:54:49:ef:62:c5:1c:52:ac:52:e7:71:0d:39:2b:c1:b0:
b1:71:f8:3c:d7:f2:7a:60:f6:fd:fb:eb:88:e2:9f:58:a9:d5:
00:e0:cf:d9:8c:5d:98:f1:ec:0a:53:2c:c0:12:84:c4:93:45:
82:ae:cd:12:35:35:22:42:b1:5b:6c:40:da:c0:9a:e1:d2:21:
e0:ab:5a:23:84:49:4e:ee:d7:ad:a5:c3:cf:7c:e0:79:f0:b5:
01:ba:2a:38:e6:e7:9e:a6:2e:6b:e0:b7:10:cc:8a:50:46:c5:
82:fd:d3:a5:f5:54:1e:de:90:74:dc:f7:8a:9c:34:38:90:3c:
f9:8c:25:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:15:04 2026 by rpki-client