Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tfZAUzSdgFZQJJ0CINZ5NCzx6A0.roa
File: tfZAUzSdgFZQJJ0CINZ5NCzx6A0.roa (raw, json)
Hash identifier: umbCbHPtY0b+Bx96L0wfJpLosdHwm8QUMGXKcqiEQj0=
Subject key identifier: B5:F6:40:53:34:9D:80:56:50:24:9D:02:20:D6:79:34:2C:F1:E8:0D
Certificate issuer: /CN=e7b34c7ce3bc51381e2f305db8f33069ad548fe6
Certificate serial: 019F2368A8CF0E6A0C51FC503511573A6CC7
Authority key identifier: E7:B3:4C:7C:E3:BC:51:38:1E:2F:30:5D:B8:F3:30:69:AD:54:8F:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/57NMfOO8UTgeLzBduPMwaa1Uj-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tfZAUzSdgFZQJJ0CINZ5NCzx6A0.roa
Signing time: Thu 02 Jul 2026 15:18:09 +0000
ROA not before: Thu 02 Jul 2026 15:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 553
IP address blocks: 141.47.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/57NMfOO8UTgeLzBduPMwaa1Uj-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/57NMfOO8UTgeLzBduPMwaa1Uj-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/57NMfOO8UTgeLzBduPMwaa1Uj-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a8:cf:0e:6a:0c:51:fc:50:35:11:57:3a:6c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b34c7ce3bc51381e2f305db8f33069ad548fe6
Validity
Not Before: Jul 2 15:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5f64053349d805650249d0220d679342cf1e80d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:81:79:a6:bb:d1:f5:c6:3e:9c:d1:6a:35:a8:
70:1b:25:19:a1:0c:d8:1b:66:97:a3:d8:4a:07:99:
f1:2d:98:43:9a:f5:43:16:c8:0b:af:6b:9c:bf:49:
78:9d:33:6d:13:b2:98:d9:c7:74:a6:32:c8:1a:90:
fa:ba:8c:7c:79:f4:45:39:80:0e:85:75:5d:cc:b2:
fb:df:a4:ad:3c:51:f7:b9:0b:fb:bb:d9:2d:29:45:
dc:70:43:c3:53:f0:84:93:2a:16:61:14:a9:25:02:
3e:26:ca:09:14:75:1d:74:85:d9:5b:5e:6e:97:97:
6e:ad:21:1d:77:cc:67:00:64:88:98:30:71:6c:01:
c3:f0:15:6c:79:db:cb:36:73:a2:d1:57:64:6b:9b:
23:39:85:79:52:38:ee:c9:e6:29:8d:97:3b:98:f6:
25:1d:61:a6:77:01:e6:01:22:ec:d1:44:0c:cd:79:
0c:16:91:47:f7:01:df:34:32:64:30:be:37:0a:4f:
47:56:7d:35:e6:35:04:4e:dc:a3:87:a7:7a:20:2a:
0e:f9:7a:6c:cd:64:5b:d8:02:a4:31:4d:df:d9:c6:
5b:d7:f6:22:a8:e9:38:0d:c8:d1:5b:a7:ae:e7:b5:
a3:42:39:a2:68:e7:d8:1b:40:ff:3a:89:f1:bc:96:
94:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F6:40:53:34:9D:80:56:50:24:9D:02:20:D6:79:34:2C:F1:E8:0D
X509v3 Authority Key Identifier:
keyid:E7:B3:4C:7C:E3:BC:51:38:1E:2F:30:5D:B8:F3:30:69:AD:54:8F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/57NMfOO8UTgeLzBduPMwaa1Uj-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tfZAUzSdgFZQJJ0CINZ5NCzx6A0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/57NMfOO8UTgeLzBduPMwaa1Uj-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.47.0.0/16
Signature Algorithm: sha256WithRSAEncryption
22:76:a2:e3:34:81:02:95:4c:c6:eb:62:b5:1e:b5:f0:08:aa:
da:56:ec:80:bc:23:5f:b3:36:b5:ea:23:af:fc:1f:a1:e7:0c:
4d:88:5c:20:b2:04:16:3e:98:7d:22:0b:59:24:82:c9:e6:99:
01:65:61:de:bb:89:c6:16:bd:29:f8:98:53:a2:07:fd:c3:2e:
ad:1b:bb:64:1e:64:0f:bf:58:54:8c:68:91:99:c6:68:79:74:
c6:20:1a:4f:68:33:68:5c:e1:c8:bc:41:78:0b:99:48:7d:8d:
82:64:c8:0c:57:3c:4c:5b:c1:73:03:4b:f9:db:9a:54:78:4d:
76:9e:2a:b3:fb:9b:47:52:94:61:99:68:d8:59:9b:34:e3:5a:
2d:ed:25:13:9d:11:30:65:9a:e4:37:c3:4a:85:4b:94:3a:1f:
f2:58:a1:d7:4e:da:c5:b8:d5:f3:06:b1:0b:28:2f:f5:7a:52:
ea:df:ad:29:39:b7:bf:68:99:84:fe:58:8f:f9:22:50:ff:29:
e9:c3:f6:fa:fd:f2:5e:85:36:33:ad:4d:12:f6:06:77:b2:88:
4f:1a:8c:fd:e3:5c:af:95:0e:c8:44:82:f4:5d:ee:d7:78:45:
11:d8:b3:74:29:38:91:1b:b3:37:05:f2:86:88:69:d6:ee:47:
d1:be:8c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:19:53 2026 by rpki-client