Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/TU7bn-4WvpGzM5DZRCSE5GnOk_s.roa
File: TU7bn-4WvpGzM5DZRCSE5GnOk_s.roa (raw, json)
Hash identifier: jqktT6B1SMH3/Qf7XOu//vVdhdh6w7AAhTBdW+2oehU=
Subject key identifier: 4D:4E:DB:9F:EE:16:BE:91:B3:33:90:D9:44:24:84:E4:69:CE:93:FB
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 01A1AFF3C4D5BFCA4A183940C7598D0E9E00
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/TU7bn-4WvpGzM5DZRCSE5GnOk_s.roa
Signing time: Fri 06 Nov 2026 08:22:30 +0000
ROA not before: Fri 06 Nov 2026 08:22:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218897
IP address blocks: 213.182.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:af:f3:c4:d5:bf:ca:4a:18:39:40:c7:59:8d:0e:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Nov 6 08:22:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d4edb9fee16be91b33390d9442484e469ce93fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:36:09:4c:fe:d6:06:ca:f9:0b:d5:b1:f6:8f:
ef:35:2e:14:57:31:ca:3f:3e:6d:a0:70:c9:de:77:
0a:ba:c4:3a:40:3f:57:22:98:74:f6:ba:d2:16:fb:
cb:51:4b:bc:17:db:b2:14:0c:df:a2:08:8b:bd:60:
1e:6e:ac:5b:a1:24:34:10:49:72:14:e2:30:46:6d:
77:e8:7c:b6:00:57:cc:09:a6:bb:51:52:b9:89:4b:
1f:cc:6d:13:e2:19:34:d2:09:11:ab:55:62:ec:c8:
66:1d:7c:ec:fe:03:c9:fd:fa:54:f4:60:86:ba:5e:
2c:10:5b:b9:f8:4c:79:6a:ed:41:76:13:50:c6:32:
35:e7:32:0a:09:51:2c:43:91:76:7f:8d:0b:b5:b8:
ac:21:bf:b5:e4:f0:09:8e:85:97:08:20:be:49:14:
12:6f:fc:6d:7d:f9:17:67:41:c8:6f:90:b8:de:1b:
94:32:9e:81:52:ce:48:ed:3c:c3:bd:24:e3:db:10:
b5:12:a5:ef:0e:dd:d0:d7:1f:ca:d0:de:3c:d6:f2:
5e:f8:68:75:70:c0:60:dd:ef:84:d3:c0:53:88:08:
98:78:b3:22:51:9a:b2:b3:3b:ca:44:8d:96:b1:90:
56:da:90:13:5f:b2:42:bb:5b:b9:fe:ae:95:86:e7:
1e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4E:DB:9F:EE:16:BE:91:B3:33:90:D9:44:24:84:E4:69:CE:93:FB
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/TU7bn-4WvpGzM5DZRCSE5GnOk_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.182.209.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:2f:5a:ea:25:d6:81:af:13:9e:b8:6d:a6:d2:be:16:86:89:
ce:17:7c:a8:30:f3:15:b7:29:a9:be:12:d9:13:cc:20:01:37:
07:a4:15:8b:14:d5:5d:75:7a:f6:01:e6:ef:9f:96:d1:c1:c0:
40:0d:7f:6e:11:06:49:aa:7e:de:ad:a9:66:5d:d3:45:ba:74:
8f:8c:79:4d:8a:ca:81:5d:ac:ca:09:b9:79:e7:62:c4:db:37:
5b:56:47:c5:b8:1d:bd:37:3f:fa:13:0e:0c:b0:36:7d:82:53:
dc:f1:64:bf:fc:32:46:66:2c:4d:89:7c:5b:e4:3b:40:df:38:
0f:3c:0b:42:50:26:8f:e5:01:e8:17:85:79:ab:bb:67:a4:d6:
b4:28:00:30:4b:7c:a2:b2:09:99:a5:52:bf:f9:62:0d:66:7a:
73:a8:cf:90:2d:fb:5c:b7:47:29:93:72:98:f7:f3:5e:1f:a2:
f1:8c:99:2e:07:c7:be:76:56:68:e9:c1:19:cc:38:15:e3:d9:
51:1d:78:62:46:10:d0:04:99:01:35:8b:ed:a4:70:24:26:70:
30:23:89:a4:3b:8f:64:6a:00:fc:f8:c1:98:76:ab:dd:c3:18:
1e:7e:13:5e:cd:27:01:13:bc:c4:35:91:70:ce:01:71:2b:49:
3b:98:46:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:14:20 2026 by rpki-client