Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/TFOPzdAqwLwk6cIT4rQzCOiRQIg.roa
File: TFOPzdAqwLwk6cIT4rQzCOiRQIg.roa (raw, json)
Hash identifier: BPUqtwOJ6bxFu0cEApZ7s0uoeoAt+pkqTp//TfKD8Uk=
Subject key identifier: 4C:53:8F:CD:D0:2A:C0:BC:24:E9:C2:13:E2:B4:33:08:E8:91:40:88
Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial: 01A0F6554949655F5772DEFE3165F5DEBFFC
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/TFOPzdAqwLwk6cIT4rQzCOiRQIg.roa
Signing time: Thu 01 Oct 2026 07:19:39 +0000
ROA not before: Thu 01 Oct 2026 07:19:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219329
IP address blocks: 2a0b:ae40:662::/48 maxlen: 48
2a0e:c80:319::/48 maxlen: 48
2a0e:3840:291::/48 maxlen: 48
2a0f:9980:184::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:55:49:49:65:5f:57:72:de:fe:31:65:f5:de:bf:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Validity
Not Before: Oct 1 07:19:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c538fcdd02ac0bc24e9c213e2b43308e8914088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:21:7d:59:72:27:1e:b7:c8:62:fc:fd:8c:59:
63:a9:02:99:40:8f:31:bd:3c:ec:a9:7f:74:40:c1:
b1:1a:2d:3b:96:7f:99:9d:99:62:51:af:f5:e1:31:
87:05:6f:f7:fa:31:eb:6a:a0:72:54:c5:28:6d:50:
62:bd:bc:fe:28:e4:d8:04:b9:4b:60:23:46:b9:e8:
36:75:7c:39:d8:41:c8:c2:50:51:a2:5f:f0:61:b2:
52:ae:70:d1:b5:27:78:21:d6:d3:4a:6c:a2:1d:4f:
41:0d:88:b1:65:f2:16:6c:0e:09:7e:49:36:b8:cb:
a2:02:7f:c1:1d:60:f1:7e:f2:69:7b:cc:2d:fb:41:
bb:f0:0d:aa:be:70:cd:50:80:72:fd:b6:7f:3a:30:
67:4c:88:83:51:13:39:ba:7d:ed:75:3b:a0:21:13:
5d:c2:21:65:69:98:b5:91:4f:39:37:1f:8c:79:bd:
be:5a:d4:56:0c:c8:f1:71:6e:1a:7c:c8:b5:68:d1:
60:01:97:1d:9e:d9:6b:e9:3f:93:03:22:b0:9e:59:
32:f9:3a:1d:0a:d6:cd:75:1c:f9:55:96:64:40:f0:
97:be:2c:7a:27:f8:75:33:67:fa:06:07:a8:0d:5f:
fc:f5:5f:ad:73:d7:81:85:5e:f5:74:88:6c:35:e1:
f7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:53:8F:CD:D0:2A:C0:BC:24:E9:C2:13:E2:B4:33:08:E8:91:40:88
X509v3 Authority Key Identifier:
keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/TFOPzdAqwLwk6cIT4rQzCOiRQIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:ae40:662::/48
2a0e:c80:319::/48
2a0e:3840:291::/48
2a0f:9980:184::/48
Signature Algorithm: sha256WithRSAEncryption
06:99:2b:8d:ad:39:59:70:00:a1:83:77:17:3b:78:1d:c3:b6:
b1:74:ad:e9:c5:15:63:6b:5b:c3:4e:1b:fc:5f:a4:58:51:98:
65:c6:cf:4e:ac:b6:dd:e1:f8:9a:eb:63:64:ab:6a:db:af:24:
f0:66:f5:29:49:9b:8d:b1:73:d7:c6:24:73:cb:52:a8:17:bb:
80:b8:81:3c:b3:c9:7c:06:fa:aa:b9:a4:05:3f:d9:72:bb:fc:
10:c3:df:d8:1e:a6:b7:48:ed:22:21:df:8f:9e:8d:6c:6d:72:
14:83:4b:ec:3c:e0:0d:5c:ee:41:66:64:dd:65:38:10:0d:37:
69:db:af:67:e9:0a:ab:a3:4c:1f:64:4e:57:a0:60:d1:a1:ea:
9d:87:98:ef:c7:dd:09:dd:de:6c:20:a0:71:9d:64:a5:1d:19:
bc:26:09:b9:6f:34:94:2a:fd:e0:4b:6d:d0:c6:8d:9d:e0:b6:
b0:00:20:bd:37:f3:96:2b:83:8c:b6:10:43:22:5d:7a:a8:19:
34:a9:03:8c:dd:9c:b6:26:8f:2d:54:aa:ee:fd:9d:5d:65:de:
86:f0:8f:e1:78:23:9f:f9:91:c9:28:74:51:a7:6a:22:ea:52:
3c:7e:4d:b9:3f:c2:db:3b:e1:a7:57:04:09:33:e2:bc:4e:3e:
b3:b5:d0:e0
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAaD2VUlJZV9Xct7+MWX13r/8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5M2FjNmNkMjI0MDI0OWJiYTYwMTcxZjA4NmU5MTAxY2M4
N2NhMjQwHhcNMjYxMDAxMDcxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzUzOGZjZGQwMmFjMGJjMjRlOWMyMTNlMmI0MzMwOGU4OTE0MDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyF9WXInHrfIYvz9jFljqQKZQI8x
vTzsqX90QMGxGi07ln+ZnZliUa/14TGHBW/3+jHraqByVMUobVBivbz+KOTYBLlL
YCNGueg2dXw52EHIwlBRol/wYbJSrnDRtSd4IdbTSmyiHU9BDYixZfIWbA4Jfkk2
uMuiAn/BHWDxfvJpe8wt+0G78A2qvnDNUIBy/bZ/OjBnTIiDURM5un3tdTugIRNd
wiFlaZi1kU85Nx+Meb2+WtRWDMjxcW4afMi1aNFgAZcdntlr6T+TAyKwnlky+Tod
CtbNdRz5VZZkQPCXvix6J/h1M2f6BgeoDV/89V+tc9eBhV71dIhsNeH3XwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFExTj83QKsC8JOnCE+K0MwjokUCIMB8GA1UdIwQY
MBaAFPk6xs0iQCSbumAXHwhukQHMh8okMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1Uckd6U0pBSkp1NllCY2ZDRzZSQWN5SHlpUS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvYjAzMjEzLTVlODAtNDkzMS04MWNl
LWY3NTJkODE2MDVmYi8xL1RGT1B6ZEFxd0x3azZjSVQ0clF6Q09pUlFJZy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOTgvYjAzMjEzLTVlODAtNDkzMS04MWNlLWY3NTJkODE2MDVm
Yi8xLzEtVHJHelNKQUpKdTZZQmNmQ0c2UkFjeUh5aVEuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwPQYIKwYBBQUHAQcBAf8ELjAsMCoEAgACMCQDBwAqC65A
BmIDBwAqDgyAAxkDBwAqDjhAApEDBwAqD5mAAYQwDQYJKoZIhvcNAQELBQADggEB
AAaZK42tOVlwAKGDdxc7eB3DtrF0renFFWNrW8NOG/xfpFhRmGXGz06stt3h+Jrr
Y2SratuvJPBm9SlJm42xc9fGJHPLUqgXu4C4gTyzyXwG+qq5pAU/2XK7/BDD39ge
prdI7SIh34+ejWxtchSDS+w84A1c7kFmZN1lOBANN2nbr2fpCqujTB9kTlegYNGh
6p2HmO/H3Qnd3mwgoHGdZKUdGbwmCblvNJQq/eBLbdDGjZ3gtrAAIL0385Yrg4y2
EEMiXXqoGTSpA4zdnLYmjy1Uqu79nV1l3obwj+F4I5/5kckodFGnaiLqUjx+Tbk/
wts74adXBAkz4rxOPrO10OA=
-----END CERTIFICATE-----
Generated at Sun Oct 11 10:35:58 2026 by rpki-client