Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/5e0875-7a75-4830-a42b-cfde434baea7/1/TJ6EwuPrr5uIHsY5npEQCjBNFcA.roa
File: TJ6EwuPrr5uIHsY5npEQCjBNFcA.roa (raw, json)
Hash identifier: D3hZNlRBwUcocdYaP+buhwXKanIL4lhbGESYtXOauJE=
Subject key identifier: 4C:9E:84:C2:E3:EB:AF:9B:88:1E:C6:39:9E:91:10:0A:30:4D:15:C0
Certificate issuer: /CN=fe44d412c95da1d929431afc692b949e59d97057
Certificate serial: 019ECA5ECF3B4B238F2193654491C4689D3C
Authority key identifier: FE:44:D4:12:C9:5D:A1:D9:29:43:1A:FC:69:2B:94:9E:59:D9:70:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_kTUEsldodkpQxr8aSuUnlnZcFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/5e0875-7a75-4830-a42b-cfde434baea7/1/TJ6EwuPrr5uIHsY5npEQCjBNFcA.roa
Signing time: Mon 15 Jun 2026 08:21:11 +0000
ROA not before: Mon 15 Jun 2026 08:21:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215736
IP address blocks: 84.38.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/5e0875-7a75-4830-a42b-cfde434baea7/1/_kTUEsldodkpQxr8aSuUnlnZcFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/5e0875-7a75-4830-a42b-cfde434baea7/1/_kTUEsldodkpQxr8aSuUnlnZcFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_kTUEsldodkpQxr8aSuUnlnZcFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ca:5e:cf:3b:4b:23:8f:21:93:65:44:91:c4:68:9d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe44d412c95da1d929431afc692b949e59d97057
Validity
Not Before: Jun 15 08:21:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c9e84c2e3ebaf9b881ec6399e91100a304d15c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e5:41:15:9e:7c:05:de:b5:17:f8:8d:d4:77:
95:fb:55:11:0c:98:cb:e3:ec:6f:a8:6c:cb:d1:d5:
8b:8a:9e:0c:8d:d3:28:a9:e1:6c:a7:bf:5b:44:74:
64:78:06:09:5d:85:1a:b3:30:10:45:cf:62:74:f7:
a9:3b:78:64:9d:69:2f:f8:5f:b1:9d:c1:08:b7:9a:
c6:7b:52:59:2f:e0:5c:4a:d1:24:f3:50:ef:7e:71:
10:db:91:7a:23:33:ce:34:23:76:34:2e:1a:1a:ba:
bf:10:1e:37:a5:8c:78:82:41:3a:b0:e7:51:32:e5:
51:6e:d2:e2:a5:46:8c:e0:ba:8c:3c:bf:c5:e2:fb:
ac:37:32:c8:a7:b8:e7:d4:e4:0a:0e:5d:ab:99:1d:
a3:8a:b5:5a:96:20:5b:4c:b1:94:d8:77:d4:ab:6b:
c0:90:46:bb:ac:f2:30:49:03:49:38:28:d3:aa:80:
99:f2:b4:76:9e:df:03:8e:9d:a5:b4:40:a3:9f:94:
96:39:63:34:4e:43:67:b6:ac:9c:95:ae:a6:ba:fc:
8a:96:50:4c:cd:9a:41:55:3a:15:4a:91:58:5e:c6:
d6:4b:21:a0:b8:fd:b2:a1:ae:43:6e:6f:cb:1f:1f:
83:a8:7a:22:d0:42:d0:73:b3:93:47:68:d1:cc:d5:
7b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9E:84:C2:E3:EB:AF:9B:88:1E:C6:39:9E:91:10:0A:30:4D:15:C0
X509v3 Authority Key Identifier:
keyid:FE:44:D4:12:C9:5D:A1:D9:29:43:1A:FC:69:2B:94:9E:59:D9:70:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kTUEsldodkpQxr8aSuUnlnZcFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/5e0875-7a75-4830-a42b-cfde434baea7/1/TJ6EwuPrr5uIHsY5npEQCjBNFcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/5e0875-7a75-4830-a42b-cfde434baea7/1/_kTUEsldodkpQxr8aSuUnlnZcFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.38.252.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:fa:3d:58:32:c0:1c:5c:3a:89:91:2a:54:00:db:ee:36:a9:
7d:a6:15:f0:aa:94:ef:14:c5:5a:e8:ef:15:81:ca:e2:37:69:
0c:2f:56:fe:5a:b8:f3:77:4b:87:7b:3d:b7:d4:a4:3f:ee:39:
0f:9d:7a:d3:61:39:52:4d:32:d8:e1:02:09:4c:b4:22:d9:dd:
af:e5:f8:6a:29:b0:eb:b6:2e:55:0e:c4:bb:ca:0b:5b:bb:e2:
56:7d:b3:96:e2:f3:79:61:d3:81:2d:75:b2:d3:54:91:b1:e2:
f0:4c:99:b0:d0:a0:68:a1:d6:78:c7:cf:99:41:d0:04:72:86:
64:4f:d5:40:16:fa:41:cd:84:71:c0:3a:06:5e:ee:5c:fe:5d:
8b:89:32:e0:ba:35:10:4c:6b:fe:0d:41:34:d3:26:c5:03:5e:
e7:c6:43:80:f7:bf:92:7d:98:28:bf:a4:54:a1:d8:ea:a1:c3:
58:ec:1e:61:71:b4:d9:82:47:50:c2:b5:71:80:72:f6:ed:0c:
94:81:31:1a:34:10:36:9d:37:82:e2:bf:ad:1d:ce:11:9c:33:
2a:6a:08:76:7e:4c:d2:fb:08:24:69:84:1a:00:07:77:01:bb:
5f:96:11:5d:0f:b6:c8:e3:b6:04:d9:51:97:52:d4:1e:9e:27:
f2:eb:0d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:50:27 2026 by rpki-client