Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/TFZ1sEt0buQVZv0xw8uqfGHnQ6w.roa
File: TFZ1sEt0buQVZv0xw8uqfGHnQ6w.roa (raw, json)
Hash identifier: BOzZntSLvTeJh52IqUyyveCwSpOQsQebizbDk+vxg2E=
Subject key identifier: 4C:56:75:B0:4B:74:6E:E4:15:66:FD:31:C3:CB:AA:7C:61:E7:43:AC
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 019F1276651F334365421179AA533059BB8B
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/TFZ1sEt0buQVZv0xw8uqfGHnQ6w.roa
Signing time: Mon 29 Jun 2026 08:19:36 +0000
ROA not before: Mon 29 Jun 2026 08:19:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207350
IP address blocks: 87.107.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:76:65:1f:33:43:65:42:11:79:aa:53:30:59:bb:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jun 29 08:19:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c5675b04b746ee41566fd31c3cbaa7c61e743ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5b:29:df:6d:7b:16:fe:1f:75:10:b8:93:5a:
d8:55:7d:55:92:7c:44:5c:8d:83:4c:01:d1:c8:97:
a8:59:f4:3e:c5:ef:95:4a:44:55:7b:6a:05:bf:b4:
cb:0b:88:de:a6:4d:c5:ab:f2:4b:95:b4:b5:78:59:
85:db:3e:6c:76:cb:2a:59:b0:fb:64:0f:be:d8:89:
28:27:b7:5d:11:f3:4a:1b:cf:3a:14:75:93:b3:40:
f1:6a:8f:7e:91:38:84:c0:70:87:22:4c:3e:aa:64:
e8:3b:e9:fb:c0:55:d7:bb:41:64:fd:fb:c1:63:72:
25:7a:26:5e:fd:c8:39:12:08:bd:41:14:6c:8c:0e:
24:a7:86:83:47:cc:ce:fa:a0:a0:b6:c2:97:8c:09:
66:7f:db:5a:dc:17:88:3f:b7:e0:1b:b5:83:fa:96:
2d:47:3e:1a:c4:a3:40:13:fa:d4:11:ff:67:97:18:
6d:ea:97:ba:71:dd:df:71:db:c2:0f:fd:e5:2f:a8:
9c:db:31:12:e1:3b:63:28:48:86:a3:62:75:12:a2:
24:cf:71:f9:c8:29:4e:0d:76:30:e2:fc:ca:6b:74:
72:88:4f:66:b5:4b:8a:7a:03:8d:58:c7:2f:4a:33:
e1:fe:e9:96:6c:3a:62:e7:49:b7:98:b7:10:69:2d:
60:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:56:75:B0:4B:74:6E:E4:15:66:FD:31:C3:CB:AA:7C:61:E7:43:AC
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/TFZ1sEt0buQVZv0xw8uqfGHnQ6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.92.0/24
Signature Algorithm: sha256WithRSAEncryption
97:77:eb:cb:d2:fe:55:a1:ca:7e:1f:42:7d:c3:d3:c5:ec:d7:
b1:ca:9b:06:d4:ea:2d:2e:77:bc:3c:2b:63:2f:e1:8a:0d:5a:
83:6c:6c:24:c6:00:d7:e4:e3:b2:61:80:e9:ea:bc:38:d9:ab:
31:3e:b9:f8:da:38:16:01:f1:a1:76:85:6f:97:d5:ed:87:87:
7f:1c:b3:db:18:ae:82:4e:81:1c:70:0f:5c:15:ec:fd:f6:ef:
c8:ce:9c:72:a8:b8:73:d4:12:5b:e3:3a:22:f8:7c:af:4b:07:
e2:de:53:40:f3:82:b8:16:39:b8:4f:3f:34:91:7b:91:81:17:
f0:91:9d:33:b6:9f:d5:db:2d:f0:b7:56:94:58:bc:41:37:fb:
2e:be:0c:76:10:dc:50:90:e0:65:be:5e:2b:de:ac:13:ed:18:
fe:ca:84:5d:c0:21:a6:1e:1b:1b:04:71:0b:72:79:c6:7a:fe:
7e:70:89:98:59:6a:46:66:ef:15:eb:c1:83:6d:b4:b8:ec:31:
27:26:5d:a2:9a:93:06:70:26:be:15:29:b7:52:71:fa:a9:80:
df:3c:4e:03:cb:f1:e1:3d:df:03:8e:6d:d6:23:e4:a0:8b:75:
3b:06:e9:55:30:46:a5:dd:37:03:f0:84:d2:0c:75:ab:b6:1b:
bc:7e:e8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:30:53 2026 by rpki-client