Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/TNljeYPXxYIj5lo4d5l5EQLTZdU.roa
File: TNljeYPXxYIj5lo4d5l5EQLTZdU.roa (raw, json)
Hash identifier: CfzLFBITnlNK1XZxNhkSFtNXwo43Z88uKiUP3w2UsN0=
Subject key identifier: 4C:D9:63:79:83:D7:C5:82:23:E6:5A:38:77:99:79:11:02:D3:65:D5
Certificate issuer: /CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Certificate serial: 019E1655B85E99E93658F0DDC9BDA432347B
Authority key identifier: 91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/TNljeYPXxYIj5lo4d5l5EQLTZdU.roa
Signing time: Mon 11 May 2026 09:19:36 +0000
ROA not before: Mon 11 May 2026 09:19:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6830
IP address blocks: 212.83.64.0/22 maxlen: 22
212.83.68.0/22 maxlen: 22
212.142.0.0/18 maxlen: 18
212.142.0.0/19 maxlen: 19
212.142.32.0/19 maxlen: 19
213.46.0.0/16 maxlen: 16
213.46.0.0/17 maxlen: 17
213.46.60.0/22 maxlen: 22
213.46.128.0/17 maxlen: 17
213.46.160.0/19 maxlen: 19
213.46.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:16:55:b8:5e:99:e9:36:58:f0:dd:c9:bd:a4:32:34:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Validity
Not Before: May 11 09:19:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4cd9637983d7c58223e65a387799791102d365d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6a:0c:da:8d:5d:f5:2c:85:b3:a7:69:5c:2d:
70:ed:8d:5c:82:89:6e:74:d2:88:d5:ae:37:e5:17:
0a:3f:da:3e:95:70:f1:45:bb:5a:5f:bb:4a:b8:6f:
06:39:3d:13:c7:54:cd:8a:d2:f4:34:ca:21:a4:d8:
ca:08:23:45:3f:c5:e8:dd:13:b3:c1:43:8a:35:87:
e9:b3:54:a8:c2:31:60:b3:ac:9a:15:44:34:d2:8a:
66:d8:7d:9e:1d:39:88:3e:54:1d:c3:c7:f4:39:e6:
c7:b0:b3:57:77:4c:9f:9c:61:4d:67:16:a6:f9:0b:
ea:36:b6:ea:79:68:e6:cb:44:9e:95:54:1c:5c:63:
4d:c8:06:c6:26:bc:a2:d6:e1:1f:ee:ef:dc:e7:0e:
48:92:ce:af:e2:80:db:bf:11:8b:9e:37:92:7d:96:
53:63:81:7e:90:30:1c:5a:ee:4d:2f:21:8c:ce:d7:
1f:04:93:e9:41:5a:54:70:93:c8:8b:79:3b:e5:71:
5e:b6:5a:5a:e9:ac:da:70:44:5d:28:fb:f5:6c:da:
fa:59:a8:41:43:3a:ab:e5:2d:51:86:d7:ed:f9:ac:
38:b6:7b:8c:e7:b6:87:74:de:ba:c9:18:ac:4d:0c:
89:b5:78:a4:a5:2f:91:4f:5f:ba:2f:63:51:9e:66:
b9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D9:63:79:83:D7:C5:82:23:E6:5A:38:77:99:79:11:02:D3:65:D5
X509v3 Authority Key Identifier:
keyid:91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/TNljeYPXxYIj5lo4d5l5EQLTZdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.83.64.0/21
212.142.0.0/18
213.46.0.0/16
Signature Algorithm: sha256WithRSAEncryption
40:30:e9:48:a9:e4:65:76:72:2d:7a:a2:3d:ed:17:15:ee:fe:
cf:ee:d9:4f:8d:91:9b:35:50:17:03:73:8b:fa:6e:9e:0b:e1:
e9:05:39:66:13:b5:51:5e:30:12:72:ea:a7:75:b9:82:c2:17:
f4:70:1c:25:ac:ef:94:61:f5:ed:79:27:a6:03:64:15:e5:0a:
f5:1a:e5:df:43:bb:35:52:3b:bf:31:2d:c7:55:c3:03:37:74:
25:24:1a:47:23:a2:90:f3:b1:05:d0:9e:64:a3:cd:e7:11:eb:
ff:1a:99:78:28:f4:ef:a7:71:21:24:c2:fc:e0:73:1e:26:b2:
ee:2e:07:dd:c6:7d:12:00:b2:88:fc:0c:ea:b8:e3:1f:f3:5f:
9e:bf:df:3e:52:e5:f3:55:28:40:73:27:d6:06:f7:6f:1f:03:
dc:d6:09:0c:3a:12:e1:74:97:79:67:b6:47:df:11:0b:90:31:
03:3a:1b:c5:d4:77:e5:5f:4a:65:c9:ef:24:29:f4:15:e9:14:
69:a7:8a:fc:bf:32:15:26:31:40:20:e1:d1:6e:83:3c:9c:d3:
d4:d9:d0:4b:43:2f:cf:a3:41:72:3c:cd:39:29:2b:d0:d2:23:
f7:44:3a:22:18:0c:9e:65:2b:c7:87:3a:ef:14:c7:b7:2d:8d:
13:15:45:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:34:20 2026 by rpki-client