Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/tNIqzvrr7L2fB3Bu-Ndqg_rAVUA.roa
File: tNIqzvrr7L2fB3Bu-Ndqg_rAVUA.roa (raw, json)
Hash identifier: D9+GLgc4wf8AxXWfoZfpS7osQNrs9pjfmQOGTayaDkM=
Subject key identifier: B4:D2:2A:CE:FA:EB:EC:BD:9F:07:70:6E:F8:D7:6A:83:FA:C0:55:40
Certificate issuer: /CN=eae1e2c54dd3819a0e8c9ba1124b01c0a0cfa28e
Certificate serial: 019F2368DAD1008D4FD8C10612E58E26C9D0
Authority key identifier: EA:E1:E2:C5:4D:D3:81:9A:0E:8C:9B:A1:12:4B:01:C0:A0:CF:A2:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6uHixU3TgZoOjJuhEksBwKDPoo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/tNIqzvrr7L2fB3Bu-Ndqg_rAVUA.roa
Signing time: Thu 02 Jul 2026 15:18:22 +0000
ROA not before: Thu 02 Jul 2026 15:18:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39122
IP address blocks: 193.203.126.0/24 maxlen: 24
2a0d:1f00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/6uHixU3TgZoOjJuhEksBwKDPoo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/6uHixU3TgZoOjJuhEksBwKDPoo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/6uHixU3TgZoOjJuhEksBwKDPoo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:da:d1:00:8d:4f:d8:c1:06:12:e5:8e:26:c9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eae1e2c54dd3819a0e8c9ba1124b01c0a0cfa28e
Validity
Not Before: Jul 2 15:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4d22acefaebecbd9f07706ef8d76a83fac05540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:90:a3:a2:f3:a5:99:f1:8c:ec:8e:d4:cf:2d:
49:17:75:f6:76:b8:be:35:c0:c3:4c:3c:31:6f:66:
8a:92:60:51:5f:15:fe:6d:f1:a8:40:de:39:20:5e:
db:68:b8:31:9b:65:a1:9c:3a:d0:cf:10:76:3c:d1:
a5:2f:ae:49:92:d4:5c:70:6c:7c:bf:b2:e7:89:89:
93:01:02:5f:0d:03:15:0b:9a:ce:6d:3f:a0:7a:78:
e4:06:30:f4:4f:1f:5b:28:6b:30:7a:aa:bb:7d:4b:
2d:d9:18:b2:eb:08:b9:8d:d3:b0:85:35:01:76:96:
ec:9d:4e:70:41:35:13:58:d3:fd:0f:93:31:c5:07:
0c:f0:fd:c7:4e:e2:2f:51:76:05:06:e5:a5:6e:59:
e1:be:43:0d:b2:4e:7c:14:95:fc:48:87:3e:16:da:
d5:f5:7e:6f:58:58:fd:cf:ca:19:94:4c:75:00:d4:
f0:eb:6a:d6:7e:45:eb:55:f6:a0:bf:a7:c4:ef:ec:
19:3e:6c:72:9e:ed:3e:4e:d0:dc:fc:9f:fb:37:46:
41:d0:be:5f:86:d3:8f:5e:6e:df:94:a2:64:6f:3a:
aa:b3:d0:98:71:0b:46:15:a9:5b:15:67:9f:0a:bb:
92:74:42:d8:42:51:71:2f:1a:28:fe:87:71:9a:6d:
05:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D2:2A:CE:FA:EB:EC:BD:9F:07:70:6E:F8:D7:6A:83:FA:C0:55:40
X509v3 Authority Key Identifier:
keyid:EA:E1:E2:C5:4D:D3:81:9A:0E:8C:9B:A1:12:4B:01:C0:A0:CF:A2:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6uHixU3TgZoOjJuhEksBwKDPoo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/tNIqzvrr7L2fB3Bu-Ndqg_rAVUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/6uHixU3TgZoOjJuhEksBwKDPoo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.126.0/24
IPv6:
2a0d:1f00::/29
Signature Algorithm: sha256WithRSAEncryption
31:3b:b4:4b:07:7f:b7:2f:d9:c8:fa:f2:33:bf:9e:4d:0c:aa:
99:3f:f8:27:5e:af:84:81:2f:b1:4b:36:05:ef:45:ff:2e:23:
02:96:7b:2d:d6:c7:a5:ec:ea:95:2e:04:c0:fa:1e:29:47:bb:
a3:ee:45:e7:85:c9:df:c8:6e:fe:be:5d:41:39:e6:25:99:4f:
7f:83:3b:63:9a:aa:4f:7f:39:8d:34:41:bf:be:5b:58:ff:02:
8a:d3:9e:ed:28:6d:93:bd:09:82:6a:21:67:6b:03:96:56:50:
d0:39:a4:1d:18:62:0a:48:a3:05:a2:60:82:70:17:c6:0c:59:
1f:5b:ec:03:a9:92:7a:e5:37:ad:da:72:9d:53:8a:43:08:bd:
30:58:d5:ff:3a:27:e5:79:69:69:ad:4b:c5:b9:b5:5f:63:2a:
45:ee:d0:4c:8e:1b:e7:2f:34:3c:8b:50:b1:6a:9d:02:f7:62:
20:b6:0c:8d:ba:47:4c:17:f0:fb:57:0f:8d:f4:c9:64:f6:8e:
0c:00:b5:6b:10:d0:c1:e4:a8:a6:1a:30:cf:45:f0:b3:1f:d7:
ca:ec:b1:db:c7:38:f1:9e:5f:65:ea:da:f4:d2:24:c1:50:29:
d3:89:8d:1f:f8:10:6f:c1:09:86:8f:e5:bd:07:0b:67:ac:a7:
62:2a:ea:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:25:26 2026 by rpki-client