Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/TOC7yt8pwcnAu99gFYCGhlQGgZg.roa
File: TOC7yt8pwcnAu99gFYCGhlQGgZg.roa (raw, json)
Hash identifier: PsN09pvtWWcsEJydhp81MFNJ3GP97ijkJSu2F+CCjjs=
Subject key identifier: 4C:E0:BB:CA:DF:29:C1:C9:C0:BB:DF:60:15:80:86:86:54:06:81:98
Certificate issuer: /CN=9f41805e60dd9740844d1dc7a4c14aabab84851e
Certificate serial: 019F23683F015DE2217D89438ADB5677C616
Authority key identifier: 9F:41:80:5E:60:DD:97:40:84:4D:1D:C7:A4:C1:4A:AB:AB:84:85:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n0GAXmDdl0CETR3HpMFKq6uEhR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/TOC7yt8pwcnAu99gFYCGhlQGgZg.roa
Signing time: Thu 02 Jul 2026 15:17:42 +0000
ROA not before: Thu 02 Jul 2026 15:17:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2852
IP address blocks: 193.84.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/n0GAXmDdl0CETR3HpMFKq6uEhR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/n0GAXmDdl0CETR3HpMFKq6uEhR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/n0GAXmDdl0CETR3HpMFKq6uEhR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:3f:01:5d:e2:21:7d:89:43:8a:db:56:77:c6:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f41805e60dd9740844d1dc7a4c14aabab84851e
Validity
Not Before: Jul 2 15:17:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ce0bbcadf29c1c9c0bbdf601580868654068198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ea:08:bd:2e:cb:29:52:d7:a6:a2:01:f5:b1:
f1:78:2d:f1:99:9a:3a:e5:21:af:d5:53:ef:56:ff:
19:8b:ef:38:a5:a9:32:5f:2d:f7:34:80:80:d5:7d:
5a:93:f8:76:ac:6a:28:f8:9a:b9:58:20:87:ce:35:
8f:bd:47:d8:d9:f3:a1:9f:a7:8c:9f:f7:31:07:0c:
eb:fa:94:92:12:35:cf:3a:18:e1:c2:0f:16:ab:c7:
62:1e:7f:38:9c:4a:92:e6:49:db:09:79:5c:78:ca:
23:a5:0a:b8:a5:e0:70:7c:03:3c:5d:9b:ec:4b:da:
dd:bd:75:37:a0:be:16:97:33:c2:b6:1a:55:9b:fc:
f3:0b:22:47:ea:78:ed:02:8a:c1:ce:f2:c2:09:45:
bc:ee:e9:0f:12:51:b4:cf:77:e9:ed:1f:44:0e:65:
c0:ad:c9:be:64:eb:bc:7a:d0:92:7d:ed:64:56:e5:
07:53:bf:5f:c1:17:3a:7d:c6:72:62:e6:8f:04:d5:
83:7a:f9:0e:ea:2f:e3:19:09:58:52:e4:57:c5:43:
e0:67:30:f8:95:fa:95:46:f0:12:7f:19:38:2f:df:
20:9b:5e:7e:78:9c:df:a1:72:26:7c:ef:95:99:83:
ec:c5:63:cb:27:25:5f:0c:1f:ab:ac:cf:c6:ba:56:
a0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E0:BB:CA:DF:29:C1:C9:C0:BB:DF:60:15:80:86:86:54:06:81:98
X509v3 Authority Key Identifier:
keyid:9F:41:80:5E:60:DD:97:40:84:4D:1D:C7:A4:C1:4A:AB:AB:84:85:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n0GAXmDdl0CETR3HpMFKq6uEhR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/TOC7yt8pwcnAu99gFYCGhlQGgZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/n0GAXmDdl0CETR3HpMFKq6uEhR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.160.0/20
Signature Algorithm: sha256WithRSAEncryption
3a:de:c4:ac:3a:4e:0a:3a:10:c3:88:da:00:99:cd:eb:90:ac:
54:d1:47:a4:44:87:06:13:ab:5a:19:9b:f1:df:b5:29:e9:db:
ac:39:56:65:4f:3f:08:8a:6b:4a:a2:0f:f3:1b:13:12:26:b8:
b9:e6:d4:05:5b:39:9f:29:2c:96:dc:48:17:7a:61:3d:2b:d6:
09:39:50:53:da:21:77:f5:7e:11:5a:18:04:71:c0:f2:2a:5a:
3e:d3:42:16:f8:a9:72:f4:34:13:7d:bf:44:b6:8a:d3:79:2f:
b9:64:e4:29:c0:e0:cd:c4:72:b5:b5:f3:35:58:db:82:3d:2a:
29:37:3a:b0:4f:27:94:12:b1:85:28:7d:a2:d0:fe:36:e9:80:
22:4a:28:f4:6f:7c:fe:b5:48:09:45:05:9d:3f:72:88:0e:d3:
9b:50:d8:a8:ce:45:65:5f:33:28:fb:4b:cc:a1:29:65:50:e3:
c3:36:e5:72:e5:7c:b3:e0:7e:27:69:d2:f1:19:2a:82:dc:af:
02:1c:05:a2:ec:29:0a:61:1b:26:f6:72:d2:bb:8f:91:60:d9:
fb:6e:0b:f4:12:71:e5:44:2f:fe:2c:cb:3b:aa:22:28:e8:48:
59:f5:1e:70:0f:bf:54:54:50:25:9f:e4:bc:f9:40:fc:be:c2:
b0:0e:35:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:06:11 2026 by rpki-client