Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/TEFZXyi-TdJJ-8c3Jqvj55TRRvo.roa
File: TEFZXyi-TdJJ-8c3Jqvj55TRRvo.roa (raw, json)
Hash identifier: Cxi33yaEo3wewSE6aiUk4NlD+VA3nEwo0JszGNifnSk=
Subject key identifier: 4C:41:59:5F:28:BE:4D:D2:49:FB:C7:37:26:AB:E3:E7:94:D1:46:FA
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 019D0A0D7F46B45214B10652D60A44EDBA1A
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/TEFZXyi-TdJJ-8c3Jqvj55TRRvo.roa
Signing time: Fri 20 Mar 2026 07:02:29 +0000
ROA not before: Fri 20 Mar 2026 07:02:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43350
IP address blocks: 194.143.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0a:0d:7f:46:b4:52:14:b1:06:52:d6:0a:44:ed:ba:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Mar 20 07:02:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c41595f28be4dd249fbc73726abe3e794d146fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:40:67:5f:4f:7f:8d:db:6c:0e:ea:e4:27:6c:
72:5f:3a:6b:c4:d9:30:61:f0:05:97:d6:60:a3:cc:
66:05:eb:71:38:f3:16:f8:51:8a:68:04:98:22:7c:
3e:26:18:ba:ba:e4:4f:ac:a9:b2:03:8a:12:92:f0:
08:9c:aa:a1:24:42:cf:46:0b:af:6a:78:ef:6b:e1:
81:48:e4:ff:8a:5f:d4:a0:b6:90:23:39:45:00:a4:
95:f0:40:cc:f3:0b:28:a6:9b:d1:92:42:b8:92:b9:
a0:ad:89:87:50:d7:74:97:c3:8e:3f:60:ee:c5:31:
03:bd:3a:6c:c6:8c:84:f1:8d:eb:f9:ac:e6:4f:24:
d5:8b:2a:b1:b6:74:5d:cf:37:12:5d:3a:67:a9:55:
f1:9b:a6:69:75:fc:45:b4:b9:49:c5:b1:22:a6:e6:
27:34:19:a1:f7:32:cb:5d:e2:11:d3:a5:40:b1:93:
0b:a5:86:44:08:fd:ef:f4:46:1c:bb:db:53:57:9e:
d4:0b:a1:d9:2b:69:77:78:df:e3:8e:8e:b1:75:17:
19:44:0b:cd:10:de:d3:46:e1:89:95:7e:d5:68:ba:
28:7b:0d:a6:7d:5f:c7:f1:56:6a:44:15:8e:76:57:
de:19:4d:4c:3f:cd:57:8e:94:f2:34:49:87:08:c1:
4e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:41:59:5F:28:BE:4D:D2:49:FB:C7:37:26:AB:E3:E7:94:D1:46:FA
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/TEFZXyi-TdJJ-8c3Jqvj55TRRvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.143.207.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:02:04:37:41:63:0f:8f:69:66:92:5b:d5:39:f8:11:c9:af:
10:d6:56:51:33:5f:66:de:80:64:e6:72:54:73:38:d4:cf:4c:
87:e2:6a:70:7d:29:81:e4:6e:cb:8e:22:30:70:1b:00:e6:7c:
ff:bb:d0:5a:0f:3a:22:51:dd:72:bd:e1:76:2e:c4:3a:94:d0:
ca:17:d6:4d:62:2b:9a:eb:9e:7f:a9:c9:f4:2c:c9:a9:df:71:
37:2d:0a:d9:82:e5:19:b2:2d:e8:03:52:00:fb:2e:4c:79:59:
0c:37:6b:ca:f2:44:16:3f:1d:47:a3:91:f0:aa:75:fd:96:c7:
2f:fe:ff:18:15:22:c5:4d:b8:ac:fd:88:b2:9b:8d:f7:54:c8:
ec:60:b6:d1:4b:ff:74:03:75:34:5b:27:b0:13:2e:ca:54:a2:
c4:43:a6:20:5b:4d:83:f7:e5:93:a6:c4:26:11:56:de:32:c3:
a5:fc:23:4c:06:8a:5d:10:02:37:4b:ac:3b:39:1f:0e:78:47:
2d:af:26:36:0e:67:2c:85:e7:93:42:af:36:7c:45:02:07:dd:
57:ef:33:59:af:a8:0d:96:9c:fc:b8:2c:b7:b8:28:c0:6a:2d:
e8:62:0f:4d:31:1e:3a:5a:f6:ef:a4:5f:b4:aa:a7:b1:f9:2f:
cd:7d:f3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:26:04 2026 by rpki-client