Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Tcj-1Yf1chGwTW09YiuA4-16Wf8.roa
File: Tcj-1Yf1chGwTW09YiuA4-16Wf8.roa (raw, json)
Hash identifier: YBfMpQ9bfjUhKqeaE1JD0KjMwgZI0oxJ8pAX1/aQN8k=
Subject key identifier: 4D:C8:FE:D5:87:F5:72:11:B0:4D:6D:3D:62:2B:80:E3:ED:7A:59:FF
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0D94BB0B9FD24E0A75E6B7473F0E0E3A6
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Tcj-1Yf1chGwTW09YiuA4-16Wf8.roa
Signing time: Fri 25 Sep 2026 16:00:11 +0000
ROA not before: Fri 25 Sep 2026 16:00:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218661
IP address blocks: 200.181.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4b:b0:b9:fd:24:e0:a7:5e:6b:74:73:f0:e0:e3:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 25 16:00:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4dc8fed587f57211b04d6d3d622b80e3ed7a59ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:03:24:7b:4d:25:95:71:12:88:a4:95:a3:ff:
f9:e4:39:39:6e:46:fc:32:f0:48:fd:ca:34:1b:97:
e7:bc:fa:dd:62:93:29:74:d0:c0:89:71:1d:98:57:
c0:6c:a3:e2:e7:88:12:63:cc:36:d9:0c:54:70:0d:
bd:a4:33:bd:1d:f5:65:b7:3e:82:38:34:9a:45:c4:
11:62:b4:03:57:dd:a4:fb:ec:4a:5c:f4:c7:77:04:
a6:a3:f0:c9:d0:cb:b8:b7:c1:6c:a6:47:ff:b8:11:
c8:3a:a6:ef:13:4f:82:41:cd:46:66:d0:5d:3c:44:
ef:a7:c5:80:bd:0c:11:6c:eb:c0:88:62:16:43:af:
a2:a2:fd:e8:77:0a:5a:02:d4:79:a6:b6:0a:4f:e6:
77:f8:a5:6f:f0:13:b8:f7:a3:eb:35:25:24:ec:a3:
85:4d:68:25:49:41:5a:57:dd:31:0d:a0:3d:0f:50:
2b:1b:88:79:08:28:e7:da:bd:84:a8:25:fd:7c:0f:
ca:8b:0f:b0:78:49:28:d0:79:23:b8:e5:44:1e:04:
58:a1:b8:29:d9:57:bc:d2:f7:2f:e0:b6:1c:dc:84:
e8:9f:de:f4:63:24:16:94:03:f8:f1:97:ed:d0:2f:
14:6a:72:ec:d0:db:dc:0d:90:e8:f3:7e:70:3f:8b:
00:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C8:FE:D5:87:F5:72:11:B0:4D:6D:3D:62:2B:80:E3:ED:7A:59:FF
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Tcj-1Yf1chGwTW09YiuA4-16Wf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.181.87.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:d7:de:61:6e:f0:72:cd:26:ca:bd:49:36:18:f6:a3:8b:2e:
bc:5c:35:cb:7d:c8:01:51:ea:a6:ea:25:e9:a8:7a:d1:00:78:
3d:5c:87:52:c3:68:f1:ea:13:9f:32:41:b4:32:0b:77:be:d9:
64:76:e8:19:01:d1:61:59:24:f8:48:0e:fc:b1:7f:c1:65:fe:
1b:01:db:50:e1:ba:87:c0:17:6f:5e:a1:79:34:35:38:71:0d:
bc:a8:c0:45:49:ee:5f:4f:8a:bf:4c:f7:2f:95:aa:71:8b:54:
96:a0:ca:ea:b7:a3:91:5f:69:77:55:c3:06:2c:9b:93:71:26:
28:25:1a:b7:83:35:7b:2c:9c:fd:e5:d1:7e:17:b3:16:97:d0:
43:a7:3e:93:05:6e:b2:bd:23:b5:b8:4d:68:31:7f:5c:d2:20:
e7:9a:66:42:93:14:c1:1d:9c:3c:d9:ce:fd:bd:ee:a0:1b:3b:
bf:87:e4:f2:91:d8:be:a6:24:ef:24:54:38:78:47:50:b7:95:
60:77:2a:69:71:09:fe:70:92:c5:b4:49:4b:42:a1:66:f4:db:
b3:dc:0f:95:1c:19:cc:9f:ea:3e:0d:d1:d3:40:a9:c5:d1:90:
1b:c0:b5:80:30:10:0e:35:b2:9d:db:8f:b5:96:58:f5:dc:ef:
67:3d:38:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:01:47 2026 by rpki-client